Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa
File: TqUsxCZOtR91IK5cVM1IBabFMTI.roa (raw, json)
Hash identifier: 1UVRPZk4V+5z20cJ5objwmgZ+daQSnyOcXW4Aa0eOUI=
Subject key identifier: 4E:A5:2C:C4:26:4E:B5:1F:75:20:AE:5C:54:CD:48:05:A6:C5:31:32
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18CE
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa
Signing time: Fri 17 Jan 2025 01:25:36 +0000
ROA not before: Fri 17 Jan 2025 01:25:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 103.221.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6350 (0x18ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4EA52CC4264EB51F7520AE5C54CD4805A6C53132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:a6:cd:dd:03:cc:b4:0d:7a:06:ee:22:82:
8d:0e:a3:a4:4b:42:4e:04:8f:6d:a2:3a:03:77:9d:
d2:f3:b9:68:cd:22:21:be:75:c6:04:f2:5d:95:80:
76:f0:a6:d9:2e:b5:69:3d:1a:c8:d7:3e:cf:36:92:
9c:e3:98:39:9b:78:45:4c:d8:c3:20:64:3e:de:32:
56:a0:da:ba:87:d8:8b:c3:1a:80:46:58:07:fb:86:
10:04:1d:ec:eb:06:cc:ac:5b:4b:18:12:41:cb:57:
4f:a9:1a:33:a6:9d:91:44:b1:df:db:27:12:3c:64:
14:3b:2b:b5:db:31:61:23:43:6c:5b:e7:16:30:f5:
f5:2d:2d:a0:4c:64:d0:30:70:18:9c:0c:e5:88:1f:
4b:b6:03:b2:9e:2f:0e:8a:ec:6f:28:d1:a1:05:22:
93:b1:39:cc:81:34:84:ee:db:c1:b7:bc:2b:05:25:
1d:8b:1a:b7:2d:a6:ee:f3:20:79:d2:d6:22:80:a7:
6d:87:27:cf:14:34:7c:f1:15:23:ea:63:d7:6e:fb:
9e:19:fe:a2:3e:e9:92:62:60:2f:89:8f:da:e2:4d:
cf:f4:a4:6e:b5:a3:d6:9c:84:f9:c8:6b:16:95:23:
44:4e:50:7d:58:1b:b7:fa:a5:5e:bb:c6:e2:3f:8d:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A5:2C:C4:26:4E:B5:1F:75:20:AE:5C:54:CD:48:05:A6:C5:31:32
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TqUsxCZOtR91IK5cVM1IBabFMTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:88:d5:b2:8a:a9:ec:d8:fb:4b:f4:92:2b:4c:b8:be:d6:fe:
e9:e7:f5:87:45:17:3b:15:5c:70:21:b6:c9:53:47:16:d3:44:
19:c1:6b:93:95:ef:b9:34:f4:24:d9:cc:6c:42:94:f8:a5:66:
a1:df:4b:fc:1b:7c:f6:9c:26:01:87:6d:b9:b2:8f:62:58:c7:
03:82:81:cf:9b:28:e0:f9:7d:49:b0:7f:42:b4:c7:d8:30:b4:
44:76:13:94:43:41:93:76:53:4b:ab:cd:13:c7:7a:ef:a0:75:
52:cd:53:9b:c0:fc:3e:14:92:15:fe:24:af:7f:5a:eb:8f:bc:
3e:ed:c4:7e:84:a9:5a:5f:6b:98:2a:2a:fd:21:62:d8:2d:52:
c4:ba:ed:77:40:96:62:bb:32:3f:5e:5c:5d:61:66:0e:a3:f4:
63:9e:ac:43:3c:f3:2d:f8:fb:1b:3d:b5:91:b7:9d:d4:12:52:
86:63:b6:21:a8:a3:3c:aa:97:1f:76:4a:02:5f:1a:0e:a3:37:
43:1a:51:73:5a:95:d0:20:50:cd:db:f3:97:53:1f:c9:35:57:
0f:70:d1:04:1c:d5:a3:8e:b2:80:d7:09:f5:48:5f:c3:92:c1:
3e:8c:72:e1:5f:fb:d2:eb:c6:16:df:44:85:a9:14:f8:b6:b8:
09:51:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:57 2025 by rpki-client