Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aensuJJ5vQ5FZTBSuMTVhBnzl1k.roa
File: aensuJJ5vQ5FZTBSuMTVhBnzl1k.roa (raw, json)
Hash identifier: vLJ0kGdVOiUQALC6kztF/mU6IfpRRo4hmmOYwHRnGoY=
Subject key identifier: 69:E9:EC:B8:92:79:BD:0E:45:65:30:52:B8:C4:D5:84:19:F3:97:59
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 183D
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aensuJJ5vQ5FZTBSuMTVhBnzl1k.roa
Signing time: Fri 17 Jan 2025 01:24:47 +0000
ROA not before: Fri 17 Jan 2025 01:24:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6205 (0x183d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=69E9ECB89279BD0E45653052B8C4D58419F39759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:7b:ad:aa:e2:1b:99:47:5d:7e:58:9e:96:
a9:e5:7c:15:be:41:32:13:5e:af:0c:44:2b:ac:6d:
17:3f:48:5b:d8:9c:06:13:bb:12:f2:7f:7c:0a:3c:
66:9e:69:be:f8:ab:e9:e5:2d:77:00:bd:f1:bc:bc:
0d:4e:39:f3:bf:77:7f:60:dd:c4:a5:cd:d5:89:0a:
5d:c7:bc:e0:f8:ea:79:c4:04:27:f0:ce:6f:68:65:
9a:69:ea:26:c8:3f:36:32:e1:cc:8c:d7:57:c6:a1:
a9:f1:02:57:9d:bb:5f:89:ee:07:9e:86:f8:41:39:
0f:2d:01:b5:e2:61:e8:bf:30:0f:da:28:24:8b:0f:
9c:ac:52:bb:1e:39:3f:05:e7:ed:9e:96:28:43:a6:
f8:43:2b:50:11:a7:df:ca:ef:1f:d9:04:72:82:cf:
d4:73:0e:0c:f1:65:4d:c2:49:d7:96:aa:d2:c1:1b:
8d:be:f5:ab:2b:44:21:2e:df:2a:57:97:e7:4f:e3:
5c:13:d6:c2:37:64:19:d2:8a:b1:11:1a:0d:09:58:
18:ee:85:38:6c:9e:7f:39:86:5f:03:ba:7b:dc:30:
74:0b:50:90:40:42:27:ef:6c:15:43:4c:90:6d:c1:
8c:5c:65:8f:c6:ba:bf:fd:20:f2:3f:b7:7b:d7:25:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:EC:B8:92:79:BD:0E:45:65:30:52:B8:C4:D5:84:19:F3:97:59
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aensuJJ5vQ5FZTBSuMTVhBnzl1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6c:04:d2:49:8c:b4:28:24:90:8d:46:ec:2a:e0:ef:b3:f3:
7c:a6:97:7c:be:6b:df:f9:20:25:a0:2e:93:33:04:72:61:92:
d8:6c:03:b5:19:f8:38:0e:81:7c:82:c4:78:9c:af:71:29:86:
b9:63:eb:42:c7:8a:c6:c4:b1:e0:9b:01:76:e1:fe:2f:ff:6e:
76:93:91:a0:08:e4:7f:7d:f8:f8:39:09:c7:23:7b:77:5f:bc:
df:31:88:6f:36:7b:ea:f1:e1:61:9c:26:6d:75:04:2f:1e:22:
0e:59:2a:03:0b:b9:97:83:23:bd:18:d7:87:10:aa:f1:09:cb:
bd:2e:6c:25:e2:3a:0b:03:96:c4:8a:6a:34:2b:4d:a1:ad:a5:
99:01:ce:9a:b2:5d:1e:2f:67:be:42:e8:6f:9e:fc:4b:f0:b0:
24:98:b5:ab:2b:55:d1:f5:69:48:b6:ae:c1:f0:a7:43:28:fc:
e9:19:6c:c3:ad:1e:08:3a:3b:92:cd:1a:e4:bf:22:03:a2:c4:
3f:82:2e:c3:88:3a:6a:94:4a:0e:d0:89:25:6c:80:4f:32:3d:
40:35:a7:62:4d:b3:a1:78:ac:fe:e2:79:0f:f6:4f:8f:c7:2e:
18:f0:d2:05:82:40:b6:af:e9:4d:b1:b6:e7:f3:ae:1d:6a:13:
47:57:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:44 2025 by rpki-client