Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa
File: zS9jMhcq_y7NphJHgaq4ylvwnw0.roa (raw, json)
Hash identifier: +Djqk/j7VlvTD+v76Muvu9VowWFq2CfUkh4UffnWaoU=
Subject key identifier: CD:2F:63:32:17:2A:FF:2E:CD:A6:12:47:81:AA:B8:CA:5B:F0:9F:0D
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18AD
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa
Signing time: Fri 17 Jan 2025 01:25:24 +0000
ROA not before: Fri 17 Jan 2025 01:25:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.6.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6317 (0x18ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CD2F6332172AFF2ECDA6124781AAB8CA5BF09F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:bf:9b:eb:43:54:de:77:ec:61:26:7b:7b:
cb:ad:60:5b:b7:f1:07:ab:d4:45:31:da:c3:bc:1d:
04:e0:75:46:fc:33:9d:5b:6f:22:99:5d:34:5a:1c:
5e:5e:d2:9a:c0:28:72:12:be:00:f3:6d:33:5f:a9:
44:fe:d3:80:13:69:61:38:eb:be:34:bc:87:44:35:
ba:98:46:f3:32:df:d5:89:b0:72:0b:d3:3c:1b:92:
b8:cd:ce:32:f2:e9:be:2b:30:db:f2:b3:6f:e1:a4:
cf:08:60:76:f2:aa:13:78:56:c3:21:fb:12:fa:c1:
43:5e:86:9f:52:62:29:9d:c0:dd:07:24:ad:c9:d1:
b5:9c:b1:a2:13:20:1a:02:0f:9e:59:b2:41:fd:ac:
ba:ee:ce:36:28:a6:0e:d2:9a:6b:0c:d4:3e:4c:cc:
95:f2:4f:e1:7b:f6:cd:66:e7:81:41:c8:a1:53:fc:
59:17:ad:45:d1:2a:83:d1:0d:a2:f0:dc:ba:22:78:
31:bb:4e:e0:9c:72:86:f4:99:2a:a7:95:5e:0a:1e:
4b:b5:67:30:0f:7b:29:43:4d:27:da:f8:41:cf:62:
93:ce:72:ce:95:7e:3a:4c:6f:da:b5:24:72:97:4a:
47:4a:36:9a:0c:7e:6b:ab:53:f1:a8:94:be:0b:2e:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:63:32:17:2A:FF:2E:CD:A6:12:47:81:AA:B8:CA:5B:F0:9F:0D
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/zS9jMhcq_y7NphJHgaq4ylvwnw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.108.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2d:29:6d:e7:81:d5:63:5d:5c:6b:63:d9:42:b5:9a:b3:ff:
9b:8d:9e:e7:5f:20:d0:31:ea:99:a8:60:70:ac:e0:6b:ba:a1:
85:ae:7d:58:c5:aa:a6:0f:15:d5:e8:76:19:2d:e9:0a:c0:84:
91:84:3e:3a:c2:56:3e:a9:12:d2:ce:43:8e:e2:08:94:69:0d:
d3:4e:75:95:9e:17:50:87:c7:ad:19:8a:b2:f2:56:3f:cf:f8:
12:dd:4e:27:8f:0d:90:24:f7:a1:ee:70:da:81:c4:1a:c2:0e:
c1:75:58:37:b8:02:c4:67:bb:9b:13:56:8c:4c:42:cb:a9:8d:
b9:0d:6c:56:a7:d9:b4:aa:7a:b5:14:5a:db:cf:62:59:bd:17:
72:b4:e8:52:06:55:4a:cd:b7:06:08:a8:2e:df:60:38:4b:4a:
3c:e6:fb:04:bf:64:11:77:05:3d:09:b6:77:fe:23:c7:ad:64:
fe:05:30:33:44:32:43:fb:7c:b2:fc:60:df:7b:b1:36:c4:13:
2c:a0:8d:08:28:71:5d:76:d1:d9:b8:8e:ff:25:a6:2d:c4:b6:
cf:dd:99:ef:60:af:f5:f3:ae:43:bb:e9:07:c2:d7:d5:50:69:
02:59:51:b5:23:49:7b:7f:1f:d1:5b:4a:12:b2:f9:ea:72:54:
c1:e1:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:15 2025 by rpki-client