Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aCk69mMR_an_4gytriunSd5SbvY.roa
File: aCk69mMR_an_4gytriunSd5SbvY.roa (raw, json)
Hash identifier: wNfBvgcW73xviwDqHttV5O7OZ+kWRbd5EnPyPWik4M8=
Subject key identifier: 68:29:3A:F6:63:11:FD:A9:FF:E2:0C:AD:AE:2B:A7:49:DE:52:6E:F6
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1893
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aCk69mMR_an_4gytriunSd5SbvY.roa
Signing time: Fri 17 Jan 2025 01:25:16 +0000
ROA not before: Fri 17 Jan 2025 01:25:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 138527
IP address blocks: 103.221.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6291 (0x1893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=68293AF66311FDA9FFE20CADAE2BA749DE526EF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:83:86:15:99:d2:9a:9f:df:21:06:79:cc:
f5:62:f8:39:58:c0:84:73:a3:28:99:3c:14:c6:13:
a6:96:62:e9:8b:7c:f3:f3:cd:cf:6f:3b:1a:a7:c6:
58:79:73:c6:b2:b4:1d:73:1c:e4:47:bc:19:27:60:
6f:91:56:37:96:8b:69:aa:cb:fd:b9:eb:80:e8:21:
4f:78:11:9f:5e:8e:82:4b:0a:ec:a5:de:c1:b0:45:
6c:c8:a7:15:03:9b:23:a1:4e:ff:b8:7e:6d:90:e2:
2f:38:21:f6:42:b6:f4:97:6a:6c:b9:e1:a8:6b:a9:
51:4b:87:33:ac:48:65:32:9e:40:92:c7:6d:59:17:
b9:89:1b:51:b1:8e:52:c3:88:e0:35:17:a5:4f:a3:
92:2d:c0:e4:14:dd:86:42:80:ec:10:fa:20:b1:8f:
eb:70:89:88:b2:29:97:ce:34:08:94:f0:98:cb:3f:
f3:48:a7:0a:42:6d:80:b7:e2:c3:41:67:d4:e3:f3:
ec:6a:c1:3b:1f:d2:a4:cc:36:21:93:c0:ef:6f:c1:
45:de:fe:b5:7a:4e:3c:f9:8d:92:5c:fd:df:42:b2:
c8:7e:1e:fc:c1:43:a0:6a:c7:dd:aa:4a:53:79:c6:
64:34:5c:17:a6:6d:b8:57:4b:65:5f:88:63:2c:38:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:3A:F6:63:11:FD:A9:FF:E2:0C:AD:AE:2B:A7:49:DE:52:6E:F6
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aCk69mMR_an_4gytriunSd5SbvY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:35:3f:8b:33:a0:bd:43:98:d9:4f:5c:c8:f0:05:6e:cd:85:
0e:5e:de:6e:6b:4b:6e:b0:6e:00:2a:f1:f4:2e:c2:03:e9:69:
ea:59:8e:96:4c:ad:f2:f7:11:9a:f5:e5:31:97:8b:c2:dd:67:
03:87:98:49:f1:ab:18:18:23:8f:5d:56:d9:e0:85:f2:d5:ab:
67:1f:d9:da:6c:7c:69:32:93:37:8b:4d:65:60:a4:16:34:a5:
99:90:34:b4:1c:a5:1a:6d:04:a3:33:f4:25:82:a5:13:6e:58:
c7:5c:36:af:b1:d9:11:22:b5:18:38:8c:b8:91:82:2c:b6:31:
a6:b2:dd:7e:a6:44:fe:b7:9e:a1:da:ad:d7:41:6b:e1:11:dc:
eb:46:ba:35:b7:82:d1:93:22:e1:db:15:1b:a0:79:b3:3d:c4:
ca:86:60:29:be:c2:70:37:b1:89:e3:05:ec:95:c4:b6:28:18:
3e:77:68:b8:82:a1:91:17:10:c0:30:08:82:b0:ab:f9:28:5d:
4f:81:7d:e3:99:9c:6c:df:f2:3b:71:84:aa:da:7a:ca:43:fd:
aa:7e:73:f4:bc:77:4d:ea:43:1b:df:76:f4:17:9e:75:bb:0d:
c7:8b:71:75:c3:c9:d6:f9:67:98:40:96:99:06:33:43:54:62:
f1:c9:fa:49
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY4MjkzQUY2NjMxMUZE
QTlGRkUyMENBREFFMkJBNzQ5REU1MjZFRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCygoOGFZnSmp/fIQZ5zPVi+DlYwIRzoyiZPBTGE6aWYumLfPPz
zc9vOxqnxlh5c8aytB1zHORHvBknYG+RVjeWi2mqy/2564DoIU94EZ9ejoJLCuyl
3sGwRWzIpxUDmyOhTv+4fm2Q4i84IfZCtvSXamy54ahrqVFLhzOsSGUynkCSx21Z
F7mJG1GxjlLDiOA1F6VPo5ItwOQU3YZCgOwQ+iCxj+twiYiyKZfONAiU8JjLP/NI
pwpCbYC34sNBZ9Tj8+xqwTsf0qTMNiGTwO9vwUXe/rV6Tjz5jZJc/d9Cssh+HvzB
Q6Bqx92qSlN5xmQ0XBembbhXS2VfiGMsOKHZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUaCk69mMR/an/4gytriunSd5SbvYwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FDazY5bU1SX2FuXzRn
eXRyaXVuU2Q1U2J2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn3RwwDQYJKoZIhvcNAQELBQADggEBACs1P4szoL1DmNlPXMjwBW7NhQ5e3m5r
S26wbgAq8fQuwgPpaepZjpZMrfL3EZr15TGXi8LdZwOHmEnxqxgYI49dVtnghfLV
q2cf2dpsfGkykzeLTWVgpBY0pZmQNLQcpRptBKMz9CWCpRNuWMdcNq+x2REitRg4
jLiRgiy2Maay3X6mRP63nqHarddBa+ER3OtGujW3gtGTIuHbFRugebM9xMqGYCm+
wnA3sYnjBeyVxLYoGD53aLiCoZEXEMAwCIKwq/koXU+BfeOZnGzf8jtxhKraespD
/ap+c/S8d03qQxvfdvQXnnW7DceLcXXDydb5Z5hAlpkGM0NUYvHJ+kk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:59 2025 by rpki-client