Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa
File: 8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa (raw, json)
Hash identifier: DLkfkKkYbBqlpfpmTqVc4hhdSqL0TnCipgs6o9Ni3gg=
Subject key identifier: F0:74:1F:25:D0:28:E2:AE:32:D7:76:71:2B:AF:B1:15:12:C9:35:3E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18A0
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa
Signing time: Fri 17 Jan 2025 01:25:20 +0000
ROA not before: Fri 17 Jan 2025 01:25:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6304 (0x18a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F0741F25D028E2AE32D776712BAFB11512C9353E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:55:0a:13:d0:2f:65:5d:6e:28:60:63:74:
c9:d1:b5:f9:c8:76:d4:08:4d:81:63:71:3f:d0:83:
6a:e3:ae:76:fb:f5:91:bc:52:97:91:2d:76:64:44:
2d:04:b0:f8:d5:59:21:fa:d5:0d:fb:29:90:5e:61:
94:1f:b7:68:6e:cb:13:f8:e4:c0:2f:f7:a9:11:db:
68:99:62:75:da:c3:d4:f3:ce:f4:90:02:a3:64:8c:
db:53:5b:5c:4e:63:f5:45:2c:04:68:ed:48:8a:de:
9b:5e:c8:b5:f0:7c:f6:f0:18:0d:6c:7f:6e:b4:7d:
b1:fc:a4:fd:1c:cb:52:a9:ad:b7:ee:d9:65:0a:b9:
8d:62:80:94:ee:f0:7a:22:e6:d5:e2:56:f0:26:6f:
a4:a8:2b:15:40:25:2f:97:06:7a:8f:2e:db:57:3f:
d6:3b:7a:97:6b:4f:ce:12:af:89:5b:63:50:ba:3d:
14:a3:5c:0b:04:2f:48:00:9e:c5:c3:51:62:8c:3a:
cb:4b:6d:be:a5:ca:c2:95:f4:c8:a2:31:58:7d:14:
3a:83:36:b7:70:8e:a8:a8:4a:06:2a:6b:06:f4:01:
88:fd:fc:05:ad:ab:6b:c2:ea:6b:73:66:2b:3a:54:
7f:a7:ce:cb:9a:b1:2f:fa:d0:97:7b:d1:c0:12:b0:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:1F:25:D0:28:E2:AE:32:D7:76:71:2B:AF:B1:15:12:C9:35:3E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/8HQfJdAo4q4y13ZxK6-xFRLJNT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:49:ec:e3:c7:62:f7:34:0d:1a:d3:c8:ae:c6:8b:61:c0:a2:
1e:54:89:18:b1:f5:5d:63:93:70:51:81:1f:01:62:a7:48:85:
4d:ed:bb:cf:a6:72:83:05:28:87:ca:a6:e3:47:ff:fd:6e:28:
5f:1a:0b:7f:f5:4f:fa:87:d7:aa:4d:8c:69:89:50:ef:6b:09:
99:62:0e:b6:e3:b5:ec:b8:2d:94:bb:55:df:54:e0:56:27:51:
57:e5:b6:c6:c8:94:94:a5:34:fb:c9:09:23:a2:18:05:a2:02:
15:4f:ac:cd:b9:e1:c3:1d:50:f9:6c:72:28:bf:d8:4e:a2:4e:
9b:4b:69:f6:4c:8b:d0:13:1f:46:3b:e5:c8:46:50:36:94:c7:
50:5a:34:ae:d5:d0:f9:b5:94:9f:ac:cd:1a:46:c8:42:cf:54:
38:bf:3a:c5:e0:ca:31:a5:7e:95:d3:b2:8f:09:1b:43:57:30:
50:75:10:f0:ce:63:6d:36:8a:d1:8e:a3:24:58:35:b7:83:81:
65:3d:7d:3c:a0:4b:68:9f:a3:9b:ad:15:54:26:0f:3c:57:67:
4d:26:68:fd:01:d7:dc:d6:49:23:fd:03:ea:ce:d6:9d:ee:bd:
b5:e8:6f:70:a8:a2:38:14:98:7b:e2:18:b2:fc:06:6a:82:16:
1e:b1:1c:75
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYwNzQxRjI1RDAyOEUy
QUUzMkQ3NzY3MTJCQUZCMTE1MTJDOTM1M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjgVUKE9AvZV1uKGBjdMnRtfnIdtQITYFjcT/Qg2rjrnb79ZG8
UpeRLXZkRC0EsPjVWSH61Q37KZBeYZQft2huyxP45MAv96kR22iZYnXaw9TzzvSQ
AqNkjNtTW1xOY/VFLARo7UiK3pteyLXwfPbwGA1sf260fbH8pP0cy1Kprbfu2WUK
uY1igJTu8Hoi5tXiVvAmb6SoKxVAJS+XBnqPLttXP9Y7epdrT84Sr4lbY1C6PRSj
XAsEL0gAnsXDUWKMOstLbb6lysKV9MiiMVh9FDqDNrdwjqioSgYqawb0AYj9/AWt
q2vC6mtzZis6VH+nzsuasS/60Jd70cASsCU1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU8HQfJdAo4q4y13ZxK6+xFRLJNT4wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzhIUWZKZEFvNHE0eTEz
WnhLNi14RlJMSk5UNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn3RwwDQYJKoZIhvcNAQELBQADggEBACpJ7OPHYvc0DRrTyK7Gi2HAoh5UiRix
9V1jk3BRgR8BYqdIhU3tu8+mcoMFKIfKpuNH//1uKF8aC3/1T/qH16pNjGmJUO9r
CZliDrbjtey4LZS7Vd9U4FYnUVfltsbIlJSlNPvJCSOiGAWiAhVPrM254cMdUPls
cii/2E6iTptLafZMi9ATH0Y75chGUDaUx1BaNK7V0Pm1lJ+szRpGyELPVDi/OsXg
yjGlfpXTso8JG0NXMFB1EPDOY202itGOoyRYNbeDgWU9fTygS2ifo5utFVQmDzxX
Z00maP0B19zWSSP9A+rO1p3uvbXob3CoojgUmHviGLL8BmqCFh6xHHU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:25:40 2025 by rpki-client