Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa
File: bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa (raw, json)
Hash identifier: FPsYvAAOaQMSgDGGxAOpHgM9zH3kX06iyzaLE9msP8c=
Subject key identifier: 6F:39:BB:FA:32:DC:BF:75:A1:F3:B3:7D:67:9A:A1:90:AB:9E:CC:3C
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14D0
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa
Signing time: Wed 09 Apr 2025 06:48:38 +0000
ROA not before: Wed 09 Apr 2025 06:48:38 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 62387
IP address blocks: 103.235.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5328 (0x14d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:38 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=6F39BBFA32DCBF75A1F3B37D679AA190AB9ECC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:84:43:7c:40:95:be:c6:c5:cf:95:3f:e3:
71:1f:07:85:e8:ae:5c:26:d2:2a:1f:66:3b:bd:94:
78:39:0f:4a:fb:d5:be:67:c2:92:d3:b1:ff:ab:11:
61:e0:06:9f:9a:99:7f:9f:39:4c:6c:1e:e3:f3:65:
d5:47:ce:04:91:10:d6:b0:88:1a:d4:84:10:45:34:
4b:50:ed:04:a6:b5:31:39:42:ab:ba:70:e0:99:95:
22:06:1c:61:7d:5b:4d:28:e2:84:ce:0c:ca:90:32:
0e:7e:a2:d5:5d:6a:14:38:a4:15:7f:d1:cb:9c:6c:
dd:d5:e7:80:88:b1:67:f0:19:86:cc:6c:5d:86:42:
d2:5c:28:39:33:32:ca:fe:ee:13:09:82:86:7d:67:
c4:e4:90:4a:29:4c:ae:2c:9e:06:23:30:2f:8d:43:
84:81:45:72:4a:4e:79:70:3f:7e:0d:d0:64:78:6a:
47:9b:0b:09:3e:10:01:eb:37:0f:f8:23:f5:24:e9:
3a:65:b1:07:f5:22:8b:df:3b:97:2c:03:6f:fd:fa:
65:30:0f:ea:16:9e:87:38:0f:e1:29:9a:28:6c:a3:
5e:20:38:bd:21:1f:a4:0d:2a:4b:80:16:23:b5:7f:
81:89:60:cf:e7:c5:3f:fd:13:cd:b9:5b:9f:07:22:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:BB:FA:32:DC:BF:75:A1:F3:B3:7D:67:9A:A1:90:AB:9E:CC:3C
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/bzm7-jLcv3Wh87N9Z5qhkKuezDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:27:89:5c:8e:52:1c:c3:03:06:96:66:c3:67:10:6f:57:dd:
9b:3b:0e:9c:49:0b:3d:38:b2:ed:40:19:d6:a2:a3:2a:9b:a4:
15:13:b7:01:37:34:91:38:8c:f1:f7:89:b3:62:a8:17:65:0e:
be:c0:cc:8d:30:1d:e8:3c:95:b6:38:ce:d4:fc:37:24:c4:6d:
c9:0c:82:4f:41:fd:a1:3d:e9:14:36:f8:b0:57:e1:52:5a:3f:
77:b7:96:8d:1f:04:80:87:c7:e6:00:b7:d1:30:a6:7d:7a:60:
9a:d8:36:78:52:53:a0:ee:8a:8a:05:41:74:f7:7d:71:8a:e7:
7b:d0:a3:71:3a:ba:6f:ee:ff:5d:51:21:84:95:88:db:90:11:
51:f5:34:38:9b:6f:7e:9e:f0:aa:84:25:e6:45:25:82:71:64:
01:ad:28:ee:19:d1:ec:3e:be:fd:8e:1a:a7:65:f5:5b:71:cb:
dc:1b:84:9e:77:c7:9d:f7:4c:22:9c:18:32:1d:d6:c8:b6:8b:
db:bb:c0:ac:68:6f:af:f7:76:3f:a3:b9:17:9c:52:88:ae:2a:
be:e9:4f:76:67:23:df:eb:2c:65:fc:fb:da:08:35:5f:ec:6b:
01:ca:7d:58:d6:18:b7:59:20:d6:51:3b:af:db:08:01:04:e7:
ed:e4:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:52 2025 by rpki-client