Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa
File: dhcvU0han3r34kQaEJLjIObE3TM.roa (raw, json)
Hash identifier: HAYq6Qezh4MKR8aNZfV1f0jolq28fCsE6OUcCMFUWkY=
Subject key identifier: 76:17:2F:53:48:5A:9F:7A:F7:E2:44:1A:10:92:E3:20:E6:C4:DD:33
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 14ED
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa
Signing time: Wed 11 Sep 2024 02:26:09 +0000
ROA not before: Wed 11 Sep 2024 02:26:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 13444
IP address blocks: 103.221.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5357 (0x14ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 11 02:26:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76172F53485A9F7AF7E2441A1092E320E6C4DD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:29:ab:ca:e9:93:c7:b4:75:34:c6:31:6d:
db:01:ab:2b:b4:3e:55:d9:2d:aa:e5:69:2c:1e:d6:
d6:4e:15:08:e6:ce:34:c4:39:00:b2:b3:ef:52:cb:
6f:d2:e5:38:84:d7:32:e5:7a:5b:05:37:79:1c:20:
28:92:3f:94:23:01:a7:db:75:d3:7c:1d:67:56:e9:
8e:1a:b3:86:8b:3c:18:fb:1b:39:b2:28:07:3d:dd:
6c:c1:40:63:f6:1d:d4:a9:85:54:15:ed:41:03:31:
bb:07:b2:0b:c7:df:a4:4b:65:11:22:f7:f2:c7:e5:
c8:bc:5b:9f:29:d4:53:60:31:9d:17:14:5c:c6:2f:
30:81:c9:d6:e3:24:92:a4:b2:d7:fc:e4:16:a1:db:
0a:53:09:c8:0f:74:ec:a2:26:68:b6:e3:67:d3:4b:
9e:d9:f6:4c:7f:6d:5b:08:e6:e8:9f:a3:5e:4b:24:
dc:da:26:fc:16:6f:19:0d:03:79:31:7c:7c:a2:c2:
98:a9:94:9b:a3:2f:a1:cd:d7:6a:52:79:02:50:d1:
8e:7c:b6:4c:03:87:ca:99:47:59:f5:49:85:9e:ef:
b7:06:f6:f1:39:3b:52:3b:9a:24:52:7b:ba:98:3b:
c6:9d:4d:6a:f2:b3:89:93:1d:94:f7:1d:b3:2f:df:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:2F:53:48:5A:9F:7A:F7:E2:44:1A:10:92:E3:20:E6:C4:DD:33
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dhcvU0han3r34kQaEJLjIObE3TM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:cc:29:09:1b:d2:cf:31:bb:3d:54:b2:59:8f:e2:12:e3:bf:
93:aa:d9:92:28:8b:d4:17:8f:30:c4:fe:b3:21:de:21:75:f9:
b1:8e:e0:dd:e2:8a:35:e9:c2:a2:c5:5a:35:0d:a4:f5:dc:0f:
6e:7e:a2:17:81:89:fb:a5:31:ae:42:69:88:0a:e4:35:32:99:
11:30:03:5b:0e:c7:f0:79:c5:cc:ab:67:7d:e1:83:f6:d1:b4:
36:2e:46:7c:96:ed:f7:5f:18:37:24:94:c5:a8:68:3d:da:1d:
f8:0c:b8:a4:53:ca:0f:c5:32:74:9b:af:29:f6:80:d9:ef:e6:
7e:de:11:ab:33:33:4a:d7:1d:e6:bf:52:74:db:6f:0a:d1:07:
9b:b8:28:54:9a:a0:6d:12:6c:ac:11:85:e1:3e:7e:ac:e7:b1:
77:d3:f0:ff:30:bc:3b:b9:a5:b7:14:a1:b1:05:77:b1:32:04:
40:45:0d:73:b1:64:14:51:85:d6:b9:84:86:34:96:33:c9:f2:
3a:ed:69:eb:ef:6c:ec:98:4f:9c:aa:10:40:24:ae:27:86:fc:
59:96:4c:ed:7d:0d:da:ba:16:76:57:0d:5d:29:f8:63:32:84:
e4:7c:f4:34:d1:44:f9:4c:2e:70:91:f9:34:66:c6:d7:e5:f2:
0f:15:5d:0b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDA5MTEw
MjI2MDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc2MTcyRjUzNDg1QTlG
N0FGN0UyNDQxQTEwOTJFMzIwRTZDNEREMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsYSmryumTx7R1NMYxbdsBqyu0PlXZLarlaSwe1tZOFQjmzjTE
OQCys+9Sy2/S5TiE1zLlelsFN3kcICiSP5QjAafbddN8HWdW6Y4as4aLPBj7Gzmy
KAc93WzBQGP2HdSphVQV7UEDMbsHsgvH36RLZREi9/LH5ci8W58p1FNgMZ0XFFzG
LzCBydbjJJKkstf85Bah2wpTCcgPdOyiJmi242fTS57Z9kx/bVsI5uifo15LJNza
JvwWbxkNA3kxfHyiwpiplJujL6HN12pSeQJQ0Y58tkwDh8qZR1n1SYWe77cG9vE5
O1I7miRSe7qYO8adTWrys4mTHZT3HbMv327TAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUdhcvU0han3r34kQaEJLjIObE3TMwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2RoY3ZVMGhhbjNyMzRr
UWFFSkxqSU9iRTNUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3Q0wDQYJKoZIhvcNAQELBQADggEBAMPMKQkb0s8xuz1UslmP4hLjv5Oq2ZIo
i9QXjzDE/rMh3iF1+bGO4N3iijXpwqLFWjUNpPXcD25+oheBifulMa5CaYgK5DUy
mREwA1sOx/B5xcyrZ33hg/bRtDYuRnyW7fdfGDcklMWoaD3aHfgMuKRTyg/FMnSb
ryn2gNnv5n7eEaszM0rXHea/UnTbbwrRB5u4KFSaoG0SbKwRheE+fqznsXfT8P8w
vDu5pbcUobEFd7EyBEBFDXOxZBRRhda5hIY0ljPJ8jrtaevvbOyYT5yqEEAkrieG
/FmWTO19Ddq6FnZXDV0p+GMyhOR89DTRRPlMLnCR+TRmxtfl8g8VXQs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:04 2025 by rpki-client