Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa
File: C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa (raw, json)
Hash identifier: VNpOtNOONozvg1HDaXqfHISaDXXeAHgk8IlaEMk4mLI=
Subject key identifier: 0B:8B:3C:A1:07:34:AC:AD:47:0D:4E:63:4F:A7:A1:A5:C5:C6:04:60
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1811
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa
Signing time: Fri 17 Jan 2025 01:24:31 +0000
ROA not before: Fri 17 Jan 2025 01:24:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6161 (0x1811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0B8B3CA10734ACAD470D4E634FA7A1A5C5C60460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:50:ae:4f:5a:87:02:a4:90:84:58:60:9a:
57:8b:40:fd:57:74:6b:b1:17:b5:93:d0:4c:e5:44:
2e:68:63:f8:a2:d0:c1:0f:c3:1c:4c:87:89:14:e4:
0d:ef:64:ea:61:7d:f0:db:26:80:80:23:ea:b1:d7:
93:b7:12:7e:e7:53:96:18:bb:99:4a:3f:b4:65:5e:
bb:71:ae:9c:0b:bb:af:c0:ba:21:d5:05:dc:09:3e:
54:e7:55:ae:6f:e3:e8:e8:b6:45:13:9a:80:c4:53:
69:c5:59:8a:61:53:cb:c8:60:54:2d:5f:c0:fb:9e:
34:d6:86:bd:6f:9c:04:22:87:9e:d4:39:f9:89:a9:
da:7e:e8:bc:99:4e:9a:35:c8:bb:84:52:6a:27:4e:
13:59:be:bd:fa:95:16:f7:6c:7c:f0:4b:19:32:80:
9b:7e:c0:a9:3c:de:a3:a5:c2:85:07:99:10:13:2c:
0b:ed:3d:48:df:fd:61:c3:92:d3:10:7d:d9:1c:16:
90:7a:14:59:1b:a7:dd:db:0e:42:a5:79:3f:61:48:
a7:24:78:53:52:3a:f2:ab:7a:d9:5a:79:5d:1c:d7:
b7:83:87:f1:44:93:8f:29:0b:89:4c:0b:a2:bb:03:
91:72:25:6b:1d:c6:58:e1:ed:2a:20:31:d0:cb:59:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:3C:A1:07:34:AC:AD:47:0D:4E:63:4F:A7:A1:A5:C5:C6:04:60
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/C4s8oQc0rK1HDU5jT6ehpcXGBGA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:aa:52:c4:d4:9d:26:73:98:c5:0d:44:62:20:8d:0a:2e:e6:
f6:39:56:34:65:94:64:c6:f8:39:b6:2b:b0:0d:8d:4b:3e:cf:
dc:50:b3:8b:aa:78:79:f9:78:c4:dc:00:38:b9:3a:79:5d:d0:
15:1b:ef:3e:ef:87:5c:80:19:d1:94:2b:8e:65:68:f5:da:37:
6b:0d:1e:e4:b3:f9:6d:8b:72:f4:8b:16:20:b1:df:00:18:5f:
da:95:1d:05:86:4a:71:c4:9b:47:00:08:06:8a:71:2e:87:41:
4f:14:81:5e:ec:72:28:b4:d9:ae:9d:68:c8:9a:ce:5c:67:52:
0e:63:96:d7:82:af:ac:6e:0a:f2:bd:fe:d7:20:49:aa:28:d1:
69:1c:78:3f:1b:3f:09:2e:63:38:93:1a:8b:f2:a8:59:14:87:
1b:b0:20:10:dc:b6:d6:15:c5:46:82:ec:9a:74:2e:5b:91:1a:
26:d4:64:8b:bf:5b:d9:2d:b4:e7:f1:50:0e:f7:fc:7e:65:b8:
e1:71:f3:e8:2a:3b:aa:65:ef:57:3b:8c:b4:1b:eb:93:3f:82:
6a:21:fb:a9:57:8e:56:3e:4c:88:1b:a5:41:57:39:f6:32:95:
42:23:7a:06:f6:7b:6d:ae:f7:22:b1:3f:d8:c9:18:8b:54:75:
bf:1b:08:d9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBCOEIzQ0ExMDczNEFD
QUQ0NzBENEU2MzRGQTdBMUE1QzVDNjA0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXTVCuT1qHAqSQhFhgmleLQP1XdGuxF7WT0EzlRC5oY/ii0MEP
wxxMh4kU5A3vZOphffDbJoCAI+qx15O3En7nU5YYu5lKP7RlXrtxrpwLu6/AuiHV
BdwJPlTnVa5v4+jotkUTmoDEU2nFWYphU8vIYFQtX8D7njTWhr1vnAQih57UOfmJ
qdp+6LyZTpo1yLuEUmonThNZvr36lRb3bHzwSxkygJt+wKk83qOlwoUHmRATLAvt
PUjf/WHDktMQfdkcFpB6FFkbp93bDkKleT9hSKckeFNSOvKretlaeV0c17eDh/FE
k48pC4lMC6K7A5FyJWsdxljh7SogMdDLWW4fAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUC4s8oQc0rK1HDU5jT6ehpcXGBGAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0M0czhvUWMwcksxSERV
NWpUNmVocGNYR0JHQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3QQwDQYJKoZIhvcNAQELBQADggEBAMeqUsTUnSZzmMUNRGIgjQou5vY5VjRl
lGTG+Dm2K7ANjUs+z9xQs4uqeHn5eMTcADi5Onld0BUb7z7vh1yAGdGUK45laPXa
N2sNHuSz+W2LcvSLFiCx3wAYX9qVHQWGSnHEm0cACAaKcS6HQU8UgV7scii02a6d
aMiazlxnUg5jlteCr6xuCvK9/tcgSaoo0WkceD8bPwkuYziTGovyqFkUhxuwIBDc
ttYVxUaC7Jp0LluRGibUZIu/W9kttOfxUA73/H5luOFx8+gqO6pl71c7jLQb65M/
gmoh+6lXjlY+TIgbpUFXOfYylUIjegb2e22u9yKxP9jJGItUdb8bCNk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:11 2025 by rpki-client