Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa
File: cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa (raw, json)
Hash identifier: sqH9MHgHEhqVSN3Y2NQqp38+TzC+QdJWs67uPkTYaRk=
Subject key identifier: 70:DF:50:79:77:8E:B9:D6:87:06:90:01:D2:01:93:5D:E2:7F:5F:AB
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B2
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa
Signing time: Fri 17 Jan 2025 01:25:26 +0000
ROA not before: Fri 17 Jan 2025 01:25:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.6.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6322 (0x18b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=70DF5079778EB9D687069001D201935DE27F5FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:68:fe:2f:7e:f1:b9:e4:6c:57:fb:d0:17:
7a:c1:34:ac:22:cf:18:10:02:9c:9c:ad:29:1a:30:
3c:ed:ee:84:25:62:16:e2:13:4b:da:af:dd:eb:46:
47:97:a7:65:85:76:86:02:b0:bb:4b:c4:78:7b:83:
d0:de:97:cc:e0:ff:30:6d:72:06:2f:f6:88:70:39:
9d:5f:d5:9d:19:0d:77:ed:75:b6:b6:5f:68:4c:eb:
8e:a2:32:a0:bf:b2:d2:32:a2:29:ea:19:8e:af:ef:
67:90:a7:57:68:9b:b3:f6:d9:ef:9f:9f:09:92:61:
96:43:74:2f:b3:b9:90:69:76:dc:d6:2c:95:27:aa:
a4:7b:7a:2e:5d:78:4e:62:af:19:16:94:dd:be:fd:
0e:bc:0c:3b:94:f3:12:a1:11:09:06:58:3f:a2:52:
39:b2:24:bb:77:30:c9:a3:38:cf:87:89:88:4d:ea:
1d:f4:46:03:b5:7c:da:92:e1:b6:a3:75:40:04:d3:
fe:f3:c1:f1:bd:2e:93:c2:94:75:f1:82:d8:5f:2d:
01:a2:ca:1e:e9:42:1c:29:c0:62:15:e4:19:60:2c:
21:fd:94:d0:cd:6a:cd:b7:f3:24:14:45:89:2b:28:
4c:4b:f4:8d:c7:ed:f5:f8:a2:d7:01:b2:05:21:e2:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:50:79:77:8E:B9:D6:87:06:90:01:D2:01:93:5D:E2:7F:5F:AB
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cN9QeXeOudaHBpAB0gGTXeJ_X6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.110.0/24
Signature Algorithm: sha256WithRSAEncryption
51:db:e8:07:30:7b:e7:fe:5a:af:8d:92:10:43:02:ca:49:a3:
9d:88:f7:84:87:3a:0a:06:b4:d3:56:8e:87:e0:db:79:4e:dc:
32:7e:65:4d:e8:1d:4e:92:d4:88:70:66:ad:0a:5c:ce:eb:7f:
8f:e2:a9:60:ea:09:4d:11:9b:a3:4d:49:c3:08:19:d4:86:37:
fe:3e:f6:73:50:e2:1f:85:dd:c5:79:0a:06:c3:b3:e1:d5:a4:
63:7d:2b:4f:92:a3:53:6e:4a:9f:7e:21:65:59:d7:9d:59:06:
5b:9d:06:1d:8f:06:cb:da:a3:7a:45:ce:d7:b1:dd:39:3f:b1:
9d:34:72:00:21:c6:26:e5:65:19:33:de:35:21:79:c5:35:90:
c2:e5:19:a2:43:a7:bf:17:da:8c:cc:c4:40:f6:58:98:d8:22:
d8:53:04:10:35:8e:2b:04:be:65:79:e3:73:13:08:b1:29:c1:
01:d5:b8:6f:89:99:74:62:68:3e:5d:c9:9d:04:3a:aa:77:5a:
af:2f:e1:e9:7a:2e:91:fa:8e:be:f5:d4:91:de:45:28:5f:94:
18:cb:b1:51:4b:4f:4a:b2:b0:4b:81:f0:16:54:9d:51:51:f3:
cb:25:90:61:ea:1a:0d:68:d8:0c:f9:9d:c1:bc:d2:6d:f6:2e:
99:bb:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:17 2025 by rpki-client