Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/rqSlQiSwZ08Vlqcb1WE0XFngh3c.roa
File: rqSlQiSwZ08Vlqcb1WE0XFngh3c.roa (raw, json)
Hash identifier: a+HhnP5S7M+P85n5HoNgpkT6cr86OSoNqd9g+GuHkTg=
Subject key identifier: AE:A4:A5:42:24:B0:67:4F:15:96:A7:1B:D5:61:34:5C:59:E0:87:77
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 08B6
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/rqSlQiSwZ08Vlqcb1WE0XFngh3c.roa
Signing time: Wed 18 Dec 2024 01:59:28 +0000
ROA not before: Wed 18 Dec 2024 01:59:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 9808
IP address blocks: 103.205.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 18 01:59:28 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AEA4A54224B0674F1596A71BD561345C59E08777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:6f:e4:96:9f:9a:4d:cd:23:46:07:b0:4e:
9a:e6:36:4e:d8:27:e4:0f:b0:c7:19:d9:e3:54:28:
54:08:c5:a9:1f:34:6c:9f:60:ca:c7:64:77:93:ee:
e3:eb:3f:cb:68:8b:8d:4f:7c:ba:52:d7:fe:12:91:
af:e8:c1:34:e7:08:2c:6d:50:88:b3:bf:2a:9c:46:
ad:96:ff:fe:6e:9b:c8:a8:55:7d:cf:06:b3:5e:1c:
bc:5e:c6:02:2e:fd:10:00:66:cc:23:b3:99:f9:21:
fc:4e:b0:34:82:c9:7a:77:c4:72:45:1a:1e:44:e8:
9d:6b:be:4d:d0:53:22:f7:35:3e:03:d6:30:ca:4d:
b7:76:f9:35:a6:6a:f7:a2:fd:39:8d:4c:f1:56:7e:
91:e0:80:9c:4d:05:a9:2a:2d:87:82:c3:1b:60:d2:
ad:0f:71:b6:4b:9d:c0:12:c6:8f:0b:bd:3e:d0:4c:
17:05:a6:d2:83:3c:e1:75:c5:a6:ce:88:17:f7:4a:
5a:9a:46:6d:71:5e:f1:c7:eb:95:90:1c:5d:f5:ac:
4d:25:82:f4:b8:27:7b:0c:5c:3b:b1:77:e1:c1:be:
ba:14:fe:59:fe:37:f2:07:1e:a3:98:66:71:89:d7:
43:38:48:2a:7f:02:16:e4:85:41:a5:77:b9:c5:64:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:A5:42:24:B0:67:4F:15:96:A7:1B:D5:61:34:5C:59:E0:87:77
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/rqSlQiSwZ08Vlqcb1WE0XFngh3c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.252.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ba:e4:50:7a:65:03:26:cb:58:dc:4f:97:f2:3e:51:35:d5:
6b:aa:f1:fb:17:d6:9d:ae:13:4f:16:ff:b7:05:d3:f4:34:9f:
3b:46:06:4f:3e:2a:55:46:fb:ba:1c:ee:05:0e:d5:9f:bd:36:
62:ae:b3:4a:1d:b1:8a:73:d5:79:78:5d:e2:24:88:4e:50:71:
f8:c5:a6:c3:65:07:39:0d:88:ed:61:ed:6c:b9:3e:27:cc:22:
4a:a6:18:1a:d7:a0:93:f6:74:12:dd:c4:c6:f2:e4:3b:44:18:
09:fb:fa:ab:c2:e2:4b:d3:ff:f5:c1:d9:28:69:df:c7:7a:1b:
cb:12:32:2c:f5:df:ad:16:6b:9c:0d:5d:cc:38:25:5a:c4:a6:
9c:cc:94:1e:f0:c1:bd:ed:4e:77:17:49:44:ad:00:28:a5:40:
a3:bd:3d:d2:2a:ee:f8:c8:78:94:6e:04:1d:04:66:59:e3:6f:
a2:c6:56:58:4a:38:9f:72:0c:00:0c:8c:fa:69:d7:b3:e7:30:
45:b0:ca:be:ff:56:a7:e6:71:83:87:81:34:df:94:e8:b9:16:
51:45:7c:f7:b1:2c:6a:9f:23:d5:e8:d1:4d:9c:28:a4:a1:26:
2d:9e:66:52:9c:43:89:05:44:26:e2:19:d8:59:b1:48:d8:ae:
70:5b:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:10 2025 by rpki-client