Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa
File: 36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa (raw, json)
Hash identifier: jLLjpf8FDpD9fXimFJJQjA+otZWzs+35zppH7t1VAHQ=
Subject key identifier: DF:A1:C7:61:B2:1B:53:BC:E0:91:0D:87:C0:64:82:05:29:73:7E:F2
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 23
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa
Signing time: Thu 17 Apr 2025 11:31:19 +0000
ROA not before: Thu 17 Apr 2025 11:31:19 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.118.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:19 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=DFA1C761B21B53BCE0910D87C064820529737EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:43:9f:2a:b5:3d:f9:f1:b7:88:c3:33:6c:
43:4b:24:7c:e2:b9:9f:bc:bc:ba:6c:be:ac:e7:50:
a4:8b:d4:cd:f8:57:37:1e:53:82:ff:c1:a6:b1:7e:
6a:5d:8d:e0:55:2a:f7:16:27:ab:10:b9:fd:61:82:
5b:ce:1c:bf:f4:b7:dd:e5:c9:d3:00:28:c8:8e:ef:
f6:c4:b8:4e:52:bd:c7:2a:33:28:94:14:61:b3:f0:
c4:45:c5:26:ca:47:31:7e:ed:67:fa:df:ec:a1:07:
45:c5:2b:2b:e6:31:02:28:72:e4:d7:0f:63:21:0b:
3a:99:78:a6:fe:c2:df:7e:26:79:6b:9c:c6:3b:8c:
52:2f:cb:bc:27:f6:4b:98:c0:78:0b:3c:13:4e:01:
6b:ac:04:78:80:46:f9:aa:5c:01:05:af:1f:d3:5a:
c9:dc:02:f2:be:b4:cf:96:a8:b0:4b:29:54:49:ad:
e7:70:a1:df:ed:c1:e6:a3:3b:43:c5:35:78:11:24:
2b:9f:76:12:84:73:b9:7f:a2:7f:30:88:fb:23:63:
cf:0f:8c:ed:67:84:6b:64:9f:a6:de:4f:e3:c5:65:
f1:09:e4:1f:97:1b:de:ee:60:f3:fc:03:8c:35:9d:
a1:bb:b3:45:52:89:6a:75:2e:c1:e5:13:3b:54:1c:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:C7:61:B2:1B:53:BC:E0:91:0D:87:C0:64:82:05:29:73:7E:F2
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/36HHYbIbU7zgkQ2HwGSCBSlzfvI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.216.0/22
Signature Algorithm: sha256WithRSAEncryption
48:83:44:8a:3c:70:2c:ac:14:2e:10:70:70:9b:83:19:d4:75:
04:18:53:7e:55:70:e2:8b:88:76:2e:10:fc:36:c5:00:5c:88:
8b:9f:b5:e4:9e:d4:f4:78:63:48:29:ec:da:c4:7b:e1:21:9c:
a8:f0:1a:c1:67:c4:c5:c3:20:44:b6:e2:a5:85:ad:0c:f6:54:
b9:3e:3d:c1:54:66:5b:90:91:2d:a4:b5:c5:59:e5:45:17:18:
a5:67:0c:ab:90:66:25:0f:4c:4d:c9:8d:eb:f9:6d:1c:3b:6c:
6b:fa:11:3b:b7:17:0c:a2:a7:96:a7:3e:fe:97:0a:70:ed:d8:
73:e2:04:f3:48:58:05:00:8b:b0:ae:3b:e1:3b:01:7b:61:09:
18:ff:f1:91:54:64:e1:ec:90:e1:07:fb:61:80:e8:cd:02:91:
10:93:ec:b4:c5:c3:d3:e6:76:90:f3:d9:c6:cf:ab:6f:e5:3a:
83:0a:bd:d8:59:5a:50:e6:c3:5f:44:54:73:56:a9:46:4a:93:
37:ff:da:87:af:50:17:65:99:89:c6:38:c5:b7:2f:cf:29:9d:
f8:7f:4b:d9:ad:82:85:e5:6c:87:7c:48:5c:68:80:07:d1:cc:
69:c7:e0:89:52:58:85:f9:3b:13:78:9c:fa:33:44:98:50:3f:
43:4a:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:00 2025 by rpki-client