Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa
File: fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa (raw, json)
Hash identifier: R7v2SzSC8eE0bISdTQ+tSXQrKRlK1YDjTwxvTe574Cs=
Subject key identifier: 7D:46:9A:FA:7C:D3:FD:BC:D2:68:9E:4E:B3:82:EF:84:79:B9:CF:F1
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1816
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa
Signing time: Fri 17 Jan 2025 01:24:33 +0000
ROA not before: Fri 17 Jan 2025 01:24:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.220.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6166 (0x1816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7D469AFA7CD3FDBCD2689E4EB382EF8479B9CFF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:84:98:db:30:5f:ab:36:32:93:4c:db:0b:
fd:40:7c:4b:8d:cd:f2:2c:5e:90:83:b8:73:e2:02:
36:4a:a4:32:ce:43:d2:3b:48:9a:c6:3b:85:ba:80:
2e:af:29:77:21:5c:36:aa:88:c0:f3:4c:07:7b:a5:
bc:3d:1b:b1:49:b4:24:ab:54:a7:04:99:33:51:94:
db:15:a4:ae:b9:0b:39:e2:ea:db:f0:25:98:36:b6:
53:d3:50:81:5d:c9:b7:0d:83:d8:35:ec:2f:de:2e:
3d:c3:0a:b9:e6:b6:ac:cb:8d:9c:0d:77:d5:37:62:
b2:ec:38:41:33:61:13:6a:56:94:fd:3e:97:55:0f:
89:94:ff:5c:5e:39:56:db:35:d4:45:d4:b3:a9:ac:
38:d4:f4:5e:ab:d1:91:40:0d:21:e6:31:cf:ac:2c:
55:da:87:e1:e9:2c:47:69:15:d5:3d:19:96:be:e7:
1b:eb:06:ab:e3:d0:7d:f2:aa:57:c3:96:f9:e2:a8:
3a:d8:c3:58:89:be:37:e0:de:16:3d:4d:9e:f5:82:
f7:dd:4f:73:16:16:fe:0f:43:31:8c:37:35:14:a8:
88:3e:e4:c9:06:60:f0:50:6a:25:42:cb:1d:6e:35:
53:ea:00:26:59:77:1b:c6:92:3c:43:db:ad:b3:52:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:9A:FA:7C:D3:FD:BC:D2:68:9E:4E:B3:82:EF:84:79:B9:CF:F1
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fUaa-nzT_bzSaJ5Os4LvhHm5z_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.251.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f7:ea:9f:17:fa:9a:23:47:fd:2b:20:e5:9a:cf:79:f3:82:
91:67:f4:ff:5e:29:84:88:66:48:2a:8f:ad:a8:c2:70:b5:1d:
fc:15:6e:2c:08:1f:c2:58:88:40:cc:67:98:05:23:94:64:c8:
41:33:a0:ae:87:d9:b5:21:d4:ea:9c:a8:59:eb:9b:d3:88:6f:
0f:03:1c:e2:4d:42:63:48:cd:09:fc:d7:b9:d9:0a:8d:d6:cc:
7f:22:07:bb:7b:0d:6f:ce:f0:01:80:94:e0:5b:7e:68:d0:b4:
75:52:5a:6e:7d:e1:25:0c:9f:40:7d:a7:13:ed:66:f0:08:84:
f7:6e:e7:07:67:33:6d:bb:cc:4e:c7:6d:5b:7c:5e:7b:eb:6b:
66:48:9d:78:8b:67:b9:5f:db:55:24:18:86:2a:55:5c:28:a7:
2e:d4:e2:c9:b5:81:98:dd:7a:54:03:06:d4:d4:a7:50:8c:9c:
c9:ce:f2:9b:2a:2e:ed:d7:2f:ef:ae:2c:e8:8d:cc:89:03:ee:
dd:72:74:b1:72:85:7f:a0:e6:07:b4:bd:f2:1e:a5:a2:e9:f8:
f5:48:25:cd:bb:34:82:b9:b6:e2:57:95:79:30:39:61:1b:1a:
77:fe:22:17:6c:dd:97:8d:70:19:54:e2:a0:d9:c5:94:69:1c:
ba:82:a9:f5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdENDY5QUZBN0NEM0ZE
QkNEMjY4OUU0RUIzODJFRjg0NzlCOUNGRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtBoSY2zBfqzYyk0zbC/1AfEuNzfIsXpCDuHPiAjZKpDLOQ9I7
SJrGO4W6gC6vKXchXDaqiMDzTAd7pbw9G7FJtCSrVKcEmTNRlNsVpK65Czni6tvw
JZg2tlPTUIFdybcNg9g17C/eLj3DCrnmtqzLjZwNd9U3YrLsOEEzYRNqVpT9PpdV
D4mU/1xeOVbbNdRF1LOprDjU9F6r0ZFADSHmMc+sLFXah+HpLEdpFdU9GZa+5xvr
Bqvj0H3yqlfDlvniqDrYw1iJvjfg3hY9TZ71gvfdT3MWFv4PQzGMNzUUqIg+5MkG
YPBQaiVCyx1uNVPqACZZdxvGkjxD262zUgdVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUfUaa+nzT/bzSaJ5Os4LvhHm5z/EwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2ZVYWEtbnpUX2J6U2FK
NU9zNEx2aEhtNXpfRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3PswDQYJKoZIhvcNAQELBQADggEBAMz36p8X+pojR/0rIOWaz3nzgpFn9P9e
KYSIZkgqj62ownC1HfwVbiwIH8JYiEDMZ5gFI5RkyEEzoK6H2bUh1OqcqFnrm9OI
bw8DHOJNQmNIzQn817nZCo3WzH8iB7t7DW/O8AGAlOBbfmjQtHVSWm594SUMn0B9
pxPtZvAIhPdu5wdnM227zE7HbVt8Xnvra2ZInXiLZ7lf21UkGIYqVVwopy7U4sm1
gZjdelQDBtTUp1CMnMnO8psqLu3XL++uLOiNzIkD7t1ydLFyhX+g5ge0vfIepaLp
+PVIJc27NIK5tuJXlXkwOWEbGnf+Ihds3ZeNcBlU4qDZxZRpHLqCqfU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:10 2025 by rpki-client