Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa
File: jslkFqpMPPAP3cSK2RwADcGyq0Q.roa (raw, json)
Hash identifier: 74CH6adfQFThY0ATVAgTJmWTnDgR+EgOV2HNpV5BEag=
Subject key identifier: 8E:C9:64:16:AA:4C:3C:F0:0F:DD:C4:8A:D9:1C:00:0D:C1:B2:AB:44
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 18A7
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa
Signing time: Fri 17 Jan 2025 01:25:22 +0000
ROA not before: Fri 17 Jan 2025 01:25:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6311 (0x18a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8EC96416AA4C3CF00FDDC48AD91C000DC1B2AB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:c5:e7:8d:04:ce:b4:e4:c6:54:d2:4f:1a:
1c:40:ef:a1:63:fa:af:3d:54:0b:9a:69:bf:21:2e:
09:84:7b:f9:e1:8d:87:7c:60:13:57:41:53:50:a5:
8c:f0:e8:0d:bb:ff:03:c3:e4:df:71:23:9d:dd:8c:
11:aa:1b:0f:9a:71:a2:d1:bd:19:f7:bf:e9:2f:ce:
b0:48:eb:c9:b4:e9:28:c2:1f:79:a6:1c:e8:cd:55:
90:9b:8c:56:09:bd:3a:14:33:cc:6d:f5:e0:fb:ae:
f5:b2:58:55:d0:f9:1f:6f:78:bb:10:22:83:3a:f0:
80:56:12:2d:21:d5:95:e0:03:30:a6:ea:11:22:10:
af:5b:d2:6e:e2:f9:3e:c9:d2:a9:02:74:90:6c:3a:
9f:65:86:16:41:f5:2b:db:65:fd:ac:94:69:7f:37:
13:d9:63:f6:a9:b6:c4:6a:7d:10:90:66:31:96:69:
61:40:2b:7b:7b:42:3f:91:f0:c2:96:48:7e:ef:50:
d8:94:84:78:d9:53:10:cf:a7:5f:21:5a:8e:ac:88:
b2:20:53:30:a1:60:78:42:06:e1:80:34:72:37:e9:
31:a5:c7:a4:f0:08:94:cb:36:b2:b7:c8:97:ed:ea:
d0:e4:35:2e:74:f1:33:3e:fe:c6:2c:b7:81:75:a2:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:64:16:AA:4C:3C:F0:0F:DD:C4:8A:D9:1C:00:0D:C1:B2:AB:44
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jslkFqpMPPAP3cSK2RwADcGyq0Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
57:86:65:da:6c:05:16:e6:a9:2f:6e:4a:83:cb:ed:cb:74:07:
75:dc:b4:11:33:93:d5:96:08:3c:45:f3:24:d7:72:70:19:a2:
be:8a:6f:47:f8:09:5b:82:08:07:9a:4c:31:01:12:62:cf:da:
dd:c5:a4:33:86:28:39:de:e9:a8:16:d1:0a:06:5d:4e:cc:a1:
50:04:4e:c1:99:83:fd:f5:5e:be:0e:e8:fc:27:45:78:b3:1e:
4d:bf:aa:1f:73:91:83:2f:a7:ec:6e:28:02:e3:9e:cf:db:5c:
90:53:9c:6a:ae:0f:27:8f:81:25:af:ed:ad:10:9d:c7:81:6f:
9e:ea:0f:b8:2c:ac:e7:de:d4:06:a8:4e:97:21:e1:62:b3:83:
d9:7c:93:0a:75:2f:3a:88:11:32:cc:55:d5:07:ad:45:85:78:
be:86:ca:dc:e7:45:f4:cf:63:4e:8d:ed:60:b0:d2:ad:83:28:
37:a2:8a:31:7a:32:73:ec:f1:4b:10:b1:96:13:3c:00:f8:4a:
55:e0:58:3c:03:30:89:11:88:09:af:b8:cd:34:e3:7a:97:6e:
34:51:4c:e4:31:75:c1:b9:68:a1:b8:35:7a:89:8d:60:ea:34:
c9:d5:22:da:bc:b4:ef:08:0a:78:e4:76:e8:fa:18:e3:ce:3a:
ab:c4:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:40:05 2025 by rpki-client