Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/M9nNYxQN_siUJU8Qh3wa1KXCLTI.roa
File: M9nNYxQN_siUJU8Qh3wa1KXCLTI.roa (raw, json)
Hash identifier: gAUYer8s1KWIaZ93Nev0IvzanPgP/cYZ3UwCzMdrypQ=
Subject key identifier: 33:D9:CD:63:14:0D:FE:C8:94:25:4F:10:87:7C:1A:D4:A5:C2:2D:32
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1864
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M9nNYxQN_siUJU8Qh3wa1KXCLTI.roa
Signing time: Fri 17 Jan 2025 01:25:01 +0000
ROA not before: Fri 17 Jan 2025 01:25:01 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.220.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6244 (0x1864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:01 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=33D9CD63140DFEC894254F10877C1AD4A5C22D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:ce:e2:52:6e:73:60:75:71:64:2c:c8:3d:
0c:46:8a:73:7a:d2:72:4b:39:83:95:fa:de:5b:99:
3f:47:e2:9a:7f:c6:03:b8:d8:ac:b7:23:78:63:7f:
2a:a5:88:9c:42:a5:7e:62:a2:11:43:ca:8e:98:4f:
50:24:ed:94:d3:5e:6a:16:9f:d9:cd:9e:f5:25:ad:
78:df:13:60:0f:e3:78:bf:34:9c:38:b7:da:14:16:
f3:d9:3b:4a:db:a7:cf:07:a4:83:88:23:9b:e1:28:
db:e1:69:bb:d5:9e:58:40:79:40:c8:e3:8c:07:35:
f6:ed:f1:e8:3b:e2:36:78:2b:4d:27:6a:15:cf:52:
b3:8e:b7:20:39:6b:09:37:c6:90:06:39:5e:59:91:
d8:6a:77:57:b9:91:d0:02:6e:82:a1:5f:1f:9d:52:
39:b9:f0:c2:63:4f:c5:9b:37:7d:c5:98:45:16:e4:
68:c7:25:a3:bc:8f:e6:61:a8:db:fd:6c:d4:54:0f:
77:17:f5:53:65:9d:d3:ca:cb:13:fe:c7:89:12:77:
9b:5e:82:6b:dd:03:a5:38:4a:05:fb:19:af:f2:b6:
d7:41:68:dc:12:71:10:7a:b1:95:a3:fd:3c:a0:52:
0c:b9:b2:79:81:95:0f:0d:73:f8:ce:ff:22:d0:7f:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:CD:63:14:0D:FE:C8:94:25:4F:10:87:7C:1A:D4:A5:C2:2D:32
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/M9nNYxQN_siUJU8Qh3wa1KXCLTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.248.0/22
Signature Algorithm: sha256WithRSAEncryption
16:23:26:74:c7:84:04:f6:6e:44:91:56:4e:b1:d8:09:7d:e4:
c0:8a:8f:60:f6:f6:aa:a6:86:c5:87:13:83:ad:f9:f9:b4:11:
db:f8:a2:78:45:c3:c2:2c:cc:3e:26:ba:1f:f6:f8:d2:20:03:
e8:a0:c2:f3:82:b0:ca:18:6f:09:c1:5c:8d:bb:05:b9:ae:78:
a8:56:1e:a4:96:d8:99:6f:18:6e:e0:68:85:bd:ac:eb:1e:c4:
5d:6b:03:a5:fb:10:66:07:a5:8c:da:0a:3a:5d:89:d8:b8:36:
87:87:fd:eb:d1:1e:fa:68:49:dd:ad:09:9d:39:db:b0:61:0a:
19:9c:ff:4a:36:60:e6:68:af:51:d4:7d:ab:89:2d:0b:46:41:
25:55:4d:39:92:e2:ae:da:88:43:29:ff:d3:a8:06:f1:2c:05:
70:4b:b8:2b:d9:f7:70:e5:4f:b8:cf:0f:b0:56:31:83:09:a8:
c7:37:09:39:cf:8a:77:6c:70:52:b8:15:34:7b:1e:5d:b6:f5:
d0:e7:9f:56:a2:43:41:52:cf:af:84:bf:2b:9a:45:16:a5:f1:
9a:81:55:53:a5:03:21:b4:38:2b:af:65:52:35:14:7a:a9:20:
82:07:70:93:ef:27:a8:d6:a8:22:32:b4:fa:0e:5c:75:18:4f:
ca:5d:86:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:21 2025 by rpki-client