Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa
File: TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa (raw, json)
Hash identifier: TMi874/SBAig+zK+xBqHWaRYSavUYVZMUZDHF5gp/Nk=
Subject key identifier: 4C:2E:52:18:4B:12:6E:4E:AA:39:90:D0:39:93:0E:28:94:49:CD:2F
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0FEE
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa
Signing time: Mon 28 Oct 2024 07:22:54 +0000
ROA not before: Mon 28 Oct 2024 07:22:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 146806
IP address blocks: 103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4078 (0xfee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Oct 28 07:22:54 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C2E52184B126E4EAA3990D039930E289449CD2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:8f:4f:58:b3:93:9c:c9:7b:5c:2f:ba:23:
c7:5e:0f:18:b6:3e:59:c3:f7:5b:ad:d2:76:0f:3d:
c6:12:65:c9:72:5c:96:69:3a:a9:ec:e4:5f:e0:fd:
71:6d:e0:de:86:11:8b:b4:25:de:d6:88:4d:d0:d4:
da:b7:87:69:bb:c7:51:f7:19:ec:99:3f:29:03:a3:
1d:24:e7:8f:e7:3e:7c:7e:01:40:1b:8f:43:75:4d:
a2:48:ac:09:00:5a:05:37:df:23:81:65:e3:d5:f5:
7b:70:f7:91:ad:3d:29:f0:e3:1c:54:a3:dc:76:71:
d5:bf:99:d8:df:52:9b:8e:ff:f1:bd:6f:c1:6b:1f:
22:5a:87:37:57:02:a0:9a:7c:e5:8c:8d:9c:27:dc:
4f:71:d6:5d:a6:4c:7c:12:0b:fc:0d:af:06:d8:89:
38:b2:a0:96:5c:b6:c1:5e:f3:d0:66:f4:a4:07:13:
93:ce:43:5b:1b:54:4c:43:4d:fe:5b:51:bb:6f:0f:
a8:c8:c3:ef:ee:35:ea:b6:d5:f7:2f:67:46:b0:c1:
d0:f2:f8:36:8b:db:79:80:37:a8:71:e9:02:f6:05:
92:a1:4c:37:95:10:17:8d:87:8b:95:89:c0:ea:5c:
a4:22:e3:72:b3:ae:eb:ca:a1:27:ef:11:02:b9:ef:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:52:18:4B:12:6E:4E:AA:39:90:D0:39:93:0E:28:94:49:CD:2F
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/TC5SGEsSbk6qOZDQOZMOKJRJzS8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f3:fc:49:a2:e2:53:8d:fe:67:b9:13:7a:35:a5:30:ba:ad:
c6:ba:9c:10:ef:96:5e:38:90:1b:e0:3c:93:03:74:cd:73:bd:
8a:ca:40:29:ff:90:96:1d:69:46:2b:2f:66:1a:0f:58:7f:2c:
cc:93:f6:23:0b:a1:8c:a4:d9:f0:97:25:fd:69:1f:b8:b3:fd:
46:fe:e8:4e:f2:7c:8a:53:c2:f1:fa:90:a7:7f:66:63:8d:9e:
9a:d6:4b:0f:00:04:d4:05:fc:6b:a5:5c:d2:c5:bb:d9:7c:a0:
98:29:cf:c9:04:1c:1e:41:37:7a:28:66:48:71:a1:6a:2d:de:
34:67:8e:da:0a:79:fa:f8:f3:3f:b2:b1:37:d4:6a:a5:81:77:
fc:63:2d:27:14:b0:b3:63:a8:59:a1:b8:94:5f:50:3b:b9:df:
bb:b8:8d:ae:0a:9e:68:1e:8d:32:7d:1b:0a:0b:b0:73:41:f1:
37:a3:65:e8:1a:93:72:21:9f:d0:2c:c7:2b:96:d9:f4:9d:03:
7a:df:1b:14:e0:f8:d3:ff:94:56:bb:88:f7:37:91:1b:e3:4e:
53:fd:e8:35:9d:12:7c:64:32:dd:6d:96:0f:5f:5a:ee:9d:1d:
b8:4f:2b:85:1e:be:8b:0f:40:b4:c9:f4:8e:be:d7:3a:5e:4c:
93:e9:b1:60
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw
OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDEwMjgw
NzIyNTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDMkU1MjE4NEIxMjZF
NEVBQTM5OTBEMDM5OTMwRTI4OTQ0OUNEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdi49PWLOTnMl7XC+6I8deDxi2PlnD91ut0nYPPcYSZclyXJZp
Oqns5F/g/XFt4N6GEYu0Jd7WiE3Q1Nq3h2m7x1H3GeyZPykDox0k54/nPnx+AUAb
j0N1TaJIrAkAWgU33yOBZePV9Xtw95GtPSnw4xxUo9x2cdW/mdjfUpuO//G9b8Fr
HyJahzdXAqCafOWMjZwn3E9x1l2mTHwSC/wNrwbYiTiyoJZctsFe89Bm9KQHE5PO
Q1sbVExDTf5bUbtvD6jIw+/uNeq21fcvZ0awwdDy+DaL23mAN6hx6QL2BZKhTDeV
EBeNh4uVicDqXKQi43KzruvKoSfvEQK578sJAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUTC5SGEsSbk6qOZDQOZMOKJRJzS8wHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R
7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2
OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvVEM1U0dFc1NiazZx
T1pEUU9aTU9LSlJKelM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdP5TANBgkqhkiG9w0BAQsFAAOCAQEAbPP8SaLiU43+Z7kTejWlMLqtxrqc
EO+WXjiQG+A8kwN0zXO9ispAKf+Qlh1pRisvZhoPWH8szJP2IwuhjKTZ8Jcl/Wkf
uLP9Rv7oTvJ8ilPC8fqQp39mY42emtZLDwAE1AX8a6Vc0sW72XygmCnPyQQcHkE3
eihmSHGhai3eNGeO2gp5+vjzP7KxN9RqpYF3/GMtJxSws2OoWaG4lF9QO7nfu7iN
rgqeaB6NMn0bCguwc0HxN6Nl6BqTciGf0CzHK5bZ9J0Det8bFOD40/+UVruI9zeR
G+NOU/3oNZ0SfGQy3W2WD19a7p0duE8rhR6+iw9AtMn0jr7XOl5Mk+mxYA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:04:07 2025 by rpki-client