Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa
File: ZosdEjPAWx8LHeI97UmA2DI8sRM.roa (raw, json)
Hash identifier: TiPMhw8nKy1jKUPdHMc1CT4xJZde7QCehIKSh5mRHqk=
Subject key identifier: 66:8B:1D:12:33:C0:5B:1F:0B:1D:E2:3D:ED:49:80:D8:32:3C:B1:13
Certificate issuer: /CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B
Certificate serial: 186C
Authority key identifier: FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa
Signing time: Tue 20 May 2025 07:43:23 +0000
ROA not before: Tue 20 May 2025 07:43:23 +0000
ROA not after: Thu 09 Apr 2026 06:40:47 +0000
asID: 4808
IP address blocks: 103.43.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6252 (0x186c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FEE0C827CE296202006EB4ED2B6595DCE0E97C7B
Validity
Not Before: May 20 07:43:23 2025 GMT
Not After : Apr 9 06:40:47 2026 GMT
Subject: CN=668B1D1233C05B1F0B1DE23DED4980D8323CB113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:06:43:c3:ce:ba:9a:5e:e9:0f:c1:62:a1:
a4:26:24:ad:d9:3e:39:b9:11:4d:39:70:59:62:4b:
70:05:90:d8:6a:53:87:12:0f:8d:94:22:e8:bf:1e:
54:69:81:34:f5:c2:72:d5:3e:68:ad:1f:55:12:31:
b9:a8:71:bd:f8:ce:a4:1d:a0:85:63:a3:6f:5f:86:
72:86:3a:20:ce:62:5a:2f:4b:98:2c:9f:92:66:8e:
00:3d:ab:6a:de:d7:b8:cd:b9:a6:03:42:39:88:7c:
a9:68:29:f3:31:0d:c4:50:8b:6c:ac:82:43:5e:21:
1d:28:4c:da:36:4e:94:83:0d:ae:99:05:08:7d:8e:
53:4a:4c:51:5b:ca:40:e5:0c:52:c4:b8:d7:54:01:
29:0d:14:22:85:02:21:30:cd:e3:ba:bd:2b:15:48:
30:2f:62:52:db:a7:74:f0:28:0c:44:f4:61:56:a6:
5c:42:a1:d9:87:fc:bd:28:ee:20:6a:b9:d5:8e:48:
0a:81:a2:93:2e:19:6d:da:a5:57:27:62:a1:30:ed:
37:1c:95:95:24:fe:42:a3:c2:d1:2d:77:6b:86:d4:
3f:f0:1d:5c:75:3e:96:44:c6:06:d6:a6:d8:9e:35:
93:37:99:45:ce:9b:66:a7:43:da:84:87:b0:ca:29:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:1D:12:33:C0:5B:1F:0B:1D:E2:3D:ED:49:80:D8:32:3C:B1:13
X509v3 Authority Key Identifier:
keyid:FE:E0:C8:27:CE:29:62:02:00:6E:B4:ED:2B:65:95:DC:E0:E9:7C:7B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/_uDIJ84pYgIAbrTtK2WV3ODpfHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_uDIJ84pYgIAbrTtK2WV3ODpfHs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/ZosdEjPAWx8LHeI97UmA2DI8sRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.240.0/24
Signature Algorithm: sha256WithRSAEncryption
35:78:57:aa:cf:84:ea:27:eb:9c:31:ca:c8:92:b4:34:30:08:
b6:b3:f0:ab:c4:87:f6:f6:91:3b:b0:3d:a8:12:08:27:9a:8c:
8c:31:37:c5:00:8d:b7:7a:6c:9d:f8:9c:66:b6:d9:41:26:a5:
88:6d:be:e6:4b:04:61:c7:c5:11:85:d6:e0:c0:94:9b:55:25:
99:55:70:a7:77:3a:46:52:38:37:4d:c7:2a:a8:cc:a6:29:bd:
72:d2:1e:d3:45:3f:7f:80:8d:6c:1f:2b:e6:72:c7:3c:7b:97:
93:48:41:c4:19:4c:d6:31:26:38:3d:c8:86:64:d9:82:27:cb:
b6:d7:de:e1:63:41:87:70:ae:40:86:f1:9d:ee:2b:fb:fc:71:
93:9d:03:50:8f:81:41:d3:36:cc:9f:96:13:dd:66:58:0e:ea:
07:39:8b:ca:2e:79:8d:dd:7e:07:6b:9b:0f:28:93:17:9c:bd:
ea:ea:c0:00:bb:62:1b:d9:96:d2:f0:16:fb:04:53:00:d6:35:
71:e7:76:b2:5f:6b:18:6c:2d:d6:0f:ab:db:b2:a5:24:e3:9f:
31:19:1e:0b:9b:97:fc:18:68:24:78:55:4c:ac:6c:20:b3:37:
18:38:10:84:38:00:3d:c9:56:1f:3e:dc:1b:72:a1:4c:d3:4f:
89:80:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:58 2025 by rpki-client