Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/3ZfsYqsPllWOA0FQQL4ANW3nz1s.roa
File: 3ZfsYqsPllWOA0FQQL4ANW3nz1s.roa (raw, json)
Hash identifier: NeZzvHwOI9ZC4iuKs5j8gaxTRsn/VvVfwa946vYQPTQ=
Subject key identifier: DD:97:EC:62:AB:0F:96:55:8E:03:41:50:40:BE:00:35:6D:E7:CF:5B
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 08AC
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/3ZfsYqsPllWOA0FQQL4ANW3nz1s.roa
Signing time: Tue 17 Dec 2024 06:30:20 +0000
ROA not before: Tue 17 Dec 2024 06:30:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58453
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 17 06:30:20 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DD97EC62AB0F96558E03415040BE00356DE7CF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:21:61:85:e0:20:2f:3b:28:f2:d2:92:90:
ae:02:83:30:23:47:5a:a7:de:b6:21:8d:59:7a:07:
58:ce:37:bb:f7:68:97:1e:1e:6c:af:ba:c8:ab:50:
66:fc:36:59:65:3a:44:d6:08:50:56:41:56:03:1a:
f9:ac:89:a8:ae:a4:8c:70:14:e3:09:14:93:b2:1a:
9f:90:f8:39:fd:6a:ca:6a:30:18:e7:57:3c:3b:a9:
7a:52:03:19:71:a7:44:09:c1:ab:f8:b6:3f:32:d4:
af:32:6d:7b:01:38:91:22:0b:ed:73:d9:85:b6:f2:
31:76:ef:f0:ee:78:40:6a:10:6b:74:ef:b8:c2:e9:
3d:22:1e:c1:71:72:e4:ff:66:aa:46:75:e1:52:a9:
f8:9c:de:b9:c3:a6:b8:82:c2:3a:e9:f5:74:77:f1:
20:7a:00:a0:95:cd:52:14:9d:f1:42:8f:94:4e:3d:
62:86:45:e8:e7:47:3a:8a:a0:11:3e:f6:4c:48:69:
f4:49:7b:aa:9b:15:83:00:bb:51:54:9a:4a:16:5c:
1d:92:7d:f8:9b:56:75:3f:7d:b5:08:91:65:79:d7:
b1:65:b8:c1:ce:72:b2:63:bf:7d:84:ae:fe:43:a1:
02:ab:a3:0f:e8:66:21:7c:15:74:ac:1f:8d:5a:61:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:97:EC:62:AB:0F:96:55:8E:03:41:50:40:BE:00:35:6D:E7:CF:5B
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/3ZfsYqsPllWOA0FQQL4ANW3nz1s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c9:6b:ac:28:3e:f2:4d:a4:3a:97:23:88:fa:cc:d7:e4:54:
31:8f:44:7a:7d:60:4a:99:d1:46:7b:cc:08:8d:bf:c0:74:c6:
c4:df:81:e1:d7:ff:57:fa:aa:ed:6b:5c:fa:df:6d:7b:cc:48:
89:f2:1c:ce:76:0e:b1:8b:fb:5c:ba:45:e9:ef:de:59:7d:35:
63:58:c3:32:83:ed:af:37:2a:0c:db:77:3b:c1:8a:46:eb:6d:
b0:89:04:a1:d4:8e:26:5d:70:91:4c:7d:cb:9c:58:84:23:73:
93:cb:d8:88:e8:33:ad:4e:ca:76:b8:32:3d:69:96:32:07:08:
61:72:dd:0e:30:b1:e2:26:22:c2:8c:ff:ac:0e:1d:68:c6:14:
34:a4:0f:e7:5b:50:af:19:18:28:34:95:19:0f:ed:e4:fe:72:
49:d9:d4:40:95:6a:19:b6:93:ef:f1:41:1a:e6:be:fb:24:f2:
26:90:6e:46:c0:0b:73:46:c1:33:d5:94:d2:d1:63:f0:b9:8b:
19:ee:e6:39:04:24:f3:0c:75:b3:1d:16:15:af:90:45:ab:01:
36:98:cc:00:30:7f:62:48:b0:a9:78:26:4b:23:21:c5:0f:28:
ae:c1:4a:b0:c2:9e:47:0f:e7:cd:e4:ff:09:21:60:85:47:e3:
6a:19:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:58 2025 by rpki-client