Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa
File: R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa (raw, json)
Hash identifier: I+SWMfJyw+xhNVVctHJRRCXcqcs0QrjLvPj7U6NuH/A=
Subject key identifier: 47:DA:4D:2F:2D:CC:04:AD:D0:41:5D:00:52:EE:66:93:C5:E4:03:8A
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1841
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa
Signing time: Fri 17 Jan 2025 01:24:48 +0000
ROA not before: Fri 17 Jan 2025 01:24:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6209 (0x1841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=47DA4D2F2DCC04ADD0415D0052EE6693C5E4038A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:e6:80:09:76:a5:15:f5:b5:f8:9d:5d:f6:
fa:cc:a8:bf:b2:6c:fe:b5:ac:09:59:b7:4b:45:31:
4b:ef:cd:b3:24:21:8f:1c:a0:a2:bb:c7:14:3c:a8:
39:9a:be:85:e6:df:40:e2:9c:b5:70:ee:04:96:52:
b1:b6:a7:cd:f9:45:07:e8:49:f9:2f:d1:fa:e8:bf:
5a:62:e7:c5:14:1e:80:1b:d6:4b:2e:3e:d2:89:bb:
5e:c0:18:95:b3:7a:1e:c5:79:8c:0b:ea:d4:f9:42:
b9:2d:b7:e2:3f:29:71:8d:cd:e1:a8:46:d6:fb:3e:
24:68:cb:64:94:88:2f:ab:6f:31:fb:66:f5:64:f9:
4f:96:8b:f5:2a:ba:90:66:15:42:f3:f8:1f:9d:8c:
cc:47:63:4e:3b:fd:dc:6c:60:d7:ed:73:6e:0d:fe:
9b:6e:6a:e2:b4:82:64:3a:3c:b6:1c:99:71:a2:89:
67:6a:50:a6:76:d6:89:02:57:41:5d:c0:c9:1a:a9:
a4:6e:1c:b4:58:e4:2f:dd:d3:d1:c5:e5:22:b8:df:
c4:7e:38:78:c3:33:1c:49:58:b9:de:c2:c3:8f:b8:
f4:c0:20:f3:3b:be:92:e8:56:6f:56:93:d1:19:44:
13:31:04:a0:71:2c:17:1b:6c:bb:10:2e:b2:d3:a4:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:4D:2F:2D:CC:04:AD:D0:41:5D:00:52:EE:66:93:C5:E4:03:8A
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/R9pNLy3MBK3QQV0AUu5mk8XkA4o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
81:36:ab:3d:c9:20:2c:d4:51:25:d8:9a:32:7c:53:37:d0:2d:
c7:c7:5c:0c:5b:56:57:3c:5f:43:8e:90:88:b0:90:f5:d8:6c:
33:82:bb:bf:f1:d0:b5:1e:52:d7:d7:de:2e:18:d5:9a:56:b9:
7f:5e:12:fc:99:ee:f2:b1:6d:8b:6b:58:4f:5f:7d:da:7a:80:
3f:7f:eb:39:96:2d:78:5a:9d:34:56:62:5e:a4:62:73:40:1b:
17:32:83:6b:ee:6a:6a:d4:ae:bd:cc:72:05:7e:da:b5:ba:10:
2a:35:f8:bb:5d:d3:c1:32:92:0f:09:ab:7a:88:d6:36:13:88:
5d:b6:8f:98:f8:09:55:28:9a:e5:ae:c6:24:ae:85:ee:bb:a4:
52:d1:54:a2:79:ce:0a:0e:f7:bd:32:f6:52:34:b4:5e:bd:af:
80:f2:05:1e:94:8e:79:11:83:03:70:16:7e:06:7e:3d:60:40:
76:22:0b:ad:c4:0b:aa:39:7a:82:3f:d3:cc:16:f4:19:82:63:
29:43:61:4f:23:41:53:c8:a0:9d:b7:d5:a9:61:b0:23:6f:c3:
ce:9f:b6:13:91:4b:24:63:a4:77:05:1f:86:a8:1a:32:ca:7b:
a3:5c:cc:4a:f2:07:53:bb:37:d9:34:ae:4e:96:8e:a5:45:83:
55:ef:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:47 2025 by rpki-client