Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa
File: ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa (raw, json)
Hash identifier: mtF01OQZB4FrXLC5rgApOcnJP5/2xm8KbS60Erj6vHw=
Subject key identifier: A1:F5:83:4E:E6:5D:06:CA:04:1D:DA:5D:0F:E8:4C:B9:E2:67:EE:54
Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003
Certificate serial: 1B9E
Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa
Signing time: Fri 17 Jan 2025 01:27:26 +0000
ROA not before: Fri 17 Jan 2025 01:27:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131482
IP address blocks: 103.108.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7070 (0x1b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193519DD773C40D04F641CC44558D3461297B003
Validity
Not Before: Jan 17 01:27:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A1F5834EE65D06CA041DDA5D0FE84CB9E267EE54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:bc:ba:c2:84:45:17:18:19:45:85:73:d6:
ea:96:47:ea:da:05:42:b6:b6:90:dc:94:3f:0a:26:
4f:25:dc:ba:98:7f:ce:11:4b:fc:26:8c:cc:42:2e:
56:7e:28:f6:a9:5d:a3:be:13:56:c6:2a:ca:47:c1:
aa:f7:31:cc:3c:2c:47:53:2e:09:81:d0:87:ba:83:
db:2d:8e:0c:18:dc:5b:14:3c:9e:bb:7a:20:d0:f2:
e4:66:05:37:95:06:bc:41:5a:28:af:92:ba:78:0e:
88:9f:7a:1b:2e:7b:0d:da:7b:c9:91:11:53:ff:be:
77:fe:cf:85:04:4d:28:e4:78:49:96:ec:cd:7c:61:
a0:dd:44:95:51:d5:d2:52:4c:d5:cc:fc:70:86:47:
6d:56:11:05:4a:5b:76:cf:8d:99:eb:56:e1:b1:67:
26:2c:68:15:aa:01:04:93:64:84:34:31:6f:5b:40:
a6:d2:58:3d:35:92:2b:9c:1c:28:28:56:4b:09:b8:
ce:e5:09:da:5e:a8:53:9c:fd:19:8a:b8:b4:4c:6b:
6f:fd:56:70:bd:51:35:b3:f2:d0:24:fd:44:22:f9:
3e:39:f0:d0:89:45:f8:18:43:25:28:bc:c8:e3:c6:
c1:83:70:bb:ab:b9:da:20:57:43:70:11:65:cf:61:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:83:4E:E6:5D:06:CA:04:1D:DA:5D:0F:E8:4C:B9:E2:67:EE:54
X509v3 Authority Key Identifier:
keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/ofWDTuZdBsoEHdpdD-hMueJn7lQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a3:5f:06:bc:1f:50:d7:24:7c:d3:18:95:c8:20:b7:56:d6:
75:3c:09:ab:ee:c5:1a:e0:08:6d:1d:ec:45:ed:bb:5f:b8:54:
1f:31:69:b7:fc:25:4b:bd:fb:dd:0e:ab:e4:7c:38:84:22:4e:
cb:07:6e:6b:1b:ac:6e:a9:d2:69:39:61:2b:60:3d:c6:31:59:
0d:76:34:cc:96:68:63:0e:04:12:fb:31:1c:8b:b2:55:6a:10:
19:7f:30:14:43:2b:43:57:9d:30:73:5a:da:12:c0:d5:25:d9:
73:ea:32:fe:45:e4:c0:fd:09:8c:e5:08:49:6e:4e:61:48:a0:
3c:8d:65:dd:ff:bb:ce:84:17:cc:93:cf:fd:5f:75:2c:b2:0c:
b9:83:07:37:df:e7:4f:ef:93:54:15:ee:da:e3:bc:10:f8:a5:
ac:fa:7f:32:7d:ca:f6:3a:88:46:3d:8d:f0:69:40:ae:e4:be:
b1:33:23:06:6c:50:69:d1:cf:72:68:d4:2f:75:b9:a7:30:2d:
1a:cd:71:cc:99:ce:8d:71:6e:79:f8:5a:c6:c7:07:a4:65:7b:
4f:1f:c7:06:97:bc:f1:72:7b:8a:d6:3d:ad:b4:44:27:34:b4:
d1:1b:e6:33:52:e7:94:a2:4d:3c:64:8f:18:e6:06:5e:ec:cb:
60:5d:e7:6e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICG54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTkz
NTE5REQ3NzNDNDBEMDRGNjQxQ0M0NDU1OEQzNDYxMjk3QjAwMzAeFw0yNTAxMTcw
MTI3MjZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExRjU4MzRFRTY1RDA2
Q0EwNDFEREE1RDBGRTg0Q0I5RTI2N0VFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDh8by6woRFFxgZRYVz1uqWR+raBUK2tpDclD8KJk8l3LqYf84R
S/wmjMxCLlZ+KPapXaO+E1bGKspHwar3Mcw8LEdTLgmB0Ie6g9stjgwY3FsUPJ67
eiDQ8uRmBTeVBrxBWiivkrp4Doifehsuew3ae8mREVP/vnf+z4UETSjkeEmW7M18
YaDdRJVR1dJSTNXM/HCGR21WEQVKW3bPjZnrVuGxZyYsaBWqAQSTZIQ0MW9bQKbS
WD01kiucHCgoVksJuM7lCdpeqFOc/RmKuLRMa2/9VnC9UTWz8tAk/UQi+T458NCJ
RfgYQyUovMjjxsGDcLurudogV0NwEWXPYUwFAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUofWDTuZdBsoEHdpdD+hMueJn7lQwHwYDVR0jBBgwFoAUGTUZ3Xc8QNBPZBzE
RVjTRhKXsAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjkw
My9HVFVaM1hjOFFOQlBaQnpFUlZqVFJoS1hzQU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0dUVVozWGM4UU5CUFpCekVSVmpUUmhLWHNBTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MDMvb2ZXRFR1WmRCc29F
SGRwZEQtaE11ZUpuN2xRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdsoDANBgkqhkiG9w0BAQsFAAOCAQEAAqNfBrwfUNckfNMYlcggt1bWdTwJ
q+7FGuAIbR3sRe27X7hUHzFpt/wlS7373Q6r5Hw4hCJOywduaxusbqnSaTlhK2A9
xjFZDXY0zJZoYw4EEvsxHIuyVWoQGX8wFEMrQ1edMHNa2hLA1SXZc+oy/kXkwP0J
jOUISW5OYUigPI1l3f+7zoQXzJPP/V91LLIMuYMHN9/nT++TVBXu2uO8EPilrPp/
Mn3K9jqIRj2N8GlAruS+sTMjBmxQadHPcmjUL3W5pzAtGs1xzJnOjXFuefhaxscH
pGV7Tx/HBpe88XJ7itY9rbREJzS00RvmM1LnlKJNPGSPGOYGXuzLYF3nbg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:10:52 2025 by rpki-client