Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DNM7uyLN-2DOP6ETr9OjHdrmGto.roa
File: DNM7uyLN-2DOP6ETr9OjHdrmGto.roa (raw, json)
Hash identifier: MyNIj3J9B3MSEjsrfkiAERFl4qSRV5n3j+N6EmVqjYA=
Subject key identifier: 0C:D3:3B:BB:22:CD:FB:60:CE:3F:A1:13:AF:D3:A3:1D:DA:E6:1A:DA
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 180C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DNM7uyLN-2DOP6ETr9OjHdrmGto.roa
Signing time: Fri 17 Jan 2025 01:24:29 +0000
ROA not before: Fri 17 Jan 2025 01:24:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0CD33BBB22CDFB60CE3FA113AFD3A31DDAE61ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:69:fd:1f:58:e8:46:87:22:b2:a4:81:85:
0d:e4:ff:11:d7:96:fc:68:64:5e:92:96:f7:43:a1:
d5:51:14:a8:7b:2b:e4:02:72:a6:e6:a4:79:24:ba:
82:fd:8e:ce:a7:3c:87:e4:0c:d1:7c:6b:15:b8:58:
65:f4:58:34:de:14:7a:0e:5e:40:48:46:f8:8a:3b:
fb:d2:70:b4:e9:41:4d:89:f9:a4:94:5d:dc:5c:cb:
66:16:d6:28:49:39:94:8f:e1:43:8a:49:af:d4:b7:
09:23:26:25:c0:d4:fd:c5:ba:4a:7f:09:b5:02:41:
1f:61:0d:c1:a1:4a:fb:28:81:41:a9:96:cc:98:a1:
1e:17:81:d8:36:2b:16:2f:ea:40:b2:7d:02:a9:e9:
9f:73:79:d5:f8:82:84:ee:fd:e2:50:6c:b7:34:97:
2c:09:b9:5f:ed:70:b5:b5:b6:66:b0:7b:ee:ad:95:
1a:71:29:f4:ea:16:f7:3c:a9:4d:3b:a5:6b:cc:13:
d1:5b:27:d6:f1:fc:66:12:c8:7a:e7:40:b3:28:53:
6e:6b:57:ac:2c:8e:d0:6a:8d:95:6e:db:fd:ad:ec:
a0:6b:8f:8b:bd:e9:86:16:7a:f3:ec:51:6b:03:8a:
87:f0:f8:ee:9a:26:cf:1a:37:7d:4b:3f:90:33:11:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:3B:BB:22:CD:FB:60:CE:3F:A1:13:AF:D3:A3:1D:DA:E6:1A:DA
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DNM7uyLN-2DOP6ETr9OjHdrmGto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b7:9c:69:04:47:2c:6e:47:3e:64:83:b8:35:9d:31:77:e4:
e9:b8:ac:d2:42:b9:4b:96:59:e3:4e:d8:77:83:4e:d5:15:c6:
a3:9b:ed:2e:00:0c:44:70:03:72:c2:70:2a:bc:be:58:b0:e4:
4a:46:b2:b3:57:61:f4:cb:81:f7:d5:b2:10:75:4e:bc:51:ae:
1e:30:44:6f:a7:6f:22:9c:5a:71:42:6f:e5:3e:87:48:3d:7d:
15:54:07:96:d8:32:e3:44:b9:2b:6a:52:aa:96:4f:95:64:a1:
0b:df:eb:9d:d2:80:3b:b1:57:af:ac:8e:3b:c5:fc:89:61:4c:
02:be:de:ee:1d:67:3c:bc:81:9e:85:43:b7:ad:e8:d7:90:31:
55:1b:d4:c4:2b:a4:87:a1:3c:3f:24:b5:b9:60:bc:38:cc:9c:
f1:01:fe:2a:43:8e:a1:bf:d2:be:69:bc:99:97:0a:ed:59:17:
88:20:6d:77:23:72:24:08:21:85:c4:41:df:cf:c5:bf:3a:26:
a8:49:aa:a6:03:8e:7f:e7:70:42:60:03:e6:77:5a:16:bb:39:
3c:ac:79:3d:e8:c3:93:a0:6e:3b:2d:79:c5:8b:e8:c2:8b:6b:
61:bf:e1:7d:83:92:69:56:4e:a2:26:46:c7:03:47:26:64:9e:
33:f2:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:51 2025 by rpki-client