Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa
File: DVHwsi5lLnGlBfITub2vKrsUUrw.roa (raw, json)
Hash identifier: nVk7/Vejf4Va/P8hFUB3buY+dnXf52opUBCiDWkeCN8=
Subject key identifier: 0D:51:F0:B2:2E:65:2E:71:A5:05:F2:13:B9:BD:AF:2A:BB:14:52:BC
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18F5
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa
Signing time: Fri 17 Jan 2025 01:25:52 +0000
ROA not before: Fri 17 Jan 2025 01:25:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6389 (0x18f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0D51F0B22E652E71A505F213B9BDAF2ABB1452BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:00:fb:27:13:cd:6f:1f:b3:e9:f6:ef:3e:
10:1f:c2:75:99:94:4e:5e:49:24:8d:e9:53:eb:ce:
21:6f:20:a0:25:22:97:cf:cf:fe:b4:a3:5e:dc:21:
30:fa:e6:ab:3d:88:9b:13:11:50:e6:70:8e:70:10:
b4:7b:6f:8d:d8:ae:36:23:64:5f:76:69:92:bf:ff:
72:50:33:e0:c4:d2:83:22:99:ac:90:4f:a8:2e:ab:
0e:fb:51:da:9a:a3:13:f2:49:b5:7c:b4:0c:58:b6:
1e:da:38:a3:4f:7c:67:15:40:aa:cd:2d:3a:b2:35:
37:0d:5f:5d:bb:2b:31:a3:98:a9:43:72:6c:3f:24:
02:c7:c6:4b:ff:cd:ba:1c:e0:cb:91:6e:be:5b:ce:
b3:0b:cb:cb:d2:60:5b:41:b7:6b:62:74:de:26:92:
03:bc:91:2c:17:e0:39:b1:7b:00:94:33:ee:cb:e4:
b0:0c:92:bb:01:44:e0:b7:9c:a0:f9:ba:99:c7:52:
2b:81:8b:fd:cd:6f:e7:f2:8c:0c:01:41:12:39:67:
80:cc:5c:07:9b:4b:2b:19:91:c5:2d:1f:90:57:32:
5f:e1:23:95:ca:bf:87:51:a3:4e:ec:f5:1f:04:2b:
f7:7f:88:11:b4:29:23:ce:6d:16:1b:cd:c8:6c:19:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:51:F0:B2:2E:65:2E:71:A5:05:F2:13:B9:BD:AF:2A:BB:14:52:BC
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DVHwsi5lLnGlBfITub2vKrsUUrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c7:83:59:b7:1f:99:7d:14:1b:51:67:7f:b4:13:40:90:66:
1f:75:a0:15:ae:52:23:7f:ec:7c:bc:3f:92:2a:aa:6e:35:79:
4b:71:88:ef:b2:31:8a:cd:a9:48:78:9f:a5:e9:f3:75:bd:6d:
a5:51:c3:51:e5:11:19:59:5e:9c:21:28:88:91:37:fb:54:58:
ea:41:2a:ec:ce:91:f4:54:8e:b0:fd:fd:ae:45:62:1e:24:7a:
5d:5f:be:4b:23:8b:b0:70:9b:84:ed:c2:fa:ec:2c:08:9e:97:
4d:f6:dd:32:09:4f:3b:e9:29:f7:7a:18:ae:da:8f:41:bc:49:
44:b1:2c:33:48:fd:b3:55:df:5a:ff:89:6d:75:10:b6:80:a0:
55:6a:65:5b:3a:e3:96:d1:9a:16:d7:76:f9:d2:37:ac:01:d9:
d8:54:58:c4:71:98:ea:1a:47:c6:94:4f:d0:f5:ee:1e:f4:12:
37:a7:3c:31:1e:c9:a8:70:c5:3a:b1:41:99:d4:5e:4d:89:77:
c2:7e:1e:72:a2:87:41:0e:c2:de:d4:74:79:61:74:5d:94:b9:
56:63:05:df:0d:93:93:e3:c0:ae:ec:71:fe:da:80:ab:8c:dd:
68:12:a9:76:ec:f3:55:48:97:2d:1a:d3:07:b8:f8:42:b6:5e:
7b:90:bf:d4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI1NTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBENTFGMEIyMkU2NTJF
NzFBNTA1RjIxM0I5QkRBRjJBQkIxNDUyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmlAD7JxPNbx+z6fbvPhAfwnWZlE5eSSSN6VPrziFvIKAlIpfP
z/60o17cITD65qs9iJsTEVDmcI5wELR7b43YrjYjZF92aZK//3JQM+DE0oMimayQ
T6guqw77UdqaoxPySbV8tAxYth7aOKNPfGcVQKrNLTqyNTcNX127KzGjmKlDcmw/
JALHxkv/zboc4MuRbr5bzrMLy8vSYFtBt2tidN4mkgO8kSwX4DmxewCUM+7L5LAM
krsBROC3nKD5upnHUiuBi/3Nb+fyjAwBQRI5Z4DMXAebSysZkcUtH5BXMl/hI5XK
v4dRo07s9R8EK/d/iBG0KSPObRYbzchsGeB7AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUDVHwsi5lLnGlBfITub2vKrsUUrwwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0RWSHdzaTVsTG5HbEJm
SVR1YjJ2S3JzVVVydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3RowDQYJKoZIhvcNAQELBQADggEBAKLHg1m3H5l9FBtRZ3+0E0CQZh91oBWu
UiN/7Hy8P5Iqqm41eUtxiO+yMYrNqUh4n6Xp83W9baVRw1HlERlZXpwhKIiRN/tU
WOpBKuzOkfRUjrD9/a5FYh4kel1fvksji7Bwm4TtwvrsLAiel0323TIJTzvpKfd6
GK7aj0G8SUSxLDNI/bNV31r/iW11ELaAoFVqZVs645bRmhbXdvnSN6wB2dhUWMRx
mOoaR8aUT9D17h70EjenPDEeyahwxTqxQZnUXk2Jd8J+HnKih0EOwt7UdHlhdF2U
uVZjBd8Nk5PjwK7scf7agKuM3WgSqXbs81VIly0a0we4+EK2XnuQv9Q=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:50:00 2025 by rpki-client