Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/k16sjoyDSH4jS8TjtcwQTWSDwFY.roa
File: k16sjoyDSH4jS8TjtcwQTWSDwFY.roa (raw, json)
Hash identifier: tR3b70eZScgiwa23Q1dJ5OPmP2Xl5T+hc/40EL67QhQ=
Subject key identifier: 93:5E:AC:8E:8C:83:48:7E:23:4B:C4:E3:B5:CC:10:4D:64:83:C0:56
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1824
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k16sjoyDSH4jS8TjtcwQTWSDwFY.roa
Signing time: Fri 17 Jan 2025 01:24:39 +0000
ROA not before: Fri 17 Jan 2025 01:24:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6180 (0x1824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=935EAC8E8C83487E234BC4E3B5CC104D6483C056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:21:b3:05:e0:60:5d:b9:aa:54:bb:32:da:
a8:7a:7f:51:e5:30:d1:11:3f:03:27:9b:4b:78:ef:
13:c7:72:e2:a7:7b:cd:d8:f5:d7:a1:2b:24:3f:cf:
3a:59:4b:f9:68:e8:8a:8e:5b:c6:b5:71:a8:98:53:
73:c7:d2:30:19:c0:01:bf:41:37:98:89:f1:9b:db:
c3:51:d4:a7:19:f7:bf:11:97:9e:31:ec:24:38:41:
c1:ad:33:2c:18:1a:99:e7:20:70:02:50:9d:67:46:
60:5b:39:40:d2:50:10:41:51:70:91:7a:c2:30:31:
03:31:06:ac:ab:dc:84:80:a9:77:33:2d:de:3e:a4:
db:b3:17:0d:d7:fc:1d:53:8c:2c:47:ec:e3:46:f1:
2c:c8:e0:9a:57:2d:af:d0:1e:30:75:a9:4b:a5:44:
cd:8d:44:e3:ff:9e:0d:1d:d0:5a:55:82:1a:08:f3:
4e:1f:48:08:bf:9b:3a:1b:e9:b5:ac:94:3c:bf:13:
5f:d4:d0:92:0e:51:c4:48:df:df:cf:88:41:3c:1d:
eb:2c:57:88:b3:11:a7:a4:d3:e6:2b:30:c0:8d:65:
95:c8:e9:91:af:35:8a:88:75:0a:00:27:b1:52:c2:
59:f5:c6:ef:f8:ee:f9:3e:d3:17:3b:60:fd:67:11:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:AC:8E:8C:83:48:7E:23:4B:C4:E3:B5:CC:10:4D:64:83:C0:56
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/k16sjoyDSH4jS8TjtcwQTWSDwFY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cd:fc:13:fa:1b:f3:fd:c5:68:79:b2:a1:d5:de:83:06:75:
e4:77:ce:66:9f:ae:f2:8d:d4:dc:05:4a:3b:4b:c3:ef:6e:3e:
81:fd:45:ab:3c:ed:56:91:92:ce:d6:3e:79:e3:8b:89:69:8d:
c7:43:b4:de:27:7c:db:e3:58:85:48:f7:f3:88:ee:a1:f7:7b:
bd:5a:18:09:a8:37:3e:50:c7:e7:a4:c2:a3:53:90:de:2e:f6:
37:39:77:0d:36:46:1a:28:0a:d1:e9:22:df:cb:0f:c4:8e:8d:
d2:f3:51:ad:2a:2a:db:e0:bb:6b:f5:f2:1e:06:cc:d4:ac:82:
81:3f:a8:b1:2c:bc:c4:97:01:22:e1:54:f0:da:38:51:ff:41:
7d:53:08:04:21:aa:78:35:9d:1c:b5:0a:56:aa:24:3b:4b:34:
1c:4d:45:da:75:b1:26:34:b7:d2:a2:ca:96:4d:ff:85:2f:6c:
3a:69:af:a2:de:91:39:33:8b:bc:3f:ec:7d:e0:6d:71:4b:d4:
4d:bd:e4:a7:49:63:1e:71:45:96:fa:90:d5:fa:06:60:f8:86:
ff:d6:4f:d5:d0:46:93:6e:16:71:55:1c:e6:47:50:80:c7:6c:
48:09:45:65:f4:36:00:e3:46:22:30:3b:0c:84:16:fd:a4:2b:
cc:d8:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:57 2025 by rpki-client