Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa
File: aE5ia5eB22B6rCYE-22kUUpntDc.roa (raw, json)
Hash identifier: HVUqY/JomBRLgqWsq9TWEELf6eSpT06R/ojNcbaPVtg=
Subject key identifier: 68:4E:62:6B:97:81:DB:60:7A:AC:26:04:FB:6D:A4:51:4A:67:B4:37
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1852
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa
Signing time: Fri 17 Jan 2025 01:24:54 +0000
ROA not before: Fri 17 Jan 2025 01:24:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6226 (0x1852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=684E626B9781DB607AAC2604FB6DA4514A67B437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:3e:4c:0f:ff:a2:19:3e:f3:19:42:50:e8:
6d:74:1f:c1:76:6a:07:0d:c3:30:ae:65:76:d5:2b:
54:13:c3:59:f7:01:72:ff:57:de:4a:10:59:f2:59:
ca:0d:95:cc:19:16:5e:6f:3e:0d:6e:af:67:69:6a:
7a:90:af:14:6d:a2:41:59:4b:d9:b4:8d:9a:30:8d:
7b:b7:79:21:34:d6:0b:22:a2:62:9b:5a:c6:d2:f7:
05:9c:28:1f:51:ee:5a:e4:84:2f:3c:cc:5a:c6:c6:
0c:99:32:d4:7f:c8:f6:13:7d:ba:fe:cb:2d:9f:75:
b1:94:dd:c3:be:fa:78:41:be:50:b8:69:7c:d1:5b:
5f:b8:b8:29:0b:6d:e9:92:85:05:1f:cc:84:6c:12:
15:bc:78:c3:41:30:7d:79:2a:33:0f:b3:aa:6e:7f:
76:42:e1:ae:6e:15:ff:41:9c:7e:23:09:ab:e3:cc:
76:c1:e8:3a:64:e8:f8:0d:81:2d:63:77:ee:a6:df:
a5:63:2d:3b:b3:f5:b0:bc:2d:2b:4d:b1:a7:d6:a0:
d0:7f:40:53:54:4d:ad:55:ee:d5:28:ca:4d:40:6d:
b2:ea:64:9c:58:03:95:d4:65:ee:9e:fd:6c:3e:d3:
5f:48:ee:f3:00:79:94:30:1a:ec:15:32:4b:04:28:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:62:6B:97:81:DB:60:7A:AC:26:04:FB:6D:A4:51:4A:67:B4:37
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/aE5ia5eB22B6rCYE-22kUUpntDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:12:7e:8a:9e:ec:81:d9:58:82:dc:1d:c5:ab:88:48:f5:84:
7a:01:07:82:52:81:4a:57:d1:82:f6:44:53:4d:67:3c:3e:c9:
90:c7:10:76:e4:d1:ab:87:71:dd:14:2f:92:7f:ac:f9:ad:86:
b3:2b:c1:31:fa:35:c5:c1:9e:df:5d:59:61:be:be:61:c7:23:
19:2c:9e:07:58:f1:40:43:d5:88:0a:4c:53:b5:58:31:6d:40:
be:49:93:5d:48:3a:55:de:a6:49:08:d8:91:e3:92:6b:c6:8f:
64:88:85:b2:48:06:14:ca:b8:7d:da:7b:74:7b:91:d6:ca:74:
08:fd:9f:9c:c0:22:05:52:f2:6c:a9:87:69:74:57:4f:39:36:
80:74:de:3c:d7:60:e7:5a:0e:e3:cc:32:f0:e3:08:54:af:8d:
1c:c1:04:14:ad:b6:66:21:f7:c5:e8:18:95:d0:d2:8e:0e:04:
c8:63:19:9c:4f:71:1d:07:ff:fb:fd:29:5a:f3:c8:d4:75:37:
1f:cb:00:0a:ef:48:51:2d:05:de:8f:3d:7b:49:3a:5a:09:ed:
e4:c7:d2:eb:a7:42:8a:05:48:75:03:ea:52:66:c0:97:30:9d:
ff:90:af:a1:aa:29:35:e9:5d:eb:d4:af:ee:1f:1c:ba:a5:f6:
9e:d3:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:24:12 2025 by rpki-client