Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa
File: ZeM700FQQa0RWyEAlgr45HbbCGE.roa (raw, json)
Hash identifier: IGoX45tp0mK384qIZ0ALQ+WGybCGVuMmFQSJshCwLBc=
Subject key identifier: 65:E3:3B:D3:41:50:41:AD:11:5B:21:00:96:0A:F8:E4:76:DB:08:61
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18A9
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa
Signing time: Fri 17 Jan 2025 01:25:23 +0000
ROA not before: Fri 17 Jan 2025 01:25:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6313 (0x18a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=65E33BD3415041AD115B2100960AF8E476DB0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:1f:4d:26:04:0c:5e:d6:4c:d8:f7:98:e6:
ac:ac:9b:41:76:65:e2:50:f3:c7:ef:02:64:30:8d:
3a:7b:27:54:46:c7:f2:44:d8:f6:c4:19:6c:04:6d:
e6:83:77:ad:fb:cc:8b:2f:d9:d4:f8:4f:61:db:eb:
11:5c:49:c6:00:c1:a1:1b:62:e2:70:76:82:8d:3f:
1a:5b:24:35:47:0b:c7:9c:c9:fa:80:0c:f9:61:a5:
ce:e2:77:93:92:6d:b4:8e:de:7e:5e:76:57:2f:7e:
31:94:40:e1:11:36:93:5f:5e:d5:46:40:db:b1:6a:
59:47:97:e8:0d:1b:21:c7:de:d8:36:a3:8e:9f:68:
89:fb:30:3f:32:b0:62:e0:7c:d8:16:a5:f6:28:59:
21:a5:81:7c:d5:d9:ef:37:07:17:65:b8:32:32:5b:
c5:54:26:2f:3d:23:e5:16:b9:75:f1:07:03:d2:1e:
3b:10:d2:39:2a:5c:0c:41:a7:c4:f4:c7:33:54:ad:
b2:84:0c:7b:b3:8c:8f:81:a2:c6:51:5f:4f:ba:40:
5c:27:78:35:32:fc:1c:9f:40:f4:c9:d8:82:3a:45:
69:c3:af:4d:ca:bb:f8:56:27:fc:c6:5c:97:e2:9d:
24:c9:fa:1d:d1:3c:95:39:9c:cb:b0:26:cf:9b:9d:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E3:3B:D3:41:50:41:AD:11:5B:21:00:96:0A:F8:E4:76:DB:08:61
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZeM700FQQa0RWyEAlgr45HbbCGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.47.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b0:70:f8:61:b1:08:44:8a:b7:d0:f6:6b:56:3d:07:71:67:
25:27:84:db:fd:8d:41:17:9c:76:aa:97:26:53:00:22:ad:11:
44:a9:f8:78:4f:79:49:4b:a3:b5:37:ab:29:3b:ee:cb:ff:b9:
ff:b9:8a:45:33:50:f1:64:46:88:0a:c5:85:22:9f:4d:89:f2:
3a:e6:db:8a:15:16:27:9a:a1:e8:7f:b1:0e:23:86:2b:4e:b6:
78:20:e7:7b:90:3e:58:81:dd:2e:be:a7:78:8b:7f:63:d6:a4:
31:54:36:cf:d3:a3:16:d2:55:b6:08:01:77:3f:b6:35:2a:9d:
f9:b8:c7:a0:08:ba:2a:27:8d:de:58:5e:d2:5c:01:bc:b1:49:
89:d3:ea:b1:fd:a2:9a:ec:39:22:0d:8b:fd:c5:95:45:bd:2c:
e0:7b:19:6c:df:89:aa:74:e4:cf:f4:99:8d:1c:4f:dc:5f:20:
02:8c:5f:00:53:bf:d8:cc:aa:f8:52:db:c4:2a:99:47:49:7e:
b2:5d:6e:b9:52:96:b6:c2:e7:65:da:df:b8:89:b6:b5:08:2e:
3b:dd:37:c3:4e:74:d0:1f:7e:b6:5b:e8:e3:8b:c4:1c:15:64:
8b:22:25:4a:4f:f0:89:26:56:9d:43:41:6c:32:7c:2c:58:c2:
e3:c9:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:03 2025 by rpki-client