Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa
File: bQ8jMYxVmRupb74KtjjYxUTawkA.roa (raw, json)
Hash identifier: BSQxJ1A7+qVDoqBLE7XfrgpYsKhtjh3HQIcbXBA68Kc=
Subject key identifier: 6D:0F:23:31:8C:55:99:1B:A9:6F:BE:0A:B6:38:D8:C5:44:DA:C2:40
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1818
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa
Signing time: Fri 17 Jan 2025 01:24:34 +0000
ROA not before: Fri 17 Jan 2025 01:24:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.220.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6168 (0x1818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6D0F23318C55991BA96FBE0AB638D8C544DAC240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:a5:02:c9:64:dc:49:11:1e:af:a0:53:af:
d8:8d:d2:9b:5b:92:9d:e7:36:96:a8:c4:5e:1f:35:
0c:d6:82:ed:8e:84:40:55:2f:ad:12:9b:b2:47:3c:
7f:28:e5:2a:27:76:4e:cd:f3:5a:82:ca:3e:5e:38:
9a:de:66:f1:81:9b:3e:82:64:5b:d8:89:35:37:84:
b8:4e:e0:97:69:1a:50:f1:d4:4e:ca:33:ae:1d:44:
2e:db:73:2b:64:4e:3a:52:71:3f:a7:d4:c3:9c:86:
ac:7e:d1:e1:ca:d3:ef:48:28:f5:8a:ed:ee:44:42:
0c:70:9c:4b:7e:bf:19:df:3a:6f:c3:31:d7:31:a1:
78:6c:2e:11:94:07:7a:1c:16:73:1e:ff:23:e7:16:
76:7c:47:da:36:da:af:7c:01:70:63:2d:57:ec:06:
40:82:ad:4b:1d:4d:8d:f7:35:4d:a7:55:4a:13:75:
a1:8e:1d:b3:d4:9c:44:64:c4:7e:a4:23:46:8a:c1:
9d:2b:4b:8e:bd:ca:0c:b0:ae:b1:2d:2b:22:f6:c9:
b8:f2:f0:c2:92:b6:6c:8f:d8:5a:da:2c:05:ca:dd:
6f:65:b1:17:c0:cb:ae:f7:f9:aa:16:71:63:19:c1:
63:d5:5c:09:07:f8:30:5c:9c:0e:34:43:2a:1d:ed:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:23:31:8C:55:99:1B:A9:6F:BE:0A:B6:38:D8:C5:44:DA:C2:40
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bQ8jMYxVmRupb74KtjjYxUTawkA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:81:8f:be:7b:38:5a:11:15:14:71:86:1e:48:76:05:60:37:
b4:14:2b:2f:72:b3:d0:3b:d9:45:72:5d:c0:7f:7f:b4:04:fd:
26:d2:c9:1a:0b:74:b5:0a:75:f3:68:b4:3d:dd:b5:2b:0c:0b:
9f:62:bd:7b:26:6c:53:99:44:d0:58:d7:c3:1e:78:11:2b:3c:
09:cc:d2:0b:0b:7d:a2:fa:1c:3e:61:24:53:c0:6e:6f:86:84:
c1:b4:98:74:1b:4c:75:b2:01:99:02:6e:5c:68:12:dc:07:cd:
b7:a9:a8:41:a7:1f:36:28:cb:70:70:9c:00:1b:cc:bf:42:10:
51:1c:c3:03:fd:38:82:7a:50:8f:63:45:11:0f:c2:a8:02:dd:
b4:89:a2:f2:bf:15:e1:a5:cb:9c:2f:a5:38:5c:0c:a1:96:b6:
6c:9d:60:71:bc:74:81:3f:0f:19:9d:06:bf:3b:2b:fb:04:92:
cb:79:c5:ba:73:f7:00:43:8d:69:48:e5:ad:f3:87:4a:81:6f:
c8:62:4c:78:98:15:b2:42:20:bd:03:97:3a:67:14:cf:0d:c5:
46:ea:44:8a:4c:58:99:ff:e5:45:f8:fb:3f:b3:c5:16:df:34:
e3:48:51:fa:4e:c0:ab:64:f9:09:cb:87:a7:83:13:92:75:ed:
43:2e:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:56 2025 by rpki-client