Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa
File: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (raw, json)
Hash identifier: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=
Subject key identifier: 1D:F0:44:B5:3A:96:4D:29:00:B6:2A:56:6A:F5:D5:47:EC:BD:FA:3A
Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Certificate serial: 33
Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa
Signing time: Thu 22 May 2025 02:51:21 +0000
ROA not before: Thu 22 May 2025 02:51:21 +0000
ROA not after: Tue 12 May 2026 12:19:28 +0000
asID: 131526
IP address blocks: 103.227.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3
Validity
Not Before: May 22 02:51:21 2025 GMT
Not After : May 12 12:19:28 2026 GMT
Subject: CN=1DF044B53A964D2900B62A566AF5D547ECBDFA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:e3:f0:07:79:c3:65:ba:c2:32:3f:12:16:
67:ab:13:48:ba:11:0f:b2:fd:30:4b:8d:76:15:23:
68:2b:ca:e1:1c:00:89:29:c3:34:fd:d7:6b:8e:63:
81:d8:c5:74:79:fb:53:ab:84:8f:d3:bd:9d:2b:fb:
76:ff:af:e2:b8:0c:9a:6e:8b:4d:54:76:8b:fa:b6:
97:d8:e4:fb:df:63:9e:22:02:ad:3e:49:f9:09:38:
8d:fa:e5:8e:7f:0e:0e:16:44:7a:64:b6:49:40:6e:
b9:3f:be:c0:73:4e:07:5d:6b:24:f2:06:0b:74:19:
c1:ed:f9:a4:b4:84:be:98:be:09:6d:05:42:07:5c:
af:e8:37:4b:fc:24:8d:51:be:97:98:b7:8e:07:1f:
41:2c:44:f6:b3:38:0c:dc:36:74:8a:53:60:0d:ff:
64:cd:e4:b9:b8:f7:74:b3:50:1b:58:b8:d5:c0:e5:
e7:13:a5:bf:1f:01:c7:0c:03:81:3c:6a:3c:80:4b:
09:43:cb:8e:3c:6e:6b:71:62:14:d9:1e:08:1e:99:
95:e6:b6:88:85:32:5b:1e:82:9e:2a:47:96:a4:bd:
b1:8c:ad:a1:67:17:6a:14:3b:86:92:87:0f:96:92:
e5:4a:92:64:ba:84:94:a4:a8:29:f0:8d:c4:2e:38:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:44:B5:3A:96:4D:29:00:B6:2A:56:6A:F5:D5:47:EC:BD:FA:3A
X509v3 Authority Key Identifier:
keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/HfBEtTqWTSkAtipWavXVR-y9-jo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.228.0/22
Signature Algorithm: sha256WithRSAEncryption
67:5c:3f:d3:86:63:41:30:77:4f:8e:fc:fa:e7:40:57:24:d2:
73:b9:c6:96:1f:96:78:0c:2b:2c:b8:97:a3:23:f1:c1:9f:52:
c0:bb:1d:d8:3b:bf:22:95:d4:80:12:f9:e1:12:f6:f5:14:10:
06:36:f2:53:54:32:11:55:ed:ba:26:a4:1f:e1:4c:de:06:63:
b3:e1:62:1f:ed:f3:26:b5:83:10:1e:3c:73:79:d4:c4:c1:3a:
ce:b8:6d:09:5c:be:b9:3d:9a:f7:e3:f2:7f:32:28:84:a1:b6:
ae:f9:59:67:1b:65:37:26:dc:28:58:d8:0e:10:e0:12:3e:e8:
c8:ce:22:ac:7b:71:cb:0f:11:87:cc:8a:bc:42:6b:79:44:b3:
0d:99:d5:77:17:55:1d:e2:5c:e1:fd:f4:0f:bf:da:d4:62:12:
84:a1:bc:63:d0:78:7a:27:5a:2a:fc:32:8e:73:d2:31:cf:2a:
e5:67:ef:f1:e7:80:4a:3b:24:2b:ea:22:07:da:70:dd:dd:6e:
fb:e9:55:dd:0f:d3:f0:f0:b1:78:87:2e:bc:46:35:31:b4:18:
68:61:61:ad:46:d0:d3:7f:6e:d5:04:2b:ef:b6:33:4f:2d:66:
51:bb:41:9e:90:f7:0d:7f:9d:c2:ed:54:41:3d:ae:a7:da:ad:
14:88:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:41 2025 by rpki-client