Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa
File: 1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa (raw, json)
Hash identifier: M6l4D8s67NLbiidJV/CwXD93wBCesGN7x6RL/99YpG4=
Subject key identifier: D4:AC:D5:9A:D1:F6:08:F9:C7:9C:F1:55:D7:24:BD:48:4F:C1:88:20
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18D5
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa
Signing time: Fri 17 Jan 2025 01:25:38 +0000
ROA not before: Fri 17 Jan 2025 01:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6357 (0x18d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D4ACD59AD1F608F9C79CF155D724BD484FC18820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:53:11:6c:8f:ae:e9:3c:7a:af:1c:81:47:
92:f5:ee:20:80:b8:5f:29:74:bd:a0:1c:24:f5:da:
6e:67:23:11:fb:99:a2:96:f0:9e:5d:4b:ec:78:6d:
a6:2b:bf:41:54:76:2f:69:a7:2f:a6:e0:86:3b:85:
1c:7b:d7:e0:de:60:b9:18:e2:40:c7:e8:57:7e:7a:
4a:f7:35:9f:f8:bf:cd:d1:7b:64:7c:2b:8e:be:93:
db:89:b5:c2:a8:2a:10:55:d3:37:51:b2:8c:4b:6b:
8e:ec:62:56:7c:dc:96:22:4a:1d:6f:70:52:6c:e2:
82:6f:9d:ed:af:ef:cf:e7:c2:1a:eb:1f:44:bf:dc:
52:6b:54:2f:4d:4b:06:ad:04:5a:73:09:b2:64:b6:
61:fb:83:b7:4f:62:ec:da:e2:5d:a8:35:af:b8:dd:
e6:fb:84:36:3b:99:71:25:57:a3:d4:df:a1:2f:54:
b8:ac:21:f8:85:4b:ac:12:a3:7a:c8:42:29:18:0f:
49:77:76:26:c0:97:a9:d1:eb:c2:f5:94:05:b4:c6:
d2:91:a0:2d:d6:2d:dd:80:4b:5a:3a:c9:10:ea:9a:
7c:d1:ca:10:68:f7:00:9e:64:a6:b9:10:10:cc:45:
8d:94:d9:e1:c2:ba:09:28:8a:e7:60:e0:c5:f8:a9:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AC:D5:9A:D1:F6:08:F9:C7:9C:F1:55:D7:24:BD:48:4F:C1:88:20
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/1KzVmtH2CPnHnPFV1yS9SE_BiCA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5b:e1:e3:c8:d5:f2:e9:f0:ab:21:37:85:6a:05:d3:2b:c1:
ae:72:b8:0d:56:63:8d:ae:04:5f:84:3f:a8:f3:10:28:41:fb:
5e:b3:87:74:43:38:5b:f3:ad:33:15:e0:c9:fb:73:bc:9e:f2:
00:33:23:8f:09:e0:4a:55:58:ce:ef:83:2f:81:3c:98:90:5b:
43:a6:37:b0:70:79:b7:fc:30:4b:17:2f:6d:b4:40:80:12:6b:
84:ec:b5:de:a4:7e:7b:e1:7d:16:d9:28:b2:d0:c7:5d:61:5e:
de:81:fa:3c:45:c2:c7:54:26:35:90:7b:bd:b1:c4:4d:8a:15:
db:bd:98:d5:b0:57:97:82:ce:8e:72:1d:ef:7f:91:65:50:37:
a8:fd:ee:0a:4b:bc:71:54:44:b6:2c:61:6a:b6:ca:83:c8:4a:
fe:f3:1d:e5:36:0d:dc:96:78:03:f3:9c:70:e5:76:76:b2:87:
8c:35:97:12:c7:38:8c:83:3a:73:06:e6:ff:d6:d6:57:a6:4d:
c5:f6:fa:c8:28:f2:e1:5e:46:24:83:13:a8:bc:8b:27:02:cd:
cd:e5:98:13:28:4e:ac:05:a5:c5:b9:62:10:07:6c:6e:a0:a6:
04:5c:92:23:07:ee:db:62:ee:92:c2:5a:db:e8:23:c8:92:87:
2e:b7:e5:ff
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ0QUNENTlBRDFGNjA4
RjlDNzlDRjE1NUQ3MjRCRDQ4NEZDMTg4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKZ1MRbI+u6Tx6rxyBR5L17iCAuF8pdL2gHCT12m5nIxH7maKW
8J5dS+x4baYrv0FUdi9ppy+m4IY7hRx71+DeYLkY4kDH6Fd+ekr3NZ/4v83Re2R8
K46+k9uJtcKoKhBV0zdRsoxLa47sYlZ83JYiSh1vcFJs4oJvne2v78/nwhrrH0S/
3FJrVC9NSwatBFpzCbJktmH7g7dPYuza4l2oNa+43eb7hDY7mXElV6PU36EvVLis
IfiFS6wSo3rIQikYD0l3dibAl6nR68L1lAW0xtKRoC3WLd2AS1o6yRDqmnzRyhBo
9wCeZKa5EBDMRY2U2eHCugkoiudg4MX4qUwnAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU1KzVmtH2CPnHnPFV1yS9SE/BiCAwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzFLelZtdEgyQ1BuSG5Q
RlYxeVM5U0VfQmlDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3REwDQYJKoZIhvcNAQELBQADggEBAFFb4ePI1fLp8KshN4VqBdMrwa5yuA1W
Y42uBF+EP6jzEChB+16zh3RDOFvzrTMV4Mn7c7ye8gAzI48J4EpVWM7vgy+BPJiQ
W0OmN7Bwebf8MEsXL220QIASa4Tstd6kfnvhfRbZKLLQx11hXt6B+jxFwsdUJjWQ
e72xxE2KFdu9mNWwV5eCzo5yHe9/kWVQN6j97gpLvHFURLYsYWq2yoPISv7zHeU2
DdyWeAPznHDldnayh4w1lxLHOIyDOnMG5v/W1lemTcX2+sgo8uFeRiSDE6i8iycC
zc3lmBMoTqwFpcW5YhAHbG6gpgRckiMH7tti7pLCWtvoI8iShy635f8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:41:47 2025 by rpki-client