Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa
File: NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa (raw, json)
Hash identifier: FmAYO8d5yAuCtdbCugxWbgBBEt/0Wzn/qRnibtSEE0c=
Subject key identifier: 35:1D:58:7B:91:7C:04:D2:F3:4F:9B:87:01:08:72:5C:74:89:D9:CA
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18C6
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa
Signing time: Fri 17 Jan 2025 01:25:33 +0000
ROA not before: Fri 17 Jan 2025 01:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6342 (0x18c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=351D587B917C04D2F34F9B870108725C7489D9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:dd:cc:3d:03:23:56:be:37:db:14:47:a4:
b1:a4:a6:e8:ab:94:ee:f3:c1:6a:ad:78:69:93:9d:
db:a2:b6:75:f7:dc:3d:17:81:a5:41:b7:55:ea:28:
fe:d8:ef:99:13:7b:af:f9:2d:14:17:15:95:d7:60:
d4:79:15:5b:e0:a6:66:d3:ed:ff:a7:8e:d6:50:96:
5c:89:2b:e2:f3:2b:14:79:4c:08:5d:0f:f2:56:d0:
57:ae:fd:a4:96:75:61:b1:64:07:e6:1c:ec:f5:ba:
ac:0c:bd:4e:9e:eb:62:4b:84:b6:1e:cb:82:a0:68:
6a:5c:d9:32:85:dc:80:ad:eb:41:b2:92:26:29:2c:
99:d4:99:0b:49:69:b9:3e:92:93:7d:a2:97:e9:54:
81:c7:87:99:76:6f:38:2c:44:11:f1:e8:4f:a4:af:
71:94:ae:c1:43:0c:b7:87:49:ee:5e:2b:fc:99:3c:
0e:e9:3c:14:e4:ca:08:fa:3b:12:5e:1d:39:3e:51:
24:18:e2:dd:74:68:df:5c:2b:79:cd:1f:b7:e0:5b:
c3:a2:b8:c7:f3:83:1d:04:36:db:f7:a5:7c:5e:6c:
d9:21:20:bb:c0:71:e4:77:4c:2f:74:9e:05:78:7a:
56:50:2f:96:1c:ae:6c:7c:41:0e:08:46:c6:4a:97:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:58:7B:91:7C:04:D2:F3:4F:9B:87:01:08:72:5C:74:89:D9:CA
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/NR1Ye5F8BNLzT5uHAQhyXHSJ2co.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:ae:24:bd:50:c0:af:1b:e7:d7:fe:ff:ed:29:9c:ef:1a:ec:
aa:96:01:34:80:93:ad:40:00:ff:f1:91:39:01:13:e5:79:59:
9f:b9:9b:b6:e6:1f:19:0a:1b:7e:68:c0:ff:1d:7d:f5:02:71:
9f:da:bd:16:14:5e:ca:00:ac:4f:00:51:fc:6b:98:55:53:24:
48:1d:90:24:77:f1:0d:9b:37:35:91:f7:6e:34:91:5f:a4:42:
7f:28:92:8c:db:8c:1c:ad:48:04:11:f5:54:97:cd:b5:8f:91:
69:11:2c:04:64:43:02:4d:5a:5f:8d:19:bb:d1:9e:42:30:6c:
b6:8d:8e:b9:b0:6a:25:ab:5e:bb:bc:52:92:56:e7:b5:3a:c3:
66:74:d1:2b:4e:ba:c1:80:b0:65:5b:f5:05:ea:85:b6:ca:ff:
e1:4f:36:3a:5f:29:72:71:d8:0b:05:35:b0:c9:f8:6a:66:d2:
cd:b5:56:3d:97:43:fa:33:ca:6f:3b:c8:3c:e5:46:87:a6:32:
51:47:c3:15:9b:9d:02:03:a0:bd:53:10:38:c5:be:ea:52:c9:
fa:1d:14:d6:da:d9:78:c5:56:49:a7:d2:24:ac:ca:63:0d:45:
31:7b:ed:8f:77:2b:95:67:69:af:46:ef:9e:b1:cc:13:c1:77:
d7:11:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:38 2025 by rpki-client