Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa
File: PBcWatDyjvV0lbjudYqTz6HoX6M.roa (raw, json)
Hash identifier: uguhnfOTaHzv8NLUhRkiGLKmgSxuSfHBU+uFGH5tx6E=
Subject key identifier: 3C:17:16:6A:D0:F2:8E:F5:74:95:B8:EE:75:8A:93:CF:A1:E8:5F:A3
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18B1
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa
Signing time: Fri 17 Jan 2025 01:25:26 +0000
ROA not before: Fri 17 Jan 2025 01:25:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4812
IP address blocks: 103.5.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6321 (0x18b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3C17166AD0F28EF57495B8EE758A93CFA1E85FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:b8:2b:b7:17:19:49:38:f3:81:9b:c3:4e:
95:c8:ce:7b:c9:d5:8f:fe:16:da:74:ae:fe:90:12:
63:58:37:3e:09:f4:d5:29:dc:89:e8:33:6d:5f:e8:
9d:70:3c:fc:d5:c1:2b:d3:e8:e2:4b:e8:9b:03:68:
ab:e2:ad:db:31:41:28:64:18:a6:72:c7:55:66:60:
a5:61:7f:a4:a5:30:d0:42:b6:85:55:13:4c:88:47:
a4:54:52:39:1b:9c:6b:7d:5a:0e:8c:df:26:00:47:
89:13:68:28:23:bf:3f:3c:52:97:39:1e:fe:b1:28:
70:13:24:d9:5a:23:8b:45:53:a1:59:30:78:30:f3:
60:d6:1b:ff:fc:42:11:f4:60:e6:e4:20:2f:f0:34:
1c:b5:66:f2:c8:17:38:ea:f8:9d:f3:bd:f1:1d:09:
6e:8f:82:99:b2:eb:ca:90:0a:74:74:a3:22:fd:09:
91:f5:76:68:48:43:39:f0:4b:05:91:34:c4:94:f8:
7f:bd:87:67:ca:bb:e2:4b:be:3f:b7:df:57:5f:c3:
cd:7f:f7:4b:63:52:dc:58:be:53:b6:91:99:67:2f:
6b:78:ea:34:63:fd:85:b8:6d:3f:74:5a:3a:de:2c:
d7:3c:e8:ae:49:d4:8e:6b:1f:f6:eb:8a:36:96:31:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:16:6A:D0:F2:8E:F5:74:95:B8:EE:75:8A:93:CF:A1:E8:5F:A3
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PBcWatDyjvV0lbjudYqTz6HoX6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.192.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ef:8a:28:df:18:2b:4b:c8:9e:08:7a:eb:70:8d:6e:e8:45:
42:1f:11:97:1f:87:99:31:2e:51:c8:00:96:55:72:28:44:fa:
f9:64:7d:5f:6c:c2:f9:3c:28:56:d3:05:61:b0:53:c3:51:8c:
e3:99:8c:9d:74:7f:61:0f:2d:8f:c1:56:91:60:dc:b4:97:6c:
d6:85:33:62:51:ee:64:17:70:6e:e1:9a:5a:71:fb:89:86:53:
b2:1a:b6:37:79:da:bf:47:ab:96:22:8c:f5:e5:de:2a:d6:d5:
be:b3:02:e4:c6:d3:19:75:81:3e:04:00:3f:48:d0:44:66:15:
0a:9a:3c:3d:45:38:11:60:a0:72:1b:c4:75:cb:65:43:d9:f7:
2b:f1:75:39:e7:67:7d:07:f6:7a:b0:98:b5:a8:d3:67:37:d4:
7b:f0:6b:87:b4:d5:fd:10:db:3f:af:9e:2b:92:7f:00:78:de:
21:ea:eb:13:ef:af:43:05:d7:2a:29:3d:8a:8b:c3:de:a4:90:
77:14:1b:a0:84:75:e6:36:4e:ac:9d:78:dd:7c:30:1f:ee:a9:
ec:68:0e:46:de:34:b8:9e:6d:73:d9:18:a5:3b:a8:41:1c:82:
a4:fb:ac:90:ad:d7:9c:0a:6a:49:48:4c:5c:c7:31:77:ec:a7:
3e:d3:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:33:45 2025 by rpki-client