Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa
File: qPTdKAqShrGpfL0vzX2Thwykdz4.roa (raw, json)
Hash identifier: G5XyzrC9DKKQXTNoqtUT55LljRWAhx2tEjRJFr4VKkg=
Subject key identifier: A8:F4:DD:28:0A:92:86:B1:A9:7C:BD:2F:CD:7D:93:87:0C:A4:77:3E
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D0D
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa
Signing time: Fri 17 Jan 2025 01:26:48 +0000
ROA not before: Fri 17 Jan 2025 01:26:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 17621
IP address blocks: 106.75.208.0/20 maxlen: 20
106.75.224.0/20 maxlen: 20
106.75.240.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7437 (0x1d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A8F4DD280A9286B1A97CBD2FCD7D93870CA4773E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:0f:6c:99:ba:ee:cd:58:c3:92:50:4f:ad:
79:36:4b:eb:08:6b:bc:e4:86:ee:6f:06:be:88:26:
46:05:fa:fb:22:d3:37:11:88:6c:17:10:e6:ff:94:
40:b0:91:9f:98:3b:2d:ea:49:fd:3a:fa:e7:47:8d:
c4:2a:0f:1d:2e:59:3c:58:7e:81:2a:87:e2:2f:03:
8e:63:fd:6a:77:77:a8:65:51:51:f0:11:4c:c7:bb:
8d:99:54:99:1f:b7:ad:35:bf:bc:1d:5f:ce:9c:0d:
76:3b:ca:da:bb:36:b6:79:58:cf:49:79:93:91:4a:
68:ca:29:7f:f6:4e:33:7b:e9:95:6e:a5:5f:d5:d2:
9a:90:42:6a:80:1d:fa:fd:d8:60:05:22:96:37:00:
c4:02:81:b3:d6:49:d9:ea:59:a4:6d:35:06:95:a1:
9a:6e:42:04:e2:10:43:38:e1:24:eb:6f:c6:e4:fc:
9e:9e:7b:46:b4:aa:bc:45:36:a6:89:7c:b0:e5:dc:
a6:5d:06:d4:29:fa:10:74:c1:72:42:e5:17:28:ab:
65:6b:43:fd:d9:5d:d7:3f:0e:da:9d:bf:09:0a:ae:
be:29:4d:8e:a2:ee:1c:23:35:62:db:69:25:72:2f:
46:ce:eb:8c:2e:21:f8:e2:bd:6a:62:d0:25:55:be:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:DD:28:0A:92:86:B1:A9:7C:BD:2F:CD:7D:93:87:0C:A4:77:3E
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/qPTdKAqShrGpfL0vzX2Thwykdz4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0-106.75.255.255
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
94:53:a8:9c:2f:01:0f:2f:aa:e8:12:8b:2b:7d:53:f8:ea:29:
1e:13:28:a9:4e:be:2d:b7:06:8d:48:fb:9e:4e:db:e1:9c:b2:
c5:0c:81:1d:aa:a3:b8:51:4a:f9:ce:99:93:8d:35:bb:58:ce:
0f:4a:76:b7:60:64:9d:be:a5:91:04:13:b8:b6:89:7a:96:1c:
6d:aa:c8:91:0a:44:14:30:85:a9:08:24:40:49:1f:ed:ba:3a:
96:76:ac:99:62:cc:3b:bd:0b:c3:fd:2b:ff:95:61:01:99:90:
e5:5c:6d:5c:ac:1d:02:e4:a3:6e:d0:af:27:ae:3a:0b:c8:4d:
a6:1d:c1:07:e3:e0:b5:81:50:05:94:1b:1b:f7:5a:14:2b:cc:
9a:dc:8a:2a:ef:2b:12:d0:0a:ab:8f:a1:b7:c5:d7:41:ae:0e:
54:80:83:e4:3d:ac:2f:e4:d3:2f:90:4e:71:08:b1:d1:2a:21:
d1:87:02:2f:5d:9e:ab:8b:b8:f1:47:80:c0:27:05:90:81:e2:
f5:55:1f:83:72:c7:c4:87:16:90:ac:23:d6:f3:98:cc:fd:b9:
90:7c:1d:8a:79:56:78:be:76:62:f9:cf:f9:34:1d:e1:e9:98:
99:5d:23:66:39:86:ef:c1:16:76:bc:33:af:de:5a:09:65:f4:
c4:30:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:27 2025 by rpki-client