Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa
File: rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa (raw, json)
Hash identifier: 7dRFJAQsC1LYrWNrBs+PdFLwnKNBBMP7ThvNOr58evU=
Subject key identifier: AD:43:52:5D:73:52:91:9F:AC:58:D6:73:2F:92:4B:FB:88:DF:03:94
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1892
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa
Signing time: Fri 17 Jan 2025 01:25:16 +0000
ROA not before: Fri 17 Jan 2025 01:25:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 103.10.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6290 (0x1892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AD43525D7352919FAC58D6732F924BFB88DF0394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:2f:2a:4d:15:80:f2:57:20:5d:da:4b:fd:
0b:86:50:46:e3:9d:5a:52:4e:28:a4:5b:01:42:eb:
3e:e7:a6:7d:6e:5d:50:cf:19:62:ff:6f:6d:23:0c:
33:15:30:44:1a:49:c5:f3:1d:75:39:9d:cb:b9:6a:
75:95:b1:f2:f8:11:82:df:da:8b:5d:56:f3:0e:43:
a2:91:7c:12:1a:7b:72:0a:05:cf:b8:24:d8:f1:e8:
e0:72:a6:55:7a:e0:c4:77:a1:8e:89:7b:80:0e:fb:
b7:94:f4:62:02:f4:b8:be:07:5c:d7:21:1c:ce:38:
88:c7:d3:a3:16:7e:3e:73:57:d1:e6:af:18:f7:f1:
59:26:3a:fe:a1:b7:45:2e:70:4f:9e:ef:58:ae:3d:
68:b8:43:b8:49:ee:0a:c8:2b:93:2b:06:2b:5e:17:
e1:c2:1e:7e:68:7c:01:89:07:26:c8:b8:be:fb:9f:
29:9b:bb:f9:7b:90:6c:1f:90:67:21:27:0f:c3:7a:
8e:e3:58:f1:63:91:ad:ed:eb:9e:24:f4:b8:f3:19:
7a:bc:d6:96:09:2d:fe:fd:b7:f6:37:00:47:03:47:
e2:2d:41:ea:56:f1:bb:31:7c:03:38:5d:96:ec:64:
3a:e0:73:2f:91:59:e0:8d:b6:73:d6:7e:48:d3:ea:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:52:5D:73:52:91:9F:AC:58:D6:73:2F:92:4B:FB:88:DF:03:94
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rUNSXXNSkZ-sWNZzL5JL-4jfA5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c1:3f:83:ee:ad:d3:38:e3:66:f7:e9:2b:17:0b:34:5f:07:
80:62:0f:b2:f7:67:a5:b4:2f:9a:59:8b:12:87:f2:6f:ed:fe:
ad:43:01:b2:eb:46:58:d6:da:3a:3c:4a:1e:c5:45:7b:b0:5c:
5b:31:ed:d3:9b:26:e3:59:c1:34:6c:ce:7c:b7:d7:7d:c2:ff:
3f:51:17:3d:f7:7a:2a:58:44:d2:ec:28:c8:c2:6d:29:64:0d:
c6:4e:3f:92:b5:15:b3:c9:e9:47:fc:81:3f:44:62:cb:3f:32:
d4:f3:00:97:f4:fb:ed:34:9c:ff:5f:bf:96:ed:d0:b5:30:45:
37:e9:ca:dc:7a:83:8c:22:e8:13:4b:a2:69:93:32:63:30:eb:
89:bc:73:7f:61:d0:34:6f:cf:f7:ac:ec:58:fe:ca:f0:4b:69:
c2:79:e7:5e:22:d4:06:c8:ed:94:99:ca:4b:7b:3d:c1:3d:01:
b9:19:a5:a6:fb:f6:6f:91:54:4e:24:47:0e:5b:0c:10:ab:16:
53:32:5d:5c:67:8a:8c:a5:d4:c6:c0:71:99:88:77:d1:e2:1c:
52:d9:25:1e:d8:e4:96:0b:73:48:9c:22:d5:38:56:d1:03:74:
17:45:62:9a:19:60:95:df:7c:e2:28:4f:8b:79:c3:a1:ae:e8:
de:24:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:50:07 2025 by rpki-client