Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa
File: XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa (raw, json)
Hash identifier: /aMlqden7HQCQC55SNShHbOjCkkdS/x+Tt9qbrtCg80=
Subject key identifier: 5D:45:2E:01:73:52:5F:F3:EA:DC:8D:0F:52:28:AF:F0:B4:48:6D:E7
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 182A
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa
Signing time: Fri 17 Jan 2025 01:24:41 +0000
ROA not before: Fri 17 Jan 2025 01:24:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6186 (0x182a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5D452E0173525FF3EADC8D0F5228AFF0B4486DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:bb:e2:17:e3:e9:e5:aa:7c:24:48:48:54:
4a:26:e3:94:d1:6b:ed:b8:a4:f0:ca:bd:e4:0d:e0:
f8:b9:91:cb:c1:fd:cd:0c:4d:df:6f:4b:9e:99:c2:
fa:cd:9b:6a:03:eb:f5:d2:b3:a3:72:bb:3b:f6:c4:
20:a3:f5:37:9a:bb:ec:c8:5b:a4:7a:44:c9:c8:27:
7d:5c:6f:c6:e8:28:8d:eb:db:9c:5a:b3:b1:c8:b5:
7d:f7:f4:4b:7f:fd:be:ce:c2:b6:3e:5d:03:b9:e5:
79:08:30:17:95:ae:54:e7:ad:45:19:38:c8:36:60:
50:f5:d2:a7:a1:50:54:2c:c9:2a:b5:59:a7:64:3f:
3b:8a:2c:79:5a:8f:de:6d:46:74:25:94:40:18:cd:
0d:72:dd:0b:17:44:1c:0d:ae:97:ec:fc:97:74:d4:
43:22:a1:c0:f7:5f:18:92:84:2d:10:5f:d4:03:6d:
d2:4f:94:ed:5f:a0:fb:2f:ee:e2:f3:85:cc:36:af:
7a:3b:1a:29:0c:ec:9d:51:8e:39:81:cf:2d:dc:b5:
94:0c:f2:cc:82:9d:f6:11:a6:bd:f3:5b:7b:e1:c6:
9a:dc:38:b8:ee:d9:00:99:e4:54:25:12:55:d7:ac:
3b:a4:2e:6a:25:ea:db:99:8b:b2:72:0d:c5:da:46:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:2E:01:73:52:5F:F3:EA:DC:8D:0F:52:28:AF:F0:B4:48:6D:E7
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/XUUuAXNSX_Pq3I0PUiiv8LRIbec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b1:1e:79:63:45:4c:de:e4:0d:09:cd:f0:f7:29:2e:83:95:
82:83:95:a3:e1:57:39:10:35:56:40:97:02:68:42:4b:b8:82:
86:98:c8:45:35:86:b5:3d:2c:ab:07:e2:f4:be:f7:0d:0e:20:
f9:d1:29:92:3c:2a:b4:e1:1e:88:7f:90:bd:db:2a:59:f6:9a:
3d:a2:7d:bb:7d:55:9d:b7:f3:7c:77:42:7a:f5:56:e6:8d:ae:
e3:80:2f:ce:3f:d6:67:e5:60:81:3b:7d:e2:0c:40:41:eb:14:
99:af:dd:6c:4b:35:82:c3:39:05:e3:0b:6f:a8:d0:da:47:4a:
62:c0:e6:4f:51:51:07:1e:f2:8f:e1:1f:e4:92:9b:f1:41:6c:
b1:ea:db:c1:db:da:2e:70:27:e6:51:dd:22:1c:b4:6f:6d:f3:
0d:12:e3:3a:fd:f6:a3:37:62:96:36:83:89:b9:b8:81:d1:58:
7d:8b:38:89:b5:41:db:5d:21:58:e6:d5:3f:38:26:37:7f:d2:
21:65:df:15:24:a7:fd:23:8c:87:5b:13:b1:16:ff:c4:1a:5d:
97:f3:2b:0e:91:ae:3f:e1:31:9d:54:26:58:48:e6:91:a7:30:
17:77:8a:a3:00:0b:e2:e8:67:34:e1:91:59:9d:a3:b3:e2:a5:
c6:73:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:32 2025 by rpki-client