Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa
File: arhqpCDtrVr5onxpZZOX6bKS3FM.roa (raw, json)
Hash identifier: o+qsdOLcNSkfAZnh/QY23FgI2ZTJ1zTrDC3jwFW43zc=
Subject key identifier: 6A:B8:6A:A4:20:ED:AD:5A:F9:A2:7C:69:65:93:97:E9:B2:92:DC:53
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1874
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa
Signing time: Fri 17 Jan 2025 01:25:05 +0000
ROA not before: Fri 17 Jan 2025 01:25:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6260 (0x1874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6AB86AA420EDAD5AF9A27C69659397E9B292DC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:22:a7:d0:85:73:c5:6b:58:3b:7e:6d:33:
19:5f:41:b3:89:2f:1c:f3:e7:6f:44:b8:6e:e6:98:
22:40:68:75:9c:4c:d4:b5:e0:ac:33:8f:41:2a:15:
01:f4:d0:ec:43:1a:e6:b4:66:b7:88:19:25:04:fd:
d9:8c:40:95:6f:f2:83:e5:94:65:66:ad:0e:63:9a:
91:e9:ef:0e:d5:c3:cb:a3:af:3e:2e:f1:15:bb:1a:
a8:86:ba:60:1b:b5:05:0a:33:48:66:76:b1:20:6c:
5d:7a:dc:30:54:96:fa:93:27:23:c0:ed:6d:23:b2:
3c:9c:d3:12:84:13:67:bb:76:d7:6b:33:a5:08:48:
a8:80:61:23:1e:39:f4:8c:67:d0:31:f8:72:ed:f1:
5b:2d:8f:b8:1e:57:e0:8d:c1:be:11:ed:11:3e:f7:
d0:9d:b8:84:94:1e:ae:a0:a5:44:c0:b4:87:40:5d:
3e:c4:c6:e3:d2:f6:58:e4:ab:c3:10:12:59:d7:24:
78:1c:b7:c9:95:fa:42:db:2f:d2:b3:53:67:7e:2b:
55:79:d1:e6:80:82:1b:63:6d:b8:aa:8f:6b:33:0e:
43:61:0d:05:75:7c:02:11:aa:b8:97:4d:81:ea:42:
6f:02:8a:2a:bb:02:c4:01:d8:a2:66:5e:01:04:44:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B8:6A:A4:20:ED:AD:5A:F9:A2:7C:69:65:93:97:E9:B2:92:DC:53
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/arhqpCDtrVr5onxpZZOX6bKS3FM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.34.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:64:47:04:7c:1e:0c:42:62:23:8b:0b:97:8f:7a:0c:55:c7:
83:34:e2:7d:96:18:90:aa:5e:06:e9:0e:e4:87:35:4b:26:16:
0e:e1:9e:97:7a:35:51:0d:5d:e2:da:ac:22:34:2a:98:ff:3e:
c8:6b:b0:3c:e9:19:61:92:21:a1:cc:7f:c4:64:33:6d:15:96:
67:41:f9:ef:7d:26:a4:a6:c2:9e:fb:e9:d0:71:d6:2f:ca:de:
62:5d:27:73:f9:7c:69:81:69:38:30:ad:53:40:7c:7c:1e:b1:
6e:b3:1b:70:22:95:46:7c:24:34:f7:0d:ad:86:81:01:4e:50:
aa:0c:79:45:b8:2e:42:d8:e1:5b:8c:b1:1d:c1:49:f1:56:ad:
d9:67:11:54:f4:e7:8f:74:ce:da:aa:b4:4a:f5:80:8b:12:25:
fb:16:73:2f:1c:d6:c7:fe:c3:4d:b1:95:b7:6d:c0:f3:7e:2b:
42:fb:20:71:22:97:ea:cf:98:0b:f3:2b:94:f5:7a:5d:e8:a4:
09:03:ee:e0:7b:75:96:ef:82:f0:6e:64:e1:2f:a4:73:19:c4:
38:1e:50:64:e4:36:ac:64:c4:49:75:ba:7f:c2:a8:7f:21:59:
0f:39:4d:08:b3:26:0e:3c:70:f9:7b:58:46:d1:12:1d:07:71:
52:75:d3:8f
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZBQjg2QUE0MjBFREFE
NUFGOUEyN0M2OTY1OTM5N0U5QjI5MkRDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnXyKn0IVzxWtYO35tMxlfQbOJLxzz529EuG7mmCJAaHWcTNS1
4Kwzj0EqFQH00OxDGua0ZreIGSUE/dmMQJVv8oPllGVmrQ5jmpHp7w7Vw8ujrz4u
8RW7GqiGumAbtQUKM0hmdrEgbF163DBUlvqTJyPA7W0jsjyc0xKEE2e7dtdrM6UI
SKiAYSMeOfSMZ9Ax+HLt8Vstj7geV+CNwb4R7RE+99CduISUHq6gpUTAtIdAXT7E
xuPS9ljkq8MQElnXJHgct8mV+kLbL9KzU2d+K1V50eaAghtjbbiqj2szDkNhDQV1
fAIRqriXTYHqQm8Ciiq7AsQB2KJmXgEEREdNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUarhqpCDtrVr5onxpZZOX6bKS3FMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2FyaHFwQ0R0clZyNW9u
eHBaWk9YNmJLUzNGTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3SIwDQYJKoZIhvcNAQELBQADggEBAKpkRwR8HgxCYiOLC5ePegxVx4M04n2W
GJCqXgbpDuSHNUsmFg7hnpd6NVENXeLarCI0Kpj/PshrsDzpGWGSIaHMf8RkM20V
lmdB+e99JqSmwp776dBx1i/K3mJdJ3P5fGmBaTgwrVNAfHwesW6zG3AilUZ8JDT3
Da2GgQFOUKoMeUW4LkLY4VuMsR3BSfFWrdlnEVT05490ztqqtEr1gIsSJfsWcy8c
1sf+w02xlbdtwPN+K0L7IHEil+rPmAvzK5T1el3opAkD7uB7dZbvgvBuZOEvpHMZ
xDgeUGTkNqxkxEl1un/CqH8hWQ85TQizJg48cPl7WEbREh0HcVJ1048=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:25 2025 by rpki-client