Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa
File: rRQXCP0P4d2cjhc40R6tNgIjXqg.roa (raw, json)
Hash identifier: NE8BtWsJvsG3Ozfwsno+574AuBnJXZIPrGqan/yWLqs=
Subject key identifier: AD:14:17:08:FD:0F:E1:DD:9C:8E:17:38:D1:1E:AD:36:02:23:5E:A8
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1906
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa
Signing time: Fri 17 Jan 2025 01:25:57 +0000
ROA not before: Fri 17 Jan 2025 01:25:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6406 (0x1906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AD141708FD0FE1DD9C8E1738D11EAD3602235EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:8c:e9:bc:5f:50:21:2a:13:fe:75:f8:55:
f6:0a:5e:d7:30:fb:27:ee:dc:32:ed:8b:d5:78:f0:
34:ad:6a:bf:3c:14:a6:1d:a3:29:94:d5:f9:16:39:
71:20:f6:6f:fb:55:30:6a:82:fd:b0:fc:03:53:d2:
c7:b3:cf:92:24:3a:6d:de:68:bd:38:2d:a8:68:36:
1b:77:50:2b:d9:27:7e:1f:9e:b3:1e:dd:05:71:8d:
73:a9:a3:5a:62:81:94:69:f1:ef:df:ae:b2:95:e0:
66:0b:51:f2:bb:a3:fa:f1:e6:48:c5:0b:8c:03:56:
ec:9d:c0:c3:4e:17:44:69:73:b9:ed:21:7a:fb:a0:
81:00:9e:f2:17:59:ef:73:b2:ea:2c:68:02:7e:fd:
b9:c5:e2:52:cb:fb:bc:69:86:1d:37:06:5a:46:2e:
f3:a7:a0:c9:a3:49:51:ee:04:3a:56:c8:a3:de:5f:
d1:7e:1e:ce:c9:5d:cc:ae:ff:d7:ea:78:70:e5:88:
46:af:e1:46:8f:53:fc:49:7d:34:da:15:cf:c7:7a:
85:1f:1f:c2:95:38:1f:26:81:90:6e:65:42:e5:1f:
f5:54:b0:1d:e0:94:dd:f9:b2:42:d0:47:fc:b8:65:
72:df:ba:0a:56:34:80:ac:c7:cd:6f:9f:f9:90:eb:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:17:08:FD:0F:E1:DD:9C:8E:17:38:D1:1E:AD:36:02:23:5E:A8
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rRQXCP0P4d2cjhc40R6tNgIjXqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a2:92:d9:90:26:99:54:e3:9b:7f:92:16:cf:07:6e:b1:8e:
42:6b:89:45:bc:9d:dc:d9:5f:82:45:87:a5:5b:d5:d2:dc:cd:
d0:ea:63:00:49:67:d2:56:2a:0e:79:2a:2c:57:d4:60:08:f9:
bc:e1:3c:b4:96:d4:88:84:b9:6e:2d:0e:82:ed:27:18:1d:77:
2b:e8:b2:93:b5:96:cc:25:d2:94:e3:99:04:0c:1c:48:95:f5:
ba:77:3a:6d:e6:22:e8:cb:d4:71:4b:b2:3e:3e:c9:de:14:31:
d0:90:a0:02:c1:38:4c:ab:41:a3:c6:88:d3:da:a5:52:a9:00:
0e:c5:b5:a2:4e:24:9a:6a:d4:70:ad:89:6b:00:4e:0f:75:3b:
78:77:5b:f5:fe:d8:2a:df:75:bf:17:6a:67:35:bf:0e:f6:b5:
a8:3d:8e:1c:5a:a5:9e:33:51:08:ae:34:70:6e:d3:07:2b:62:
f6:3a:f1:25:19:9d:70:3b:6e:d6:40:e4:1b:95:92:f5:1e:ff:
93:a9:13:c4:7d:2a:3a:b2:c8:32:7c:d9:9d:20:e9:cf:37:ac:
0e:fc:1d:5e:16:00:77:87:b1:f9:f0:be:f4:c5:df:1e:4c:14:
ac:39:88:e7:7b:25:d6:47:3d:fc:8d:f2:a2:ca:b8:94:fb:9d:
be:00:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:41 2025 by rpki-client