Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa
File: N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa (raw, json)
Hash identifier: A/9MdpgdeMuKkQwQg4TgR/vu+avZEe9epdsX4J+fRzw=
Subject key identifier: 37:ED:DF:F0:9F:8E:2C:C1:C3:0D:D2:13:DE:BC:EB:DE:E9:3D:C6:DD
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1903
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa
Signing time: Fri 17 Jan 2025 01:25:55 +0000
ROA not before: Fri 17 Jan 2025 01:25:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 103.221.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6403 (0x1903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=37EDDFF09F8E2CC1C30DD213DEBCEBDEE93DC6DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:c7:2e:bf:89:8d:55:e2:43:eb:88:16:97:
da:cb:e2:bc:7e:9d:24:4b:70:42:56:7c:dc:f8:80:
48:e9:55:d6:98:24:f7:d9:86:35:05:40:54:f9:b3:
f3:9e:25:d3:b5:e5:8f:34:52:07:be:a0:6e:06:96:
71:c1:62:4c:a9:7d:90:3c:3f:5a:d9:00:3b:39:ec:
a5:86:24:0e:92:81:5f:6f:32:d8:8b:4b:d8:79:2f:
f4:a5:e9:2f:c4:08:85:6a:b5:f1:10:50:8a:d4:e7:
2d:07:65:68:ad:40:76:1b:81:2d:ac:51:22:f7:73:
67:23:b8:0a:6c:0c:f2:fd:27:6f:40:ba:f3:cd:07:
e5:e0:a8:29:9c:81:be:e9:67:54:b4:92:72:d5:fe:
7a:4a:a5:9e:27:89:b9:48:24:78:2c:b3:5f:96:1c:
42:a1:7a:26:45:cc:34:f3:ae:ed:80:51:b2:11:59:
46:9e:6e:6e:bb:c9:da:e1:97:ac:2d:77:bf:93:23:
62:f2:ba:4a:82:7c:9f:51:bf:e4:ee:68:91:2c:9d:
8d:38:8c:56:50:46:89:df:4d:c6:d0:f6:89:3f:41:
8b:05:a4:a7:66:34:e6:94:19:08:25:2f:d7:c5:01:
bb:f4:4c:d1:54:9d:b7:c2:ed:5f:af:6a:28:51:0a:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:DF:F0:9F:8E:2C:C1:C3:0D:D2:13:DE:BC:EB:DE:E9:3D:C6:DD
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/N-3f8J-OLMHDDdIT3rzr3uk9xt0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.40.0/22
Signature Algorithm: sha256WithRSAEncryption
af:af:3a:df:88:3a:93:29:f3:20:99:69:bc:16:1a:f3:a4:b7:
a8:88:19:af:f0:e8:a7:27:f1:15:4c:2e:67:51:3f:a9:78:45:
b1:d4:0a:c9:e4:e0:dc:d0:63:47:ec:99:2a:d2:02:9f:00:e9:
1d:94:ec:17:17:8d:af:c2:31:2b:bc:98:bf:c7:9c:f1:37:7c:
3d:0e:96:a7:96:c8:94:6d:f8:3a:18:bf:1c:2d:e1:09:a6:39:
17:7e:5f:09:b6:03:d1:f1:74:65:ad:8a:52:72:90:24:81:47:
84:ac:66:73:bd:d6:eb:83:7e:8f:3c:7d:96:91:4a:98:67:00:
d3:30:89:85:27:36:cd:23:f9:bc:72:3a:33:89:37:cf:f1:ea:
d2:f6:fe:cf:40:ac:7f:64:07:d6:86:65:4a:f3:60:68:21:92:
9b:2a:98:50:22:6f:6c:60:31:39:b9:3c:6c:f8:6b:e8:a8:ed:
34:fd:06:c6:b1:b7:f8:3a:6d:b9:2f:f8:99:bd:be:81:de:d8:
bc:fd:ae:70:29:f8:e3:de:c2:34:e3:59:60:a8:8e:ea:f9:3b:
98:7e:d2:1d:b8:b4:fb:17:22:3d:68:45:58:c8:62:2d:8d:6a:
4e:56:d3:1c:ec:24:76:0f:ed:a9:d8:b0:34:1f:11:19:cf:7c:
dd:27:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:25:42 2025 by rpki-client