Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa
File: anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa (raw, json)
Hash identifier: 95htxuIj/no0toAgu1mhJE2JnI8VWfV/coINSWfOHcA=
Subject key identifier: 6A:72:76:4D:06:89:1A:51:4D:EC:AF:6F:B2:82:3E:FE:B8:50:AF:F1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1514
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa
Signing time: Wed 11 Sep 2024 02:30:07 +0000
ROA not before: Wed 11 Sep 2024 02:30:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.6.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5396 (0x1514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:30:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6A72764D06891A514DECAF6FB2823EFEB850AFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:b1:47:00:16:21:d3:a8:52:f6:9c:68:7b:
4e:e0:4f:bb:3b:8d:3b:2c:9f:bf:75:29:e9:0e:99:
08:12:2f:96:b6:ae:63:1b:8d:c8:82:c4:73:61:eb:
9f:42:6e:bb:39:ed:e4:6a:22:16:11:d8:10:36:ea:
16:3e:34:a2:23:fc:24:0c:13:b5:1a:70:d5:77:58:
66:a9:97:77:86:1b:8e:68:2e:ff:c1:20:0a:0b:a6:
c8:62:b8:09:fa:ca:38:ae:ca:08:19:f8:be:0f:1c:
6a:6b:d9:62:cf:58:98:04:bb:2d:c3:d5:64:bc:c9:
1d:67:39:79:3d:16:24:5a:17:3e:a6:37:9a:57:e1:
bd:e9:c0:4e:86:d3:ec:62:71:03:d8:cd:de:c1:39:
a1:a7:d4:3b:2e:0f:d0:1b:64:19:bf:3b:02:01:06:
88:ac:5d:8e:1e:63:6c:fc:39:fb:dc:07:c2:04:ed:
7e:d8:c8:e6:88:bc:68:60:4d:48:a3:b8:29:0e:a7:
87:5f:9b:4e:f8:60:ef:b6:fc:9a:60:09:7e:65:15:
ef:5d:b2:bd:f6:39:42:4a:53:61:03:74:d1:f0:dd:
5c:8b:26:bb:20:e2:8c:53:6a:83:c4:dc:fa:92:6c:
87:8a:2c:ff:3a:4e:a2:8a:90:45:ae:8f:7d:b6:39:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:76:4D:06:89:1A:51:4D:EC:AF:6F:B2:82:3E:FE:B8:50:AF:F1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/anJ2TQaJGlFN7K9vsoI-_rhQr_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.108.0/24
Signature Algorithm: sha256WithRSAEncryption
92:67:a0:59:5a:a1:60:8e:c3:1d:80:5d:ab:1c:88:93:22:4f:
01:46:70:92:11:ae:d8:e8:78:bf:e1:a2:f0:c6:a9:b7:ce:57:
64:c8:62:3f:ee:03:a4:fc:32:15:99:77:8e:ad:0e:2e:13:8f:
2c:9b:c2:30:ec:76:af:3c:0f:74:b4:c1:6f:36:07:30:eb:d2:
e0:e0:ad:88:1a:85:2b:5c:fa:35:51:76:53:05:e4:cb:91:9f:
e8:39:18:02:9c:e6:af:2b:29:28:71:ff:62:25:66:eb:a1:b2:
e7:ec:59:b9:30:25:ab:d5:be:d0:4d:79:75:d5:a8:0d:93:17:
50:bf:6f:af:b7:09:24:70:f1:53:1f:43:df:34:cf:97:46:64:
26:46:35:e1:02:32:a7:b2:44:a8:15:25:54:b9:13:0f:a8:69:
41:32:16:f2:cb:7b:c2:e3:6f:28:90:6e:ff:c9:96:38:cb:6d:
15:9b:24:fc:1f:3c:50:74:9a:a7:4a:f1:91:9b:13:bc:14:c5:
23:b4:28:ce:4c:83:6c:bd:47:86:72:01:24:a6:0d:2e:37:45:
ff:9e:09:03:f9:0e:5f:ba:eb:e0:42:1d:12:76:a6:ea:36:fd:
4d:21:c6:34:3c:af:5e:f9:9f:1c:32:fe:9d:56:76:07:00:2b:
71:d5:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:08 2025 by rpki-client