Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa
File: vsusmnFTq9WOEhuXv7kDNPTHGdk.roa (raw, json)
Hash identifier: wFXlhiAYxTf5tvD6Er6gkr1i/IB9MHYvhbAW/u2HJlI=
Subject key identifier: BE:CB:AC:9A:71:53:AB:D5:8E:12:1B:97:BF:B9:03:34:F4:C7:19:D9
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 184B
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa
Signing time: Fri 17 Jan 2025 01:24:52 +0000
ROA not before: Fri 17 Jan 2025 01:24:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 14:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6219 (0x184b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BECBAC9A7153ABD58E121B97BFB90334F4C719D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:35:56:2f:34:a0:8d:fa:7f:88:ec:7d:ef:
3e:b3:fb:97:c4:8c:00:44:61:f5:79:e0:02:9e:53:
61:42:52:ed:c9:42:1b:90:df:ac:12:1e:50:40:de:
57:55:ca:bb:dc:e7:9d:73:9d:29:a3:7d:d0:c6:dc:
de:55:a7:3a:4e:d7:0d:39:63:e8:a6:63:2b:d1:91:
86:95:e2:6f:ff:3c:f9:52:76:39:ca:83:26:b1:94:
5b:59:bb:64:23:be:33:83:ed:5d:f1:fe:43:a6:c0:
81:55:1a:6e:a1:f2:1c:78:4f:22:bf:66:7e:0e:02:
91:43:ff:3b:5f:3b:5e:f6:0d:1f:0a:df:c1:99:fe:
9b:5b:a6:8a:42:06:ae:27:c8:5c:22:0e:a7:8b:9d:
88:00:7a:40:3e:b2:dc:39:9e:78:06:68:d2:31:7c:
b7:cb:56:18:24:7e:32:6f:c8:76:2c:cd:53:9a:dd:
b1:05:96:cb:13:12:ad:17:e7:4b:2d:7a:f2:1d:5c:
0c:9d:00:f2:fd:db:de:a5:ee:f0:a2:0d:1b:90:26:
6f:16:f2:60:da:63:a8:1a:6c:59:3a:ca:54:2c:d0:
ce:4f:9b:cc:39:72:d4:89:4e:18:df:21:c9:98:51:
b8:03:d5:c0:ad:85:a6:bb:ba:31:a0:bd:62:b2:56:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CB:AC:9A:71:53:AB:D5:8E:12:1B:97:BF:B9:03:34:F4:C7:19:D9
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/vsusmnFTq9WOEhuXv7kDNPTHGdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:82:94:8c:cb:73:3c:c9:3d:46:c4:7f:89:d4:4d:b5:75:a9:
1d:88:72:61:1b:ef:38:17:3c:6f:45:76:81:70:a3:a4:89:68:
60:ae:75:b3:c2:6a:e6:bc:3c:91:25:de:54:a3:ea:24:a4:11:
85:c6:ce:cc:11:2c:a3:64:45:ad:67:ae:c6:ad:f6:ba:c9:08:
25:5a:98:5e:e4:c8:65:ad:e6:6e:f1:61:18:c2:f3:c4:f6:fe:
fc:63:65:85:a9:43:cf:50:01:b1:ee:1c:36:38:ae:8e:86:3c:
38:c5:58:6e:cc:ea:d9:7b:ce:fb:95:33:bf:2f:ac:a8:bf:86:
8f:1f:1e:1f:0e:f0:12:12:6e:0c:08:c8:a0:ac:c4:f9:43:fe:
18:f8:2e:50:ff:fa:32:92:79:a6:5c:b7:f0:d6:fe:36:ae:08:
ef:59:cc:63:46:60:c0:d8:ca:64:8e:1f:b1:fc:61:6f:0a:f0:
62:a7:74:5f:66:53:88:af:5e:94:b4:69:b4:59:74:0d:e3:eb:
15:5b:a0:b1:d8:f6:50:11:da:87:45:36:f8:22:06:8d:62:a4:
09:58:65:6f:d2:5b:5f:53:b4:1d:af:1c:cb:6d:93:7f:ec:5a:
16:d8:8a:2a:1a:6c:92:7a:4b:d0:41:7e:45:ff:00:a3:6a:c9:
b5:b1:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:31 2025 by rpki-client