Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa
File: Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa (raw, json)
Hash identifier: iFyCSGfO3II9hoQD7VqZ0JzkPphrDQU9+b3q7pFEyuA=
Subject key identifier: 67:A6:78:BE:58:B6:21:41:8F:33:15:EA:F2:ED:1D:EC:2A:6F:11:3A
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 3064
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa
Signing time: Sun 30 Mar 2025 19:58:21 +0000
ROA not before: Sun 30 Mar 2025 19:58:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4816
IP address blocks: 103.39.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12388 (0x3064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=67A678BE58B621418F3315EAF2ED1DEC2A6F113A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:e7:9f:ef:1e:6a:60:d6:e6:05:57:61:fc:
56:d3:05:a7:2f:ad:54:5b:98:b9:d4:e1:59:35:03:
f5:73:49:d7:39:4e:99:c2:83:28:fe:9b:67:74:de:
c4:c7:65:de:9f:f5:94:a0:3f:cf:f3:10:39:4f:c3:
99:cb:cc:64:d7:3b:ae:a5:ed:b2:22:b6:1b:b7:7f:
e6:e5:0b:27:ef:70:91:22:df:6c:05:01:5b:ac:b6:
50:0f:f6:9f:c8:3f:6f:a5:ff:6a:2c:b9:09:21:58:
a6:23:67:1d:18:b4:f4:fd:07:21:fc:58:97:82:a1:
fa:ba:11:e9:53:7a:d2:53:68:d4:72:df:88:fa:cb:
13:ef:dd:28:33:fe:c1:51:23:53:16:0e:92:9b:d0:
51:dc:bd:a9:b5:a8:49:b8:68:5d:e4:a7:42:c9:9c:
ae:c7:22:f4:a8:9d:b5:35:3f:a1:c0:5e:df:0c:4e:
a9:7a:5e:83:59:db:9d:bc:fe:56:05:a0:35:3f:4f:
62:f6:d0:35:41:70:bb:2e:42:08:4f:1f:ad:18:46:
9e:1a:5e:13:11:e6:00:fa:df:5e:93:83:4c:86:b9:
ff:aa:96:ec:b5:e4:b5:1a:2f:bf:6c:5b:8a:ed:09:
b4:99:9f:ba:9b:86:09:19:5d:91:d1:23:96:05:93:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:78:BE:58:B6:21:41:8F:33:15:EA:F2:ED:1D:EC:2A:6F:11:3A
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Z6Z4vli2IUGPMxXq8u0d7CpvETo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.232.0/22
Signature Algorithm: sha256WithRSAEncryption
50:63:61:8e:2f:08:e4:53:35:35:92:91:04:b9:84:01:c0:8f:
ac:ec:a4:6e:5b:3b:4b:d9:cc:1a:72:b3:f0:d0:62:5a:4e:48:
51:3d:1d:e3:eb:31:ac:a0:af:e8:18:87:00:78:1f:88:00:31:
5e:44:ad:83:21:17:0c:8f:b5:41:95:1c:ab:75:7c:38:55:a0:
b1:90:ed:50:cd:68:f1:fb:32:63:72:80:fb:f4:06:d1:57:78:
b8:45:dc:bb:9c:bb:9a:13:ff:a0:f8:34:9d:bf:ec:c0:68:0a:
b9:13:da:11:7f:b6:92:8f:b7:69:9d:a8:b3:cf:8f:b4:5d:61:
8a:34:dc:c9:a3:a3:6f:e4:2d:a9:e3:7a:66:24:d8:65:25:96:
a1:18:2f:e4:e6:bd:88:62:68:18:60:36:db:4c:ee:35:28:27:
19:35:95:95:09:94:dc:ef:5a:05:59:89:e3:ac:73:52:8d:86:
6d:cc:fe:5c:08:e1:0c:e6:aa:12:7e:b4:17:1f:a8:42:a0:b7:
59:1c:a2:25:3e:ad:61:d3:fe:57:85:94:0e:f8:2a:65:43:ef:
78:6d:af:09:7b:8b:c7:cd:c0:a5:c9:10:78:a3:2c:4c:5c:43:
14:b3:ae:b5:d7:6d:c0:7a:77:01:58:7b:c7:5b:df:bf:e1:67:
b0:a0:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:18 2025 by rpki-client