Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa
File: xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa (raw, json)
Hash identifier: qbs9IZGLpUInCG1th4daQtkO+ftdy3+Z2dg5p/iX36I=
Subject key identifier: C5:9E:1A:F3:B9:72:E9:E3:30:B7:B9:EF:7C:90:BD:2C:C0:F5:66:D5
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 17FB
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa
Signing time: Fri 17 Jan 2025 01:24:23 +0000
ROA not before: Fri 17 Jan 2025 01:24:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6139 (0x17fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C59E1AF3B972E9E330B7B9EF7C90BD2CC0F566D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:23:f2:ea:2f:04:3c:e4:ed:ce:d6:1c:8f:
f4:0f:b5:63:14:c7:85:f0:d7:88:44:c5:92:3a:3a:
a5:89:2d:69:54:3f:20:83:f7:00:dc:f5:c6:dc:38:
d1:0b:f3:df:09:f3:37:d9:5e:99:45:89:12:47:ca:
4d:3a:f5:61:b9:b7:8c:53:ad:49:9f:60:64:d4:01:
09:3a:56:13:58:df:f9:8f:79:b5:93:56:6f:2b:81:
bc:1c:90:0d:61:ec:1a:9c:99:69:06:90:67:bc:db:
2b:88:bb:49:c6:81:23:f5:29:60:a8:e4:21:93:65:
a2:9d:ec:c3:2c:4e:8e:ee:90:1f:a6:c0:e8:ca:46:
ef:a2:8d:62:b8:cc:55:f9:0b:ef:b0:45:7b:22:45:
29:e8:fc:ef:86:85:42:e6:5a:84:1f:02:ec:95:5d:
06:6b:ca:06:0b:0e:67:bd:7b:f8:04:66:4a:47:09:
63:d3:fd:b3:47:24:c1:fb:e4:f8:d8:dd:94:40:2f:
af:af:13:02:7d:35:49:32:f9:f0:b4:f6:56:0b:a5:
28:77:d9:b1:ad:e4:d7:e2:65:76:58:5a:7d:83:09:
6e:6c:3c:20:f2:97:8c:11:56:ff:ef:08:1a:a5:78:
41:30:56:ec:85:7e:69:a3:b1:f7:6a:78:5c:1a:d7:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:1A:F3:B9:72:E9:E3:30:B7:B9:EF:7C:90:BD:2C:C0:F5:66:D5
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/xZ4a87ly6eMwt7nvfJC9LMD1ZtU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.12.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3a:57:80:7a:96:9d:36:54:fc:fd:71:be:91:44:14:cc:d9:
d2:44:a9:56:5a:eb:f0:f8:6e:57:34:60:a0:ee:73:f9:91:35:
0a:f2:c5:ef:1e:c5:df:64:71:57:be:80:4c:65:d8:b4:54:03:
46:07:e9:29:fb:77:35:ee:5f:e8:4e:5f:7e:5e:0b:eb:2d:23:
7e:42:9a:be:82:da:50:d7:59:17:1b:fb:74:56:5c:5f:67:9c:
37:9c:44:e0:83:dc:83:7d:a7:a6:d7:9a:da:58:f6:70:f1:41:
68:a6:7b:5d:84:09:00:f8:8a:ae:79:19:c3:82:db:bd:15:c0:
7e:df:9b:d4:23:05:d9:8e:b3:7f:33:19:b4:bd:a2:10:e8:14:
b2:e3:f3:fb:85:d9:c1:ba:ec:d8:90:58:03:56:35:10:9f:77:
fe:ec:86:ff:a3:13:d8:77:d4:d2:e2:30:1b:8c:4c:59:e4:a8:
80:57:e1:a5:52:88:e7:15:0a:f6:a3:e0:e4:d1:0e:08:64:40:
42:4b:bb:d7:28:cf:5e:f5:6a:51:be:a4:1e:82:91:a8:1d:b6:
16:f7:c6:c1:dc:c6:fa:3e:1c:ea:d3:77:d3:0a:26:74:c2:bb:
69:7b:3d:95:7f:f8:2a:35:17:c1:2b:83:42:04:26:db:c1:6d:
f5:e3:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:03 2025 by rpki-client