Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa
File: MOpfOKLakKUbD4Yvc6IMEETsYXU.roa (raw, json)
Hash identifier: zY3Mu8k0ptEbOfDum8sFDQMosox9jQVr7fMV8zYO27o=
Subject key identifier: 30:EA:5F:38:A2:DA:90:A5:1B:0F:86:2F:73:A2:0C:10:44:EC:61:75
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1D89
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa
Signing time: Thu 03 Apr 2025 08:53:56 +0000
ROA not before: Thu 03 Apr 2025 08:53:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 132168
IP address blocks: 103.204.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7561 (0x1d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 3 08:53:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=30EA5F38A2DA90A51B0F862F73A20C1044EC6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:dc:64:0a:91:31:85:2b:de:f6:28:a7:ee:
6e:51:ad:ba:93:87:c7:ff:8c:b8:41:5e:f2:16:0c:
c1:ba:fe:e2:76:5e:65:dc:7c:9f:2e:d2:b8:c8:eb:
a2:25:46:74:3c:80:40:fe:5c:68:69:b9:46:0c:dc:
0c:d9:dc:1f:b2:d9:e6:6c:5d:62:54:0e:c3:3f:0f:
0d:0d:2b:14:b0:95:17:51:09:48:e5:8b:fb:9e:0c:
65:55:2a:59:5b:53:17:37:4d:bd:8f:7f:6c:36:cb:
12:d9:b9:28:20:c9:0b:31:a9:cf:cc:91:ff:6e:74:
6e:73:89:55:b5:ec:ad:e3:b1:f8:9f:6b:c6:81:40:
88:ae:8c:95:34:01:d8:a4:77:15:89:70:43:92:a5:
65:9c:7c:8e:4a:37:21:e1:9a:65:55:fd:77:e0:36:
11:33:96:95:26:97:b7:f7:be:3e:9b:a6:11:d1:e6:
12:99:a6:4a:e7:c5:65:f9:96:b4:e8:d6:95:06:11:
95:7b:d0:c0:c8:94:e4:b4:c5:5f:c8:0e:0b:6c:47:
55:1e:28:cb:74:f3:38:36:9f:51:94:43:ea:d3:bf:
69:bc:b1:16:bc:fe:dc:4d:2d:17:48:85:a9:ff:27:
7f:ab:7f:72:0b:d6:b6:4c:19:ac:9e:a9:55:18:91:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:5F:38:A2:DA:90:A5:1B:0F:86:2F:73:A2:0C:10:44:EC:61:75
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/MOpfOKLakKUbD4Yvc6IMEETsYXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:c5:8c:38:f1:b9:71:b9:4d:62:1d:87:8b:b5:67:2b:54:21:
07:91:a4:05:2c:2a:32:34:be:fa:64:ac:fc:31:83:37:9d:e4:
4b:77:6b:d6:a0:02:03:6a:3c:aa:a0:b2:eb:ef:a2:9e:32:b5:
10:06:64:f3:f9:fc:32:e4:8b:8c:b7:a2:d2:15:e5:cc:e7:c8:
f1:0c:17:f1:e6:40:02:85:cb:d4:ed:13:57:41:7a:3e:35:be:
3b:01:4f:8a:be:5d:a2:78:ec:2c:84:bb:3f:ad:a1:61:f9:40:
d9:7a:93:40:be:db:1e:4f:eb:2c:a4:59:8e:b1:01:c9:7a:4f:
72:4e:b0:fe:ad:a0:11:0b:3b:01:0c:4c:e9:c0:fd:e2:35:4e:
2b:44:6d:92:42:5d:59:6a:4c:df:c4:94:8d:62:0f:ca:ce:0a:
88:f6:9f:a7:0c:33:34:a0:f2:83:31:41:d6:1f:61:8d:0a:3a:
30:4d:4e:86:12:31:e2:ff:f5:9e:64:24:dd:47:ea:81:43:81:
52:12:37:1b:3c:5a:be:99:f9:d1:27:a3:11:c5:c1:69:38:5d:
61:ec:e7:0a:36:e1:c9:a7:23:06:9a:da:56:08:8d:ca:27:e0:
0e:a4:38:f5:a9:3f:c7:c7:f2:2a:85:3f:85:86:2d:2c:6b:06:
a0:bb:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:47 2025 by rpki-client