Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa
File: nS74Q4t7ed98ixg0zbLkGSkpnk8.roa (raw, json)
Hash identifier: BR9XMfrSaeE0W9pg88ojH93hr6+8vuzG8YZaOesIPwc=
Subject key identifier: 9D:2E:F8:43:8B:7B:79:DF:7C:8B:18:34:CD:B2:E4:19:29:29:9E:4F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 183B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa
Signing time: Fri 17 Jan 2025 01:24:46 +0000
ROA not before: Fri 17 Jan 2025 01:24:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 103.221.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6203 (0x183b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9D2EF8438B7B79DF7C8B1834CDB2E41929299E4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9c:b4:93:90:00:90:55:1e:05:a3:02:49:ba:
25:fc:fc:18:6c:be:27:e2:7a:1b:7f:62:22:2f:3d:
75:ab:a0:cc:21:34:95:72:d1:db:8a:01:20:8c:a2:
bd:05:91:72:e9:1f:75:35:e1:fa:f7:e0:f6:9d:4b:
14:af:89:42:07:ef:16:54:cb:43:64:af:83:62:7c:
e9:ad:3b:83:76:f6:17:83:2b:d9:22:57:da:70:30:
5b:86:4c:b1:74:59:01:26:7c:fb:13:77:15:f8:87:
71:8f:f2:9e:fb:cf:11:7a:8b:f9:f7:6a:ec:e0:5b:
42:c2:1e:ad:ff:34:23:91:a7:ab:73:c0:6e:d9:33:
bc:c6:64:f4:3e:62:87:7c:bd:9c:56:e7:e5:82:3c:
d6:e4:ee:dd:e5:bb:8e:4c:18:3b:cf:d3:7e:4b:0d:
a5:31:df:14:d1:90:16:ec:55:b8:45:a6:d2:21:32:
ee:0a:36:fa:8f:eb:d6:1a:89:db:27:17:72:d2:f2:
70:77:7c:c8:85:21:7e:69:a1:7b:70:57:28:5e:17:
bd:12:2e:86:34:47:a1:f1:fd:90:76:7c:88:ee:3b:
83:27:9f:68:3a:da:df:2c:09:13:92:11:2c:4d:b4:
7c:95:96:cc:00:51:e3:c9:cc:0c:68:e5:1a:42:7f:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:F8:43:8B:7B:79:DF:7C:8B:18:34:CD:B2:E4:19:29:29:9E:4F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nS74Q4t7ed98ixg0zbLkGSkpnk8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e1:36:96:0d:84:cc:55:81:65:89:93:77:c3:f1:7e:15:de:
6d:df:b8:98:ec:af:59:c6:8d:1c:f5:35:7e:d8:8b:6d:dd:56:
4a:fa:c2:c2:89:78:56:d9:b2:12:2a:a6:1a:ac:bd:6a:ea:57:
23:e9:28:25:09:f6:63:9c:dc:a6:e4:94:7b:64:01:83:a1:a3:
d8:a7:be:52:d4:9f:6e:09:6a:30:00:72:4e:51:78:43:cd:7b:
74:4c:8b:36:b7:40:f6:10:b9:19:38:1c:d2:49:00:09:31:69:
be:22:d6:c0:bb:46:4a:67:fe:a4:92:0f:b5:5b:68:33:a2:b7:
be:96:86:7f:7c:0c:b5:09:ab:60:42:23:a2:11:18:7c:ca:af:
a6:54:82:77:ee:85:75:2d:df:2a:5b:59:71:a7:e6:c4:92:03:
2e:60:36:37:f1:ca:35:d8:5c:73:78:fc:cd:60:90:b4:3b:60:
d1:88:a3:bc:64:b0:50:3c:f2:01:24:ac:ea:c4:ea:7c:8e:d5:
01:ca:33:c1:e7:4b:c3:7a:21:5f:17:fa:f8:ef:e3:bf:80:a5:
75:bb:55:8d:d9:d3:1b:e1:ea:8a:cd:43:25:06:5a:fa:2f:33:
87:95:fa:01:82:2a:01:20:d8:e8:bd:f4:d9:87:e4:4d:66:8d:
11:63:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:06 2025 by rpki-client