Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa
File: Zh-TrPXLJawINzS9cbP1jeuAkEw.roa (raw, json)
Hash identifier: 1zZUTgmM/VPpj/F/YaUJxGDeleAuGD+AG+AQn5HcH/Y=
Subject key identifier: 66:1F:93:AC:F5:CB:25:AC:08:37:34:BD:71:B3:F5:8D:EB:80:90:4C
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1825
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa
Signing time: Fri 17 Jan 2025 01:24:39 +0000
ROA not before: Fri 17 Jan 2025 01:24:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.220.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6181 (0x1825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=661F93ACF5CB25AC083734BD71B3F58DEB80904C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:ee:f6:5f:9a:07:a6:9a:2a:98:7e:a7:6b:
24:38:84:1d:1e:7b:a6:9e:79:e0:8d:8a:ed:81:9e:
45:d1:a4:4b:b9:a4:25:18:04:01:0b:b3:3e:c0:8a:
19:5c:0b:91:bb:ac:b4:01:ee:5e:ec:03:c9:44:36:
d5:90:86:ff:f6:c1:73:23:c8:52:d5:ab:c4:5a:a5:
c2:17:f1:0f:93:75:c5:68:db:f2:15:ee:fc:77:32:
db:15:85:27:ce:3b:45:72:91:73:2f:c4:a7:68:27:
c8:4e:26:59:aa:99:5e:b3:09:13:5a:77:36:78:86:
7f:26:1e:66:c1:52:b9:8f:5b:52:8d:cc:33:7a:86:
f6:9c:6d:67:0c:8b:e6:c6:7c:eb:aa:f2:16:c5:4e:
d9:69:b0:17:59:bf:f0:d5:2b:08:59:fd:0d:bc:b2:
68:74:f9:8b:90:90:93:8c:77:ab:da:65:84:7d:aa:
bc:1d:b6:56:ef:9c:bb:ec:37:10:7a:6d:7a:29:80:
2a:61:3c:db:fd:db:e3:78:88:db:87:06:d4:6f:18:
eb:a1:3a:5a:7c:c1:33:dd:28:50:4a:bb:f1:b5:85:
64:c6:05:8d:96:84:8b:0a:e0:d0:98:99:3e:fb:86:
81:39:50:aa:ef:51:6d:c1:ef:2d:78:ed:ad:15:08:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:93:AC:F5:CB:25:AC:08:37:34:BD:71:B3:F5:8D:EB:80:90:4C
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Zh-TrPXLJawINzS9cbP1jeuAkEw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:29:a2:ad:b7:cb:2d:78:e2:88:5d:d5:61:ab:59:8f:f8:94:
01:04:94:8d:4a:e9:df:4a:5d:9a:ae:17:e8:a9:49:aa:dd:06:
4b:0b:0d:28:d3:69:d2:d5:d8:f4:d6:04:5b:49:19:e0:ed:64:
49:f8:90:02:da:2d:1d:a2:b9:a8:15:c7:95:8a:86:75:4b:bd:
2e:ce:29:8f:0a:15:e5:0e:9d:6e:bb:d1:09:9b:db:03:2d:87:
66:fd:31:15:f9:6e:1b:7f:6d:dd:74:bb:a4:66:20:fa:d9:9d:
f7:6c:e1:5e:28:f7:e1:cc:c8:4c:6d:9a:8e:1d:6d:1c:fa:65:
18:7b:72:4a:48:47:61:9b:77:6e:5b:9d:02:90:31:05:8d:33:
96:37:91:e4:ee:d8:70:41:30:cd:5a:b6:3b:d3:f1:3c:a8:c3:
b9:8c:46:62:5d:c9:0f:98:f2:a6:11:1f:3f:d4:23:54:f4:f1:
d2:ac:d0:c3:fb:d3:18:89:76:fa:e9:d5:62:df:6e:6e:33:03:
79:7d:3b:4c:4b:95:5c:11:ad:a8:5e:a3:e8:01:af:0f:5f:d1:
0d:eb:82:44:dc:18:4a:b0:22:ac:7b:a6:50:ab:db:27:ed:9d:
cb:a5:ba:7e:c4:96:85:8e:80:88:71:98:4a:f8:cf:d9:d4:c8:
31:97:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:21 2025 by rpki-client