Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa
File: z6CClVnpgzoEUqd6q1fF8m2o6iI.roa (raw, json)
Hash identifier: VKU4rAmSAaGFW/UY8T+0iyMmw3OJt+NWskDpvfQf9rQ=
Subject key identifier: CF:A0:82:95:59:E9:83:3A:04:52:A7:7A:AB:57:C5:F2:6D:A8:EA:22
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1814
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa
Signing time: Fri 17 Jan 2025 01:24:32 +0000
ROA not before: Fri 17 Jan 2025 01:24:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6164 (0x1814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CFA0829559E9833A0452A77AAB57C5F26DA8EA22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:db:b7:0f:46:00:d2:cf:53:83:c6:f1:fd:
20:21:97:d6:0b:84:2a:c8:dc:33:56:64:57:9c:96:
2e:31:51:d1:ff:a6:12:d2:7a:c5:87:c8:d4:6c:27:
fe:d5:a6:d3:2c:49:51:ff:39:68:fb:32:9c:16:63:
7b:12:be:a4:82:97:e3:76:59:e6:ed:82:a9:c8:30:
7f:f3:3b:bc:31:1b:82:0a:14:c6:b6:4b:89:d5:67:
58:07:52:b4:34:7f:83:81:bc:28:24:1b:f5:4a:8f:
df:9d:36:4d:e7:4e:66:33:24:4e:8e:31:68:00:7a:
85:42:06:fc:d5:cc:8d:0b:4b:26:6a:7c:8b:25:20:
40:22:2f:bc:05:55:7e:e3:d6:1b:94:f9:84:a7:fb:
15:6c:53:e0:84:16:ef:40:7c:0d:f1:ed:f4:66:49:
c4:80:77:b4:f0:61:5b:2a:c6:5b:4f:3d:85:6b:7b:
a8:63:03:ae:93:5a:3c:b1:3b:66:54:58:fd:ff:89:
d8:59:7f:c6:7d:a7:ff:f1:0b:48:fa:82:31:ae:f9:
55:f1:4b:39:d4:94:a5:7c:0d:27:5f:42:d6:23:18:
47:5f:db:29:b5:b1:6e:4b:f7:95:b1:fc:45:01:31:
cb:67:db:24:d0:78:35:b7:1c:1f:0d:23:05:ea:f7:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A0:82:95:59:E9:83:3A:04:52:A7:7A:AB:57:C5:F2:6D:A8:EA:22
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/z6CClVnpgzoEUqd6q1fF8m2o6iI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.93.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f1:ea:62:e6:24:1a:2a:b2:45:4d:b9:ad:aa:53:07:e4:3a:
b9:14:18:f8:7a:46:3b:7a:fc:38:ee:86:80:29:31:62:d0:74:
50:10:e7:84:1f:3d:02:7e:70:ed:2d:94:46:5f:90:ca:c5:f0:
62:28:01:4a:f9:eb:3f:c1:27:ec:5e:71:fb:f5:01:80:4c:ea:
df:5a:16:cc:d1:bd:9f:91:85:1d:4a:9d:df:b8:d4:93:90:f0:
1d:ea:68:d4:4e:10:bd:d0:23:a1:55:b7:28:fe:04:d6:86:8e:
3a:43:f8:0e:4f:f3:5f:1b:a2:a6:af:23:ab:da:52:1d:94:9f:
9d:c9:f9:80:76:6e:d5:37:7e:51:89:04:22:e4:cd:bc:ab:26:
9f:e1:fc:3a:5e:89:be:cf:4a:e9:9c:5c:68:6f:e3:7a:99:c0:
86:55:e9:89:fe:7d:43:b4:85:ff:78:23:15:19:1c:92:55:6e:
09:9c:fa:43:ce:2b:58:db:51:6f:fa:47:2f:ec:b8:df:06:e0:
b3:3f:8c:1b:90:13:4b:7b:bc:dd:40:64:ea:1f:e2:da:93:b2:
3a:69:00:b2:8a:82:c9:60:d2:08:ea:e6:f5:a4:d2:38:21:39:
60:c9:a2:a1:21:f6:28:bb:ca:91:38:7d:d7:6c:1d:a0:8f:33:
fc:7c:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:47 2025 by rpki-client