Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa
File: tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa (raw, json)
Hash identifier: rYdda4Gf8kifpaUGpeMjtLg5sr+o7BCVCLuv5fh2AgM=
Subject key identifier: B6:6D:19:23:DB:92:07:6D:F3:2A:26:36:3B:60:14:22:9D:9E:0A:85
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18E5
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa
Signing time: Fri 17 Jan 2025 01:25:45 +0000
ROA not before: Fri 17 Jan 2025 01:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.220.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6373 (0x18e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B66D1923DB92076DF32A26363B6014229D9E0A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:9d:7b:a6:12:7f:a5:05:12:23:06:77:ad:
b9:14:3e:0c:15:45:8e:d2:18:92:d1:2f:40:b9:e3:
e0:15:55:60:b6:bf:24:c3:7e:c7:97:64:90:2c:c5:
fc:28:0a:af:6e:42:c9:1b:90:e0:cd:27:a4:af:f7:
da:30:7b:0c:2b:3d:39:02:d3:47:25:77:3b:be:80:
55:0d:d1:78:b9:78:f3:2e:ee:0c:ef:17:42:f2:fe:
72:3e:85:aa:a7:67:d6:aa:3a:b8:70:f8:5a:43:b7:
ee:0a:c8:5b:c8:de:65:37:6e:df:14:d8:c3:bb:40:
9d:28:d9:9c:e8:4f:b4:2e:0b:6d:68:48:b7:d3:69:
1b:2d:cc:6c:9f:9f:54:95:3e:64:81:18:38:1d:dc:
de:c0:65:0e:d1:18:d4:5c:36:cb:22:0d:a2:2a:de:
5e:ac:7e:6a:62:1b:7a:57:65:fc:30:6d:bd:fc:f9:
7f:80:bb:2a:71:e2:bd:4b:83:84:9a:e2:67:bb:b3:
25:81:08:e0:0b:b4:4a:52:6b:79:49:a3:1b:08:0f:
b1:c0:9e:cd:73:71:03:9f:cd:43:1a:13:e9:6b:88:
68:0a:e1:1a:4a:15:06:9d:cd:22:4c:48:f8:d6:35:
8c:56:83:a5:5f:3e:70:5f:c4:82:1d:b7:68:1b:16:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6D:19:23:DB:92:07:6D:F3:2A:26:36:3B:60:14:22:9D:9E:0A:85
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/tm0ZI9uSB23zKiY2O2AUIp2eCoU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.248.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b0:a6:a5:af:50:66:e3:67:ad:29:8c:af:ec:c6:37:5a:87:
22:9b:50:f0:a8:aa:b3:2c:e6:a6:5d:90:9c:2a:0f:53:7f:07:
20:51:8c:a5:d9:15:c5:3c:0e:c8:59:c7:64:eb:af:02:2f:5f:
44:44:8f:ce:e1:4f:45:b3:a1:af:19:f9:48:04:23:81:6a:79:
1e:d1:89:e6:08:06:23:04:7b:de:ed:21:17:09:b7:34:18:21:
56:c0:8f:4e:56:90:89:fe:94:dc:62:9f:b1:86:ee:ce:dc:fd:
19:b4:17:4a:b4:2e:bc:54:05:8a:24:29:70:95:bd:c6:97:bb:
90:d4:32:6e:26:6f:81:83:2e:83:19:34:b9:02:d5:a0:61:47:
79:60:e7:61:7c:8c:09:f8:f1:9e:11:96:c2:c6:37:b4:f3:b3:
f5:62:c3:f3:e6:30:48:00:fb:dc:41:59:d1:1e:a6:bc:f2:49:
9f:e2:4c:e5:ac:c5:4c:ae:f1:86:a3:94:cd:7a:d6:cb:7e:fc:
73:58:2d:cb:2d:57:9f:45:4e:15:b5:c7:2f:24:ef:d0:de:f7:
d2:6f:19:87:fc:1a:d8:6b:89:98:00:fe:d3:0b:e1:00:1c:67:
96:77:4b:61:14:90:d4:4f:03:92:60:63:c3:56:3b:83:9a:70:
e5:b5:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:37 2025 by rpki-client