Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa
File: mOP5PXAJj2kQLFwCgVjCZczJXBo.roa (raw, json)
Hash identifier: wfV0HRjPUvGW/UwP9JCls20oaaBHIMZWwQL7DaYqcbw=
Subject key identifier: 98:E3:F9:3D:70:09:8F:69:10:2C:5C:02:81:58:C2:65:CC:C9:5C:1A
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14CE
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa
Signing time: Wed 09 Apr 2025 06:48:37 +0000
ROA not before: Wed 09 Apr 2025 06:48:37 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 62387
IP address blocks: 103.83.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5326 (0x14ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:37 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=98E3F93D70098F69102C5C028158C265CCC95C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:dd:57:58:4e:eb:4b:c5:0b:97:bb:ff:d1:
68:2b:67:9d:44:48:e5:e2:e8:2b:da:c9:ce:55:ba:
1d:94:1d:ee:df:32:a1:ba:fd:dd:5c:49:9b:7a:1c:
91:e0:ea:13:14:40:95:04:62:3b:21:6f:4f:0d:68:
11:40:25:0f:97:50:89:84:bd:cb:f4:7c:ff:d4:8c:
64:32:e8:e5:e9:d1:86:ff:ae:88:8e:3b:ed:a5:e5:
6c:83:b5:dc:9c:db:a0:a5:ee:5b:75:18:f1:b6:37:
33:c4:cc:b7:19:c1:14:5a:de:32:3d:5c:c9:66:25:
f0:f4:46:d7:ab:0e:5a:e0:6c:f9:71:fe:8f:1d:3a:
cb:c9:29:db:09:2f:92:72:ae:97:ec:d7:58:56:38:
1a:12:e3:07:5f:22:98:b6:4a:b6:46:10:d2:52:a9:
0c:96:01:97:84:0f:e4:74:9c:53:26:da:16:7d:d0:
1b:f0:5b:55:03:96:2b:de:ff:4d:62:a5:97:49:2b:
1a:92:a1:5e:60:64:7d:c5:4f:8f:8d:29:17:d9:98:
f6:b7:69:6f:f1:28:46:93:b6:5e:cd:6d:43:fe:c0:
de:ea:6d:44:dd:6b:06:cd:00:c0:9e:b3:a4:74:fc:
2a:8c:c7:45:96:c1:c5:b0:99:f3:88:1b:29:c5:bc:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:F9:3D:70:09:8F:69:10:2C:5C:02:81:58:C2:65:CC:C9:5C:1A
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mOP5PXAJj2kQLFwCgVjCZczJXBo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:6b:3f:16:63:34:6e:33:15:96:f3:de:6d:cd:04:32:e0:8f:
d1:ec:06:05:7c:48:74:b8:1f:d1:b3:3c:ee:84:7f:45:d0:55:
3b:34:b3:5f:71:b9:04:8c:57:72:82:99:a5:ca:b8:7e:ec:6c:
4a:36:b5:ef:39:22:45:e3:8f:54:72:1d:fb:ec:5f:b2:a7:6d:
f2:4d:70:bb:e6:31:53:18:55:4e:14:8e:37:cd:ec:66:6d:fe:
9d:5b:55:5f:38:e5:da:0a:c8:a0:ba:c9:e4:a7:69:9d:72:d4:
16:d0:7d:d9:b3:77:2c:1a:24:e2:b8:0f:3c:c6:cd:bf:ae:b7:
77:96:72:85:89:2f:86:4d:c7:9f:79:f9:76:7d:4c:4e:9b:5b:
cd:d7:4f:60:c5:03:65:94:2d:d7:0d:70:9c:07:5a:96:bc:e9:
a2:e6:3c:c2:c4:43:37:95:81:fe:72:e3:82:9a:c4:e3:ac:10:
e9:0f:19:59:0c:7c:76:d0:d9:0c:fe:d9:61:68:20:e9:e9:03:
4d:0e:21:d3:d0:11:32:64:c6:e3:99:2a:8a:0a:aa:d0:85:39:
16:c7:77:69:94:a3:c7:d8:65:e5:8a:a3:29:4e:ca:66:0c:d4:
38:d7:94:c0:fb:31:03:92:08:a3:a3:93:2a:77:41:a9:03:1f:
42:d9:2e:9d
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2
ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA0MDkw
NjQ4MzdaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKDk4RTNGOTNENzAwOThG
NjkxMDJDNUMwMjgxNThDMjY1Q0NDOTVDMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAjN1XWE7rS8ULl7v/0WgrZ51ESOXi6Cvayc5Vuh2UHe7fMqG6
/d1cSZt6HJHg6hMUQJUEYjshb08NaBFAJQ+XUImEvcv0fP/UjGQy6OXp0Yb/roiO
O+2l5WyDtdyc26Cl7lt1GPG2NzPEzLcZwRRa3jI9XMlmJfD0RterDlrgbPlx/o8d
OsvJKdsJL5Jyrpfs11hWOBoS4wdfIpi2SrZGENJSqQyWAZeED+R0nFMm2hZ90Bvw
W1UDlive/01ipZdJKxqSoV5gZH3FT4+NKRfZmPa3aW/xKEaTtl7NbUP+wN7qbUTd
awbNAMCes6R0/CqMx0WWwcWwmfOIGynFvEYXAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUmOP5PXAJj2kQLFwCgVjCZczJXBowHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu
EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw
OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvbU9QNVBYQUpqMmtR
TEZ3Q2dWakNaY3pKWEJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdTtDANBgkqhkiG9w0BAQsFAAOCAQEAm2s/FmM0bjMVlvPebc0EMuCP0ewG
BXxIdLgf0bM87oR/RdBVOzSzX3G5BIxXcoKZpcq4fuxsSja17zkiReOPVHId++xf
sqdt8k1wu+YxUxhVThSON83sZm3+nVtVXzjl2grIoLrJ5KdpnXLUFtB92bN3LBok
4rgPPMbNv663d5ZyhYkvhk3Hn3n5dn1MTptbzddPYMUDZZQt1w1wnAdalrzpouY8
wsRDN5WB/nLjgprE46wQ6Q8ZWQx8dtDZDP7ZYWgg6ekDTQ4h09ARMmTG45kqigqq
0IU5Fsd3aZSjx9hl5YqjKU7KZgzUONeUwPsxA5IIo6OTKndBqQMfQtkunQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:05 2025 by rpki-client