Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa
File: w1L72RBIIRZGuSFe6hR5M6X5QTA.roa (raw, json)
Hash identifier: lj5qNiyANym7apx/GDuYSzn7l8sVyttXORCKYLfugvY=
Subject key identifier: C3:52:FB:D9:10:48:21:16:46:B9:21:5E:EA:14:79:33:A5:F9:41:30
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 182F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa
Signing time: Fri 17 Jan 2025 01:24:42 +0000
ROA not before: Fri 17 Jan 2025 01:24:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6191 (0x182f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C352FBD91048211646B9215EEA147933A5F94130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:43:29:43:22:ab:23:02:b6:95:87:41:f0:
e9:63:af:be:15:6b:80:43:ad:cc:ef:85:64:13:d9:
f8:cb:96:0b:ec:c9:2d:91:c0:e4:be:eb:12:44:67:
55:24:23:77:f7:35:f2:9a:d2:b8:be:da:5f:ba:24:
47:92:4e:fb:34:ca:96:89:d9:bb:13:3e:3f:2c:30:
ee:5a:74:b1:6d:44:ab:c0:ac:b9:f5:30:27:18:fd:
83:cf:bf:40:ea:9e:d8:48:a0:69:a1:f6:af:5e:b5:
e3:64:34:e6:35:8b:93:4c:53:17:df:c8:43:e0:28:
61:25:35:1d:1f:c7:50:bc:99:1b:4f:9e:1c:71:4d:
80:b4:40:a8:05:b6:a1:06:93:d5:c6:d2:0e:09:fb:
43:ea:fb:aa:48:18:59:b3:6c:e1:55:d4:62:92:9a:
f1:d6:b6:74:76:68:5b:ab:97:2a:51:8e:99:24:13:
df:5a:a2:9c:50:0d:ae:60:d1:e6:f8:6c:c4:d8:1b:
e3:39:65:81:a8:ec:60:69:ec:52:62:ac:cf:c6:8d:
e1:ea:94:3d:e1:4e:09:01:6e:3d:27:d4:6a:2b:5a:
87:22:d1:d1:33:31:7d:95:0d:cc:de:72:11:76:de:
74:c0:4a:27:e6:fe:f0:8a:77:d2:10:75:55:8e:c0:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:FB:D9:10:48:21:16:46:B9:21:5E:EA:14:79:33:A5:F9:41:30
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w1L72RBIIRZGuSFe6hR5M6X5QTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.8.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:6a:36:ae:e6:be:ea:46:1a:e8:91:4d:49:f4:aa:d2:f5:58:
19:6b:56:f6:7c:c4:cb:ed:56:8c:86:fc:7b:02:11:1c:2a:c0:
43:74:a1:49:58:43:9a:80:6e:cf:ef:b3:58:50:61:82:5d:05:
ff:a6:6f:30:1b:33:82:cc:ce:1c:1c:61:eb:ff:3b:86:1d:ef:
16:65:14:33:16:ce:2d:2c:1d:29:23:30:d3:5e:94:8e:b6:c3:
88:18:5b:a7:2d:52:29:63:00:c9:f2:ee:58:3a:19:ee:11:f0:
f8:7f:89:16:c0:11:25:10:df:59:3f:f8:ca:bb:37:28:e2:41:
d6:c8:19:7a:62:1e:af:d5:f9:bd:3b:cf:fe:9e:34:97:75:35:
c7:ab:9b:80:59:fe:ed:8e:40:8d:4d:14:c3:1c:ab:97:83:b0:
9c:c6:9b:51:43:70:08:0a:ea:48:c4:f2:99:ab:d2:d7:96:d0:
cb:44:42:7f:a2:73:40:e9:a4:bd:4a:d7:3c:4a:fb:19:11:1f:
1a:61:78:85:eb:77:86:ec:f3:3e:4f:1b:67:c0:da:f7:2c:31:
41:f0:2d:0b:e0:43:35:a1:83:72:6b:77:b2:0c:bf:34:7e:83:
dd:bb:56:a5:b0:05:92:aa:76:30:2e:cf:63:e5:aa:83:86:80:
07:3e:ea:5a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMzNTJGQkQ5MTA0ODIx
MTY0NkI5MjE1RUVBMTQ3OTMzQTVGOTQxMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFRUMpQyKrIwK2lYdB8Oljr74Va4BDrczvhWQT2fjLlgvsyS2R
wOS+6xJEZ1UkI3f3NfKa0ri+2l+6JEeSTvs0ypaJ2bsTPj8sMO5adLFtRKvArLn1
MCcY/YPPv0DqnthIoGmh9q9eteNkNOY1i5NMUxffyEPgKGElNR0fx1C8mRtPnhxx
TYC0QKgFtqEGk9XG0g4J+0Pq+6pIGFmzbOFV1GKSmvHWtnR2aFurlypRjpkkE99a
opxQDa5g0eb4bMTYG+M5ZYGo7GBp7FJirM/GjeHqlD3hTgkBbj0n1GorWoci0dEz
MX2VDczechF23nTASifm/vCKd9IQdVWOwBMfAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUw1L72RBIIRZGuSFe6hR5M6X5QTAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3cxTDcyUkJJSVJaR3VT
RmU2aFI1TTZYNVFUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn3QgwDQYJKoZIhvcNAQELBQADggEBANRqNq7mvupGGuiRTUn0qtL1WBlrVvZ8
xMvtVoyG/HsCERwqwEN0oUlYQ5qAbs/vs1hQYYJdBf+mbzAbM4LMzhwcYev/O4Yd
7xZlFDMWzi0sHSkjMNNelI62w4gYW6ctUiljAMny7lg6Ge4R8Ph/iRbAESUQ31k/
+Mq7NyjiQdbIGXpiHq/V+b07z/6eNJd1Ncerm4BZ/u2OQI1NFMMcq5eDsJzGm1FD
cAgK6kjE8pmr0teW0MtEQn+ic0DppL1K1zxK+xkRHxpheIXrd4bs8z5PG2fA2vcs
MUHwLQvgQzWhg3Jrd7IMvzR+g927VqWwBZKqdjAuz2PlqoOGgAc+6lo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:23 2025 by rpki-client