Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/e77FcoZ-9xgW1Udb28rM-7CYQVg.roa
File: e77FcoZ-9xgW1Udb28rM-7CYQVg.roa (raw, json)
Hash identifier: wWJ3YyX6sRH67Xw8WnY1oLjr8fTE9Fbsrgfhtd8Fy48=
Subject key identifier: 7B:BE:C5:72:86:7E:F7:18:16:D5:47:5B:DB:CA:CC:FB:B0:98:41:58
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 3059
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/e77FcoZ-9xgW1Udb28rM-7CYQVg.roa
Signing time: Sun 30 Mar 2025 19:58:17 +0000
ROA not before: Sun 30 Mar 2025 19:58:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 103.45.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12377 (0x3059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7BBEC572867EF71816D5475BDBCACCFBB0984158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:d0:d2:a2:b9:3e:cf:db:51:24:54:69:e4:
72:52:45:46:4b:60:17:16:b4:90:47:e0:7f:1c:e5:
c5:41:09:6d:04:1c:39:32:25:29:69:6b:1a:55:ed:
d5:1a:c9:19:95:6a:8e:23:b7:47:4b:00:24:3f:a0:
5b:c1:48:ad:dd:38:5f:f0:05:3d:6c:e4:b6:83:cb:
2c:c5:3b:e7:7b:4a:ba:f8:ee:30:a5:f3:7c:95:70:
f2:39:69:bf:0a:3f:f7:6d:83:35:c5:e1:9d:47:78:
11:1f:a0:90:9c:8b:0c:bd:47:2e:c5:14:e6:e8:21:
77:68:4d:b2:7e:38:05:4c:15:0b:ba:8f:74:10:10:
58:24:f0:da:39:3f:7d:24:f7:71:1a:56:07:6b:80:
93:5e:77:3d:6a:42:fb:d0:7b:d1:58:10:f5:89:63:
06:ec:d0:b0:5b:cc:1c:da:d4:a1:5b:8f:6a:63:ca:
8f:36:7c:86:b5:b0:7b:fd:6b:f5:bd:39:de:f8:a9:
e9:40:f7:67:f4:a2:6b:e7:1b:7f:5b:c7:b2:b0:5d:
1a:cb:63:e2:73:91:06:cd:33:fc:d6:78:15:be:ad:
70:95:9d:92:af:2b:e8:52:b8:43:08:f1:8b:48:0f:
84:8b:de:d5:5b:63:b1:d2:6a:f4:66:c5:5f:f4:a4:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:C5:72:86:7E:F7:18:16:D5:47:5B:DB:CA:CC:FB:B0:98:41:58
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/e77FcoZ-9xgW1Udb28rM-7CYQVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.176.0/20
Signature Algorithm: sha256WithRSAEncryption
81:f8:cb:74:15:a3:7e:36:d3:be:02:d9:7d:4a:4f:25:73:d1:
f7:68:ce:6c:01:1c:32:6b:fe:f6:82:0a:ec:1d:5b:65:14:b4:
76:a3:27:42:62:45:f3:f6:df:1e:4d:33:b8:c7:47:2b:8b:b4:
da:8f:a9:ea:e9:51:20:45:c2:ab:a7:6f:72:3d:31:d7:6b:6f:
8d:69:e3:6e:41:5a:cd:c4:8f:b3:63:6b:6b:cd:5b:ab:8a:bb:
c9:d1:2b:bb:a6:79:4f:2a:3f:1e:47:f4:5b:97:4e:03:28:67:
24:d4:18:f1:f9:e6:8a:74:2c:41:6d:82:67:93:aa:f8:7d:9a:
fc:ef:d7:32:a8:3d:ef:7e:e2:34:f4:e7:7d:1d:24:6c:af:af:
0b:3a:71:72:2b:41:e0:af:88:44:e2:91:95:31:a7:3e:df:2d:
71:03:e0:fb:2d:1d:ad:d6:ba:e0:a9:4f:46:f0:7f:5f:b9:f2:
82:38:c5:16:09:dc:af:5a:b6:c3:cd:3d:72:b9:f0:76:06:be:
c0:40:6f:ae:b0:bf:d0:99:db:38:ef:16:a4:04:5b:75:37:03:
e6:02:ac:fe:48:ba:91:05:96:fa:64:fb:19:87:08:2f:b6:61:
3c:25:92:02:01:ab:2e:29:ea:55:4e:46:2d:60:76:d3:c3:b0:
e3:3c:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:19 2025 by rpki-client