Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa
File: nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa (raw, json)
Hash identifier: 97kqWpBrJlD5BmWYPgmtNOLTFKWTi5FLeadPJzvtCoU=
Subject key identifier: 9D:54:B0:AF:40:98:C5:45:F2:61:EB:69:75:67:2F:BA:26:99:E7:39
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1876
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa
Signing time: Fri 17 Jan 2025 01:25:05 +0000
ROA not before: Fri 17 Jan 2025 01:25:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6262 (0x1876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9D54B0AF4098C545F261EB6975672FBA2699E739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:08:5a:dc:ca:92:ac:ac:27:8f:1e:60:cf:
15:bf:5d:2c:2c:56:9e:ec:08:60:60:17:ae:6b:6b:
8d:53:f5:98:45:f0:d3:70:3f:37:d3:19:88:02:7a:
47:36:b0:de:76:1e:c6:11:c3:1c:59:95:56:4b:3a:
a9:0f:d0:5a:bb:8f:8e:30:23:cc:39:fe:b3:c3:f0:
6f:f6:56:08:bf:39:2c:f0:78:30:e1:a4:28:ca:58:
76:0c:15:89:b4:b7:83:bf:7e:43:7a:fa:3f:fd:6a:
24:1f:45:af:2f:89:19:01:f2:45:a2:28:f0:af:39:
c0:61:de:bd:52:d0:87:3c:7a:6b:40:11:63:98:5d:
c4:78:dc:72:60:20:76:a8:e9:f4:ab:3b:f2:01:45:
30:23:1c:7a:fc:4e:fb:c4:a3:90:4a:5d:5e:b4:53:
b0:c8:06:6b:a8:c3:93:8c:97:f1:97:f9:64:14:c3:
45:cb:dc:40:4c:08:17:b8:f4:19:f5:ca:70:20:5e:
c5:4e:af:ee:2c:e0:96:ed:a0:cf:97:c5:38:ac:f0:
f7:7b:8c:b0:1c:a5:32:0b:7e:db:6d:87:4f:2d:44:
55:25:b3:58:c1:f2:c4:05:80:89:93:5e:40:ee:c6:
8a:c9:18:a0:3e:75:d2:b7:04:60:37:c1:94:1e:7c:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:B0:AF:40:98:C5:45:F2:61:EB:69:75:67:2F:BA:26:99:E7:39
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/nVSwr0CYxUXyYetpdWcvuiaZ5zk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.25.0/24
Signature Algorithm: sha256WithRSAEncryption
21:36:7b:eb:40:90:27:e0:1d:40:57:0f:79:f2:46:26:fa:d8:
fe:42:53:07:89:f4:72:15:1e:91:7f:b4:46:6f:9c:29:7e:11:
0f:8d:aa:fa:6b:a9:45:33:de:4b:df:cf:d5:3f:6c:98:8b:1a:
31:89:ca:c2:86:90:5d:5b:09:96:b6:75:d9:c3:02:be:84:ed:
fc:1c:b3:36:a4:f0:24:c0:1a:e6:8f:7b:e2:fe:1c:03:e5:0c:
39:54:c5:ac:66:0e:fe:3a:df:10:9d:25:a7:eb:09:9b:27:25:
73:0f:f2:e4:b6:66:f3:cc:27:f9:07:f2:64:ad:fd:44:82:d7:
b1:c7:3d:9a:eb:68:ea:d4:8d:65:ac:ff:7c:38:7b:76:d4:f2:
6f:5a:48:34:b4:43:f8:bb:54:c8:38:33:97:d7:4f:f3:c4:2b:
34:6f:32:df:e2:5b:89:ab:98:20:6c:8c:f4:c7:9b:a0:a9:0a:
90:e6:e9:1a:fe:be:43:9c:a3:43:04:01:04:98:96:1e:ca:0f:
b1:4c:fa:c3:d7:77:5d:7e:64:cf:4e:a7:9d:23:e4:4a:12:c2:
f1:8b:c1:62:cd:08:b1:29:40:b8:07:6c:95:e7:8f:77:5d:ec:
ad:52:93:25:39:9f:62:14:98:87:c4:05:88:b5:f6:88:ac:3d:
97:08:9c:bc
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlENTRCMEFGNDA5OEM1
NDVGMjYxRUI2OTc1NjcyRkJBMjY5OUU3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoKgha3MqSrKwnjx5gzxW/XSwsVp7sCGBgF65ra41T9ZhF8NNw
PzfTGYgCekc2sN52HsYRwxxZlVZLOqkP0Fq7j44wI8w5/rPD8G/2Vgi/OSzweDDh
pCjKWHYMFYm0t4O/fkN6+j/9aiQfRa8viRkB8kWiKPCvOcBh3r1S0Ic8emtAEWOY
XcR43HJgIHao6fSrO/IBRTAjHHr8TvvEo5BKXV60U7DIBmuow5OMl/GX+WQUw0XL
3EBMCBe49Bn1ynAgXsVOr+4s4JbtoM+XxTis8Pd7jLAcpTILfttth08tRFUls1jB
8sQFgImTXkDuxorJGKA+ddK3BGA3wZQefIOjAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUnVSwr0CYxUXyYetpdWcvuiaZ5zkwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L25WU3dyMENZeFVYeVll
dHBkV2N2dWlhWjV6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3RkwDQYJKoZIhvcNAQELBQADggEBACE2e+tAkCfgHUBXD3nyRib62P5CUweJ
9HIVHpF/tEZvnCl+EQ+NqvprqUUz3kvfz9U/bJiLGjGJysKGkF1bCZa2ddnDAr6E
7fwcszak8CTAGuaPe+L+HAPlDDlUxaxmDv463xCdJafrCZsnJXMP8uS2ZvPMJ/kH
8mSt/USC17HHPZrraOrUjWWs/3w4e3bU8m9aSDS0Q/i7VMg4M5fXT/PEKzRvMt/i
W4mrmCBsjPTHm6CpCpDm6Rr+vkOco0MEAQSYlh7KD7FM+sPXd11+ZM9Op50j5EoS
wvGLwWLNCLEpQLgHbJXnj3dd7K1SkyU5n2IUmIfEBYi19oisPZcInLw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:04 2025 by rpki-client