Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa
File: 20zgo75bwLzx-UlZRoka27MhExQ.roa (raw, json)
Hash identifier: PzaGzu5/2mnWcuJEhHF2vHfL0lwJCXTUz47kicsJQgk=
Subject key identifier: DB:4C:E0:A3:BE:5B:C0:BC:F1:F9:49:59:46:89:1A:DB:B3:21:13:14
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 37
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa
Signing time: Thu 17 Apr 2025 11:34:32 +0000
ROA not before: Thu 17 Apr 2025 11:34:32 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.119.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:34:32 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=DB4CE0A3BE5BC0BCF1F9495946891ADBB3211314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:b1:61:f2:c4:b1:07:48:56:60:21:2f:f0:
8b:e7:28:0d:98:e8:1e:a2:ab:3f:63:5a:67:7d:a3:
18:9e:b4:c1:81:45:84:a1:4b:3e:98:20:fe:58:21:
91:2a:ec:b6:cf:ff:87:c8:dc:2e:de:8c:2c:6b:b4:
e3:01:24:89:9b:1f:bb:97:e0:26:08:96:35:b2:6d:
f8:ed:91:27:bb:ab:b9:6f:9b:94:66:06:53:09:7b:
e4:0d:fd:f3:b5:2f:fb:ac:f0:6e:73:3b:69:4d:e3:
24:7f:8c:d1:8e:c3:c6:3f:d5:37:8a:56:5b:2a:d4:
b2:5f:9a:06:f3:9e:ac:16:42:09:30:d4:a7:56:2c:
ff:82:02:19:d9:fb:e8:60:0b:95:ff:96:37:80:c0:
01:45:e8:ba:94:90:af:10:9e:32:fc:b5:fc:aa:0a:
8b:db:e6:d0:f4:eb:27:d4:15:27:08:b8:90:3b:19:
91:00:24:40:47:f9:2a:e2:34:4c:89:9b:1a:d1:26:
9b:ed:5c:17:35:19:44:7c:15:45:b2:f7:08:c7:97:
64:73:c7:d5:c1:7a:10:ae:b6:0a:83:6c:31:50:03:
13:68:c0:ee:55:f7:b9:b0:6d:37:6b:8f:40:a2:4c:
9e:9c:ca:9d:cb:72:dd:b1:05:83:15:4d:ae:5e:ee:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:E0:A3:BE:5B:C0:BC:F1:F9:49:59:46:89:1A:DB:B3:21:13:14
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/20zgo75bwLzx-UlZRoka27MhExQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b0:78:ba:49:75:07:a6:f1:75:50:2d:01:93:9d:c9:03:87:
23:dc:3f:47:3d:fc:13:92:b8:ac:7d:06:b4:02:2e:da:29:98:
50:87:ba:ba:91:1e:09:0c:3a:a9:66:dd:02:ca:d6:92:f3:54:
5c:fd:94:dd:23:71:18:ea:bd:6d:63:c4:c2:0b:89:93:39:5d:
d3:ac:2b:53:56:ca:5e:fe:a9:b7:b2:11:de:7d:b1:1a:66:50:
3c:d6:6c:fd:aa:e0:24:d2:d6:d8:44:73:0d:6a:c9:af:65:84:
a6:06:6c:c3:04:85:d8:75:ad:78:8e:83:e3:90:da:81:61:9f:
0b:13:44:00:f6:37:98:82:0d:0d:df:89:93:f1:49:79:f5:ff:
48:51:dd:07:76:6e:a7:14:f3:b6:36:ec:65:8f:64:70:2e:7e:
65:75:20:1e:b9:a6:93:07:ab:c7:21:ad:08:1d:b2:14:4a:f1:
1c:30:a7:8e:23:45:41:ad:2e:f9:73:e1:88:55:a3:91:12:51:
f6:0f:79:56:4a:8f:4b:1d:0d:24:63:b1:28:ab:18:88:98:c6:
26:bf:48:14:65:a0:78:b3:28:6b:06:19:4b:08:ce:bf:5e:9d:
2e:80:cf:de:8b:82:cb:c9:3b:c4:2e:76:c0:d4:c6:b9:9a:a8:
10:f7:35:d6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF
ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx
MzQzMloXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoREI0Q0UwQTNCRTVCQzBC
Q0YxRjk0OTU5NDY4OTFBREJCMzIxMTMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANkcsWHyxLEHSFZgIS/wi+coDZjoHqKrP2NaZ32jGJ60wYFFhKFL
Ppgg/lghkSrsts//h8jcLt6MLGu04wEkiZsfu5fgJgiWNbJt+O2RJ7uruW+blGYG
Uwl75A3987Uv+6zwbnM7aU3jJH+M0Y7Dxj/VN4pWWyrUsl+aBvOerBZCCTDUp1Ys
/4ICGdn76GALlf+WN4DAAUXoupSQrxCeMvy1/KoKi9vm0PTrJ9QVJwi4kDsZkQAk
QEf5KuI0TImbGtEmm+1cFzUZRHwVRbL3CMeXZHPH1cF6EK62CoNsMVADE2jA7lX3
ubBtN2uPQKJMnpzKncty3bEFgxVNrl7uqsUCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBTbTOCjvlvAvPH5SVlGiRrbsyETFDAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj
QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2
L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi8yMHpnbzc1YndMengt
VWxaUm9rYTI3TWhFeFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3cMMA0GCSqGSIb3DQEBCwUAA4IBAQAlsHi6SXUHpvF1UC0Bk53JA4cj3D9H
PfwTkrisfQa0Ai7aKZhQh7q6kR4JDDqpZt0CytaS81Rc/ZTdI3EY6r1tY8TCC4mT
OV3TrCtTVspe/qm3shHefbEaZlA81mz9quAk0tbYRHMNasmvZYSmBmzDBIXYda14
joPjkNqBYZ8LE0QA9jeYgg0N34mT8Ul59f9IUd0Hdm6nFPO2Nuxlj2RwLn5ldSAe
uaaTB6vHIa0IHbIUSvEcMKeOI0VBrS75c+GIVaORElH2D3lWSo9LHQ0kY7EoqxiI
mMYmv0gUZaB4syhrBhlLCM6/Xp0ugM/ei4LLyTvELnbA1Ma5mqgQ9zXW
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:06 2025 by rpki-client