Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/eVWV5-5u0SL5mND_T3Wsx57PUkc.roa
File: eVWV5-5u0SL5mND_T3Wsx57PUkc.roa (raw, json)
Hash identifier: PBf46EeeMkcEC8JmY6TWHZw0uQHKq8e7s2x0Az4vwFQ=
Subject key identifier: 79:55:95:E7:EE:6E:D1:22:F9:98:D0:FF:4F:75:AC:C7:9E:CF:52:47
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D3
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eVWV5-5u0SL5mND_T3Wsx57PUkc.roa
Signing time: Fri 17 Jan 2025 01:25:37 +0000
ROA not before: Fri 17 Jan 2025 01:25:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6355 (0x18d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=795595E7EE6ED122F998D0FF4F75ACC79ECF5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:ef:c6:4f:d6:c0:a5:7e:9d:cf:45:e6:f6:
fb:66:e7:a3:12:3d:69:a6:0f:be:1a:89:7a:f5:5a:
9c:00:41:1e:08:3c:38:ea:69:2d:10:72:fa:47:54:
16:58:61:5f:04:82:a2:20:de:d9:cd:5f:fe:d7:90:
00:84:c9:75:a1:24:d1:94:d9:c2:e2:4f:a4:6c:f6:
1a:32:dc:13:66:3f:ab:49:84:9f:4a:7f:1d:01:be:
87:6d:a6:b2:fc:00:95:08:5b:14:49:a8:91:e6:da:
19:94:76:a6:b9:dd:03:65:cb:5e:43:95:ee:54:f2:
cf:cd:67:19:7a:f9:4c:1a:3d:48:c2:40:a2:59:6b:
33:01:40:8a:1c:76:77:ec:dc:5a:68:a2:bf:78:2b:
43:82:03:3f:45:3a:01:1c:f2:85:a3:00:6e:1b:87:
34:b3:b9:5b:fe:cd:05:ca:8e:34:ef:76:0f:a0:59:
3a:f8:fe:47:9a:b7:51:b9:6d:7a:aa:f7:4a:4d:6d:
37:95:44:aa:71:43:a5:c7:65:dd:30:09:54:3c:53:
b1:33:70:f3:85:1b:bc:5d:d1:b8:3f:5e:af:78:e3:
39:42:20:49:be:19:d9:94:58:cf:0f:d1:5b:07:70:
92:17:75:39:6e:eb:4f:6f:c8:9f:88:b4:ce:ba:00:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:55:95:E7:EE:6E:D1:22:F9:98:D0:FF:4F:75:AC:C7:9E:CF:52:47
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eVWV5-5u0SL5mND_T3Wsx57PUkc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c3:f1:23:51:3b:15:d7:d4:3d:08:d3:99:38:14:12:80:db:
32:2f:e7:ad:a8:e0:20:50:49:8d:bb:03:4d:f6:87:b1:66:7f:
88:6f:dd:43:bf:6f:d8:69:4e:cb:b0:1f:a2:15:f0:b2:35:07:
87:bc:85:d7:cd:7d:da:19:f6:c7:da:4a:d5:15:ec:50:f1:3c:
8c:86:29:72:d0:63:6e:f7:3c:d7:f2:df:99:e9:fc:0e:a6:3f:
b7:0f:66:19:da:5d:f6:14:9a:57:b5:25:2b:59:05:cc:1c:89:
fb:3f:1f:8d:bb:f4:10:53:f3:97:12:83:59:97:76:7e:17:55:
02:2e:a8:73:a6:2d:13:7d:39:7c:71:12:70:89:6a:fb:cf:75:
c7:63:66:e7:ac:46:b7:49:be:d6:c5:d5:2c:75:ee:94:2f:87:
ed:d5:bb:d3:5e:00:9b:95:92:86:ff:97:80:ca:53:f3:89:d9:
97:c5:77:60:2e:4e:b2:0e:81:bf:58:d2:e4:81:8d:fe:74:bd:
cd:da:12:27:ca:f0:3c:5b:cb:dc:19:e3:e1:38:71:1d:6f:f7:
3d:8e:0e:18:89:75:94:b9:eb:2f:81:e0:a5:f8:23:49:01:c1:
d6:10:0a:97:1a:7f:e6:9b:73:5c:85:f2:67:6f:d3:a2:d3:fb:
a0:8a:79:90
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc5NTU5NUU3RUU2RUQx
MjJGOTk4RDBGRjRGNzVBQ0M3OUVDRjUyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo+e/GT9bApX6dz0Xm9vtm56MSPWmmD74aiXr1WpwAQR4IPDjq
aS0QcvpHVBZYYV8EgqIg3tnNX/7XkACEyXWhJNGU2cLiT6Rs9hoy3BNmP6tJhJ9K
fx0BvodtprL8AJUIWxRJqJHm2hmUdqa53QNly15Dle5U8s/NZxl6+UwaPUjCQKJZ
azMBQIocdnfs3Fpoor94K0OCAz9FOgEc8oWjAG4bhzSzuVv+zQXKjjTvdg+gWTr4
/keat1G5bXqq90pNbTeVRKpxQ6XHZd0wCVQ8U7EzcPOFG7xd0bg/Xq944zlCIEm+
GdmUWM8P0VsHcJIXdTlu609vyJ+ItM66ABy1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUeVWV5+5u0SL5mND/T3Wsx57PUkcwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2VWV1Y1LTV1MFNMNW1O
RF9UM1dzeDU3UFVrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3RYwDQYJKoZIhvcNAQELBQADggEBAHvD8SNROxXX1D0I05k4FBKA2zIv562o
4CBQSY27A032h7Fmf4hv3UO/b9hpTsuwH6IV8LI1B4e8hdfNfdoZ9sfaStUV7FDx
PIyGKXLQY273PNfy35np/A6mP7cPZhnaXfYUmle1JStZBcwcifs/H4279BBT85cS
g1mXdn4XVQIuqHOmLRN9OXxxEnCJavvPdcdjZuesRrdJvtbF1Sx17pQvh+3Vu9Ne
AJuVkob/l4DKU/OJ2ZfFd2AuTrIOgb9Y0uSBjf50vc3aEifK8Dxby9wZ4+E4cR1v
9z2ODhiJdZS56y+B4KX4I0kBwdYQCpcaf+abc1yF8mdv06LT+6CKeZA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:27 2025 by rpki-client