Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa
File: ZjlruEDhcg90J1ECbtAdywghg2w.roa (raw, json)
Hash identifier: EvnaJUQSCaw9R+229iqiVFTtpJbLVCS+v0H29mAudv4=
Subject key identifier: 66:39:6B:B8:40:E1:72:0F:74:27:51:02:6E:D0:1D:CB:08:21:83:6C
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1907
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa
Signing time: Fri 17 Jan 2025 01:25:58 +0000
ROA not before: Fri 17 Jan 2025 01:25:58 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6407 (0x1907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=66396BB840E1720F742751026ED01DCB0821836C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:12:88:b8:57:bf:0d:10:f1:57:fd:12:c6:
46:17:99:f3:85:66:bc:5a:67:1e:ec:e9:57:ad:c2:
36:c0:9d:a0:1d:ac:6b:bd:f9:10:77:27:94:bc:e0:
1f:98:4a:30:d0:5e:e5:88:53:e6:14:9c:02:71:30:
c2:85:fa:40:24:e9:5c:ca:47:d1:11:2d:54:45:1e:
ac:16:ae:30:f2:81:72:3b:5b:ee:e4:83:49:cb:e2:
cc:55:b3:72:fb:bb:75:df:b9:ec:30:c0:94:9c:b3:
ee:6e:f5:df:c6:ee:1a:7d:3e:f6:59:22:58:f9:45:
c7:30:75:f2:b8:e8:b9:ed:70:e1:95:2c:dd:4a:6d:
a4:99:5b:60:07:a6:24:e7:76:8e:e8:89:91:63:81:
4c:db:68:4f:6d:c4:37:d8:3f:0d:e8:62:45:01:1f:
6a:f3:f0:c1:6a:a7:ea:d1:25:ea:c2:39:67:f9:ca:
79:93:2c:df:61:55:86:46:5e:1e:f4:3d:75:e9:07:
8c:44:19:eb:b8:d4:b2:be:66:07:d0:42:3d:67:ba:
f4:75:04:0a:4a:40:c2:7d:c4:b0:0a:51:38:e4:e0:
98:08:ab:eb:22:28:72:04:59:9a:d7:aa:22:1c:65:
54:8d:e3:54:97:bd:65:b8:b4:10:f8:e8:e0:35:46:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:6B:B8:40:E1:72:0F:74:27:51:02:6E:D0:1D:CB:08:21:83:6C
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ZjlruEDhcg90J1ECbtAdywghg2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.29.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d6:4c:2d:1b:2d:ea:23:db:fa:39:30:82:eb:a8:06:49:df:
49:b9:ea:47:27:ae:02:2e:e7:4a:a7:03:00:a9:46:b8:e5:c7:
4e:b2:78:1a:b5:96:88:b9:47:9f:7e:3f:03:5d:34:2e:72:33:
17:01:c2:e4:bf:b1:f1:73:3d:5e:6e:05:37:d2:89:0f:fa:7b:
c0:80:11:47:fa:d2:54:77:a9:34:bb:df:18:05:80:6f:82:d5:
e6:cc:05:65:4b:40:04:2c:71:cd:f9:3e:48:d6:0a:14:c1:33:
30:ba:3e:09:d7:c2:b9:53:79:24:f7:d0:3e:d7:37:ae:7d:c9:
a7:c9:67:54:6b:d6:14:0a:f5:70:a6:a8:f1:61:65:e0:6c:0a:
14:01:d8:f0:97:85:78:6e:e7:d3:0d:c8:74:e9:5b:4f:b9:6d:
0b:03:39:fd:41:c5:6f:03:43:75:b2:be:fd:20:ce:74:3b:b3:
a5:3b:85:51:23:5d:df:b7:e4:5f:54:57:24:4c:50:9a:ad:ec:
12:96:de:35:67:2a:89:0b:6b:ad:33:6f:d3:33:09:e2:67:16:
fb:a2:ea:35:b0:12:8a:b7:fd:13:0e:a7:fe:ab:5e:b1:4d:fd:
c7:83:47:ed:48:78:b6:a6:38:84:6b:13:2f:e3:09:49:73:a9:
d4:08:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:25:26 2025 by rpki-client