Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa
File: 9vRXwR4njOWIArqIlUDPe_2NMRk.roa (raw, json)
Hash identifier: W60sJPrABKdOlAV6OB2Xr7WsFNNzAfMEgmwWZQqujAk=
Subject key identifier: F6:F4:57:C1:1E:27:8C:E5:88:02:BA:88:95:40:CF:7B:FD:8D:31:19
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 187A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa
Signing time: Fri 17 Jan 2025 01:25:07 +0000
ROA not before: Fri 17 Jan 2025 01:25:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6266 (0x187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F6F457C11E278CE58802BA889540CF7BFD8D3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:b0:71:5a:de:6b:84:0d:c2:5a:8e:80:12:
c0:9e:18:11:ae:b4:13:8e:b1:6e:6d:97:1e:33:5c:
f4:c9:fb:52:64:88:6e:b4:c8:47:89:88:38:e7:50:
3a:e9:d8:00:25:d6:5d:98:00:9b:65:8d:82:50:e5:
d8:d3:17:b3:38:7c:fc:b9:f2:5c:78:f3:ac:0c:ea:
ae:db:f5:59:ae:4e:58:bd:ce:39:6d:15:57:ea:6a:
7b:b4:37:16:a3:eb:1b:0e:c4:c8:ac:81:54:5e:35:
65:ff:f6:61:9c:2a:f7:52:73:b5:22:77:dd:52:f3:
5b:aa:6b:c2:90:ef:06:85:b0:10:2b:67:03:b9:4e:
94:76:c6:e9:1c:4f:aa:5b:1a:c0:a8:09:e8:96:0d:
ec:85:03:69:ad:a1:4d:53:1f:4d:55:40:2a:63:5c:
5d:7e:83:ba:a7:4c:3f:12:40:3d:37:33:b9:b8:9c:
b4:d8:78:90:e4:6f:ad:99:1f:9e:0d:65:4f:21:45:
b1:14:b9:08:ed:67:d4:73:9b:ca:dd:02:8e:23:92:
92:7d:5b:79:26:d8:5b:80:82:b6:58:c3:55:14:ad:
b4:2d:d1:84:1e:10:52:80:3e:20:b7:f2:bb:8d:d0:
e6:a7:3c:a7:17:d6:25:5b:14:92:14:52:c9:61:12:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:57:C1:1E:27:8C:E5:88:02:BA:88:95:40:CF:7B:FD:8D:31:19
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9vRXwR4njOWIArqIlUDPe_2NMRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:de:d6:21:be:f5:3e:86:6b:05:04:6f:89:a5:77:b1:75:0f:
a4:ce:de:d3:ac:eb:a7:c4:21:ae:7e:f0:77:c6:de:3a:cd:f8:
44:ec:8f:6e:71:8d:75:6e:f8:f4:27:9d:87:08:9e:93:32:eb:
ea:32:dc:e2:7e:92:11:a2:82:c7:de:1f:ee:ef:19:73:ad:5f:
9f:7d:50:53:df:b1:f3:86:8d:31:a8:69:6c:67:fe:86:fc:95:
73:fb:ed:27:52:f7:19:26:6f:29:4d:a2:c9:96:bc:ff:f3:86:
b3:70:49:f7:f6:6e:91:25:0c:c6:93:d6:d0:fb:31:c7:48:bb:
df:ab:cc:54:84:70:d2:88:03:82:b1:7f:f3:49:7a:be:fa:83:
11:60:f9:a4:07:bc:a5:eb:16:c9:c5:a2:d7:eb:e0:9f:6f:e3:
72:23:ad:80:45:b3:cb:a2:38:09:2b:93:6d:e5:a3:6f:93:5d:
31:3d:0f:66:4f:f3:2a:ca:46:a0:c6:99:4b:fe:b4:ae:aa:0c:
d3:17:4a:fe:74:30:42:c1:bf:ce:35:3b:a7:58:3c:12:8c:4b:
41:99:14:67:2b:9d:bf:2d:ae:4b:ed:6e:b4:08:d3:16:01:64:
60:93:d4:f6:34:21:19:cd:ae:d6:6b:6a:71:62:87:6a:79:fd:
9e:0c:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:51 2025 by rpki-client