Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa
File: M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa (raw, json)
Hash identifier: k2csM76iOEYYvfJGPWNSWBC1tV/ZABiRppSh9tx3Xnc=
Subject key identifier: 33:E2:6D:AA:FB:D7:2B:83:C4:04:9E:24:F9:3E:F1:44:E6:B4:1C:8E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1851
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa
Signing time: Fri 17 Jan 2025 01:24:54 +0000
ROA not before: Fri 17 Jan 2025 01:24:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.6.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6225 (0x1851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=33E26DAAFBD72B83C4049E24F93EF144E6B41C8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1f:71:cc:4a:3f:04:d0:d1:d7:93:8a:59:e2:
fa:56:2c:a6:22:49:a8:45:e8:8d:42:8b:06:27:ce:
1f:ab:53:3b:ae:2a:18:49:16:d2:2d:ea:8a:19:c4:
6f:6e:16:ef:17:83:7b:93:cb:ee:e5:2e:29:7c:71:
6f:16:6e:12:22:80:a3:fd:3d:fa:04:60:1c:ce:0d:
f9:cb:24:ad:0b:0e:12:2c:7a:a5:4d:b4:6d:7b:d6:
14:71:03:d2:14:8f:2d:07:4e:c8:2f:c5:bd:f0:f5:
85:68:fd:e2:2b:7a:8f:9d:ab:2a:91:c7:ab:58:bd:
81:f0:47:a5:71:ec:d9:3f:e7:32:26:57:9b:59:24:
df:7e:18:ce:9e:2b:f2:21:00:e7:30:97:6e:d8:76:
5d:85:50:27:55:a7:72:4c:5f:e9:74:f5:0c:7a:e5:
c3:f0:c6:6d:38:57:59:2c:8f:e4:01:d5:ea:b3:b6:
ed:9e:b9:ba:6d:69:4b:19:f2:08:83:39:cc:89:b6:
88:a3:49:22:f7:11:c0:de:b8:06:37:e6:da:3a:c1:
f4:c7:eb:0d:29:c6:25:ec:69:e0:6f:d7:20:ae:29:
38:b2:df:a8:a9:00:68:8e:76:d5:ca:3b:35:ed:57:
34:0e:fd:2c:68:31:b7:85:73:fc:95:2b:d4:0f:fd:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:6D:AA:FB:D7:2B:83:C4:04:9E:24:F9:3E:F1:44:E6:B4:1C:8E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M-JtqvvXK4PEBJ4k-T7xROa0HI4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d5:84:2f:d4:2a:8e:65:32:53:2a:18:09:9a:ba:d8:9e:cd:
98:ee:d0:56:eb:e0:a2:05:ad:d3:aa:13:a8:fb:1f:1b:0c:be:
b0:c8:da:3f:a3:3c:45:87:ea:19:eb:22:82:bf:f3:63:16:e3:
e0:81:ad:b8:91:7f:e2:92:9d:06:21:35:70:7e:1c:8b:14:9b:
c8:fb:e1:b7:ae:da:fe:e4:2c:e8:db:8e:87:42:e7:35:8f:06:
61:24:1e:71:31:61:ea:3a:43:a6:92:e3:0d:32:f1:c5:a8:62:
c9:4a:85:37:e2:fd:a6:57:96:d6:cc:28:48:5a:e6:d1:93:bd:
b9:fb:ac:b6:5d:8a:54:78:1a:63:c6:34:13:fd:5a:75:33:9e:
26:5a:b4:11:45:10:7c:fe:d3:94:da:46:14:e0:ad:e7:19:ea:
fb:5d:d6:0f:a1:81:e5:66:6c:76:0f:b5:f2:ae:8a:cb:a8:e4:
5e:d6:45:92:44:cd:f8:e1:dd:34:31:03:9a:16:ad:c8:cd:0c:
33:02:4b:0d:87:29:3d:2a:10:3a:e5:32:09:e0:63:cf:e6:17:
8b:ed:e0:d5:19:4a:50:45:d7:a6:e9:9e:63:81:bb:7e:1d:0e:
93:4d:ac:b9:9a:6c:20:b5:84:af:a4:ba:da:24:bd:f3:31:70:
e7:a1:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:28 2025 by rpki-client