Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa
File: TH97nQHChQX5H7CxwraX6lRGFc4.roa (raw, json)
Hash identifier: b0g/y3gAKXPdIowesfeufALlUIhZbHg9IU5iceu3smU=
Subject key identifier: 4C:7F:7B:9D:01:C2:85:05:F9:1F:B0:B1:C2:B6:97:EA:54:46:15:CE
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 181B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa
Signing time: Fri 17 Jan 2025 01:24:35 +0000
ROA not before: Fri 17 Jan 2025 01:24:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6171 (0x181b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C7F7B9D01C28505F91FB0B1C2B697EA544615CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:ae:8f:4f:51:89:7b:e8:91:7d:03:5c:de:
b5:2a:91:eb:58:28:60:e3:9d:a0:98:02:0e:77:24:
69:c8:4c:dc:04:1a:35:db:22:81:be:b7:e9:58:dd:
c2:be:ad:98:88:ef:71:8c:60:ef:9c:8e:ae:f9:2c:
a3:59:e4:b2:73:c3:79:eb:ab:1e:36:e8:a1:1d:bf:
0a:91:f7:0e:c2:45:e6:ca:8e:48:04:41:24:99:03:
bc:c3:49:76:dd:22:b3:d7:7f:25:be:2f:57:94:5f:
26:f2:4a:37:24:57:7f:4a:d0:d2:85:3a:bb:8c:d0:
55:db:37:03:0c:e0:df:66:6c:bd:ec:0e:9e:58:e9:
3d:86:5c:b8:4e:09:5b:31:9b:38:b1:36:8c:f8:9c:
e9:19:df:9e:19:13:ca:f5:20:de:f3:ec:bf:2d:55:
23:1d:d6:66:ef:b4:f0:61:9b:2c:fd:d8:3b:4d:a7:
86:3d:5c:13:30:15:5c:8a:8c:ea:b5:47:02:0f:1a:
d2:56:3a:90:14:e1:16:27:5e:0e:12:e1:52:5b:5b:
43:5d:47:dd:34:18:d6:26:48:ca:fd:30:71:ad:8d:
13:27:11:54:1d:46:1a:96:6f:32:34:26:1b:09:a0:
d6:98:f7:06:73:6f:be:95:21:0a:3c:c6:8a:2c:c4:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:7B:9D:01:C2:85:05:F9:1F:B0:B1:C2:B6:97:EA:54:46:15:CE
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TH97nQHChQX5H7CxwraX6lRGFc4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0d:73:09:0f:3e:89:fb:60:4e:0d:9c:9c:ba:25:a4:d2:36:
f3:be:31:ac:a2:f5:87:0d:60:d1:b6:2b:2e:3f:c7:53:8c:02:
d4:56:2d:10:7d:ff:31:f8:99:ee:0f:5b:4b:87:16:ac:44:0b:
51:36:79:56:0b:74:c9:d0:11:eb:85:d1:93:57:65:d2:02:3d:
a5:d6:13:b5:0c:e2:46:14:be:76:bd:4a:8e:16:34:ee:eb:81:
51:48:3f:6e:09:c0:eb:26:9f:a5:fd:1c:38:73:30:d5:93:1f:
ab:8d:2a:95:9b:eb:f6:98:26:57:1e:ae:1c:90:8a:17:1b:5f:
23:7b:b5:e7:26:56:8f:9c:64:58:54:db:5f:49:c8:c2:fc:5f:
3c:f5:91:ff:c3:79:5c:17:23:76:7f:a8:e3:2d:bc:7c:4b:4e:
91:bf:f2:71:a7:4c:b6:b7:21:7b:2f:76:ca:03:1d:14:6b:9f:
5f:17:51:b8:fe:b3:19:c9:5d:53:6a:93:35:11:73:53:4c:8a:
72:41:8a:65:44:ee:46:4c:05:ca:91:0e:53:21:67:79:1b:00:
75:5d:f3:ff:a2:d7:96:99:bb:0a:db:67:a9:10:16:08:1c:68:
ac:ec:62:18:98:68:8a:70:78:87:84:3f:14:1d:d9:28:4a:38:
ce:ee:5b:8a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDN0Y3QjlEMDFDMjg1
MDVGOTFGQjBCMUMyQjY5N0VBNTQ0NjE1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHpa6PT1GJe+iRfQNc3rUqketYKGDjnaCYAg53JGnITNwEGjXb
IoG+t+lY3cK+rZiI73GMYO+cjq75LKNZ5LJzw3nrqx426KEdvwqR9w7CRebKjkgE
QSSZA7zDSXbdIrPXfyW+L1eUXybySjckV39K0NKFOruM0FXbNwMM4N9mbL3sDp5Y
6T2GXLhOCVsxmzixNoz4nOkZ354ZE8r1IN7z7L8tVSMd1mbvtPBhmyz92DtNp4Y9
XBMwFVyKjOq1RwIPGtJWOpAU4RYnXg4S4VJbW0NdR900GNYmSMr9MHGtjRMnEVQd
RhqWbzI0JhsJoNaY9wZzb76VIQo8xoosxEfxAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUTH97nQHChQX5H7CxwraX6lRGFc4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RIOTduUUhDaFFYNUg3
Q3h3cmFYNmxSR0ZjNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3V8wDQYJKoZIhvcNAQELBQADggEBACINcwkPPon7YE4NnJy6JaTSNvO+Mayi
9YcNYNG2Ky4/x1OMAtRWLRB9/zH4me4PW0uHFqxEC1E2eVYLdMnQEeuF0ZNXZdIC
PaXWE7UM4kYUvna9So4WNO7rgVFIP24JwOsmn6X9HDhzMNWTH6uNKpWb6/aYJlce
rhyQihcbXyN7tecmVo+cZFhU219JyML8Xzz1kf/DeVwXI3Z/qOMtvHxLTpG/8nGn
TLa3IXsvdsoDHRRrn18XUbj+sxnJXVNqkzURc1NMinJBimVE7kZMBcqRDlMhZ3kb
AHVd8/+i15aZuwrbZ6kQFggcaKzsYhiYaIpweIeEPxQd2ShKOM7uW4o=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:18 2025 by rpki-client