Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa
File: ns9wScn8kvFTzlA4eC2k95lXnvU.roa (raw, json)
Hash identifier: u8uqhchUVeTEY3phLIkm3f10i8O1nybT06HAnif5Qx0=
Subject key identifier: 9E:CF:70:49:C9:FC:92:F1:53:CE:50:38:78:2D:A4:F7:99:57:9E:F5
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 3062
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa
Signing time: Sun 30 Mar 2025 19:58:20 +0000
ROA not before: Sun 30 Mar 2025 19:58:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4816
IP address blocks: 103.39.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12386 (0x3062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9ECF7049C9FC92F153CE5038782DA4F799579EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:c2:34:31:80:a7:3a:c8:19:7c:b3:91:ee:
bc:d6:9b:43:c2:89:22:83:1d:55:a8:7f:64:d6:3d:
a9:d4:6a:94:07:ad:bf:8a:cd:6d:23:c9:f4:9a:da:
f3:cd:59:1e:2d:90:6d:58:74:bd:98:3d:e2:94:f4:
33:a5:1a:27:17:b3:5e:99:90:8b:0a:a9:9d:5a:0d:
4c:17:4a:d4:6b:9b:a7:6f:8e:f1:6c:7d:c4:03:99:
ce:fd:03:d9:74:5b:9b:02:77:49:f3:a4:a8:66:31:
67:84:39:0b:85:12:ed:04:bd:3f:88:af:40:e2:19:
57:dc:b1:ba:0a:a3:db:75:85:d6:cb:c4:5f:77:3e:
77:b4:ff:86:99:90:65:63:66:25:38:3c:1a:85:fc:
3e:d2:40:9e:44:ba:76:23:36:5e:5e:8a:fa:01:61:
a3:2b:4d:08:4e:79:97:d8:f6:eb:50:35:cc:17:b7:
c8:40:13:bf:55:8c:41:5f:9a:cd:bf:15:c1:03:03:
00:0c:9c:3d:17:ee:f8:42:15:f7:21:55:16:b6:ca:
18:a6:68:72:13:2a:97:a3:e1:7c:39:ed:f2:d9:d5:
36:51:f9:7e:04:bf:b5:85:c9:8a:43:99:af:4a:3c:
64:29:ba:b5:c1:24:7d:20:a4:6c:bd:9a:d9:58:65:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:70:49:C9:FC:92:F1:53:CE:50:38:78:2D:A4:F7:99:57:9E:F5
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ns9wScn8kvFTzlA4eC2k95lXnvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.208.0/20
Signature Algorithm: sha256WithRSAEncryption
18:4f:5d:43:0e:66:cf:32:17:db:cd:2b:c0:f0:64:72:1d:a2:
84:a6:2b:42:99:05:4d:91:25:2f:4a:b8:d1:ee:d8:7b:6c:94:
eb:56:e6:67:bd:f2:3d:0f:a2:9a:76:6b:33:70:c0:3f:5d:96:
0b:7c:7f:d8:87:70:97:1c:a6:4c:53:70:8d:fa:90:13:fa:12:
07:a6:4a:72:66:37:bf:50:01:37:52:40:12:0e:17:2a:32:da:
9c:d9:a9:02:ac:c3:ba:98:1d:5c:6f:7b:5a:ca:68:29:39:1b:
dc:68:a4:37:16:31:dc:ef:c4:05:16:1f:ce:53:17:4b:f4:9d:
d3:b0:ed:32:8e:a1:b3:d1:d7:be:d3:a8:0a:70:32:2e:4c:cc:
e4:e5:4b:bf:cc:94:48:d0:5f:03:5a:c9:89:66:fc:f6:33:a6:
f6:cb:cb:78:8e:25:20:f7:05:5e:e1:6e:e4:22:ea:cd:b9:db:
9a:6f:8f:d1:9e:0c:45:62:1e:3b:59:ed:40:18:c3:7e:7f:73:
6d:6c:9d:94:fc:9d:4b:20:d6:31:60:72:72:0e:88:23:7e:9a:
0e:f2:51:77:6a:1f:1a:15:e4:6b:3b:e4:f4:77:b5:db:d1:e9:
f9:be:0a:7a:e9:59:07:08:f3:fe:13:c6:ce:c4:65:c9:33:2b:
fc:94:59:5b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICMGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yNTAzMzAx
OTU4MjBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlFQ0Y3MDQ5QzlGQzky
RjE1M0NFNTAzODc4MkRBNEY3OTk1NzlFRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw1MI0MYCnOsgZfLOR7rzWm0PCiSKDHVWof2TWPanUapQHrb+K
zW0jyfSa2vPNWR4tkG1YdL2YPeKU9DOlGicXs16ZkIsKqZ1aDUwXStRrm6dvjvFs
fcQDmc79A9l0W5sCd0nzpKhmMWeEOQuFEu0EvT+Ir0DiGVfcsboKo9t1hdbLxF93
Pne0/4aZkGVjZiU4PBqF/D7SQJ5EunYjNl5eivoBYaMrTQhOeZfY9utQNcwXt8hA
E79VjEFfms2/FcEDAwAMnD0X7vhCFfchVRa2yhimaHITKpej4Xw57fLZ1TZR+X4E
v7WFyYpDma9KPGQpurXBJH0gpGy9mtlYZZrdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUns9wScn8kvFTzlA4eC2k95lXnvUwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvbnM5d1NjbjhrdkZU
emxBNGVDMms5NWxYbnZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBGcn0DANBgkqhkiG9w0BAQsFAAOCAQEAGE9dQw5mzzIX280rwPBkch2ihKYr
QpkFTZElL0q40e7Ye2yU61bmZ73yPQ+imnZrM3DAP12WC3x/2IdwlxymTFNwjfqQ
E/oSB6ZKcmY3v1ABN1JAEg4XKjLanNmpAqzDupgdXG97WspoKTkb3GikNxYx3O/E
BRYfzlMXS/Sd07DtMo6hs9HXvtOoCnAyLkzM5OVLv8yUSNBfA1rJiWb89jOm9svL
eI4lIPcFXuFu5CLqzbnbmm+P0Z4MRWIeO1ntQBjDfn9zbWydlPydSyDWMWBycg6I
I36aDvJRd2ofGhXkazvk9He129Hp+b4KeulZBwjz/hPGzsRlyTMr/JRZWw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:38 2025 by rpki-client