Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa
File: Dspk-i7jbOO-ivUzTVNna83UTUU.roa (raw, json)
Hash identifier: +X04l1TDB46s7GfSO8FWj7bZ7IeO6H75z2IBN0lElas=
Subject key identifier: 0E:CA:64:FA:2E:E3:6C:E3:BE:8A:F5:33:4D:53:67:6B:CD:D4:4D:45
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 13
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa
Signing time: Thu 17 Apr 2025 11:22:52 +0000
ROA not before: Thu 17 Apr 2025 11:22:52 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 140869
IP address blocks: 103.119.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:22:52 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=0ECA64FA2EE36CE3BE8AF5334D53676BCDD44D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:7d:a7:5c:84:a1:e8:58:d9:8d:f9:b1:af:
16:a7:dd:c6:6d:9e:35:bf:04:d5:cb:b9:b4:e1:1f:
e1:5f:ce:ec:51:64:fe:5b:f8:37:bd:c1:e1:f0:11:
ce:03:d9:cf:93:d0:2c:b2:3a:23:56:0d:a2:1a:ef:
53:4b:b5:0f:db:04:8f:8a:30:28:15:26:4d:3a:ee:
66:0b:9b:05:31:57:4d:7c:2e:b6:b9:64:eb:3a:e4:
54:f9:f0:31:e9:f6:45:1e:0e:20:42:c3:da:a4:1f:
07:c9:2b:83:0a:19:29:29:77:74:ec:d0:20:58:57:
fc:89:fa:bd:7e:c5:f2:11:19:3d:be:14:b7:27:c7:
11:60:ad:96:71:75:26:6a:50:c1:38:cf:f1:f7:a8:
0b:d7:91:41:26:84:45:46:62:21:8d:b7:d6:99:02:
f9:fd:98:01:14:b2:a4:45:54:e0:64:a8:df:84:68:
75:8e:a2:db:0c:f5:70:b1:63:f5:08:ea:f6:f5:90:
09:e4:28:71:ad:02:c4:4d:2a:8b:a4:60:f9:70:e5:
b0:3e:95:ea:93:52:ad:25:fe:5f:01:84:15:c5:f2:
26:5f:08:8c:dd:96:68:d2:7c:14:97:f0:63:e5:39:
03:a6:0a:2b:33:7a:7b:0b:a0:a1:52:9f:63:8a:e6:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:64:FA:2E:E3:6C:E3:BE:8A:F5:33:4D:53:67:6B:CD:D4:4D:45
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Dspk-i7jbOO-ivUzTVNna83UTUU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:42:10:f5:ea:fa:82:53:5e:09:53:70:d3:d5:e0:94:6f:37:
b5:50:94:08:ac:f5:ad:ad:f6:19:18:fa:78:44:22:f5:d9:43:
76:da:a2:33:9f:44:9a:af:b0:be:c8:4c:6a:3c:d7:68:51:1b:
83:50:30:17:52:e6:bd:f1:0e:f6:64:02:ef:be:4f:97:9b:a9:
20:28:7f:08:0c:00:16:1b:6e:6d:9a:0f:6a:5c:d4:c7:fa:89:
b2:2b:ce:fd:7f:68:75:1d:7c:46:fa:43:8e:f8:78:89:7b:62:
ea:2b:d9:08:5a:2d:8c:18:10:70:dc:2b:f6:cf:16:76:64:60:
c7:de:a5:2d:45:dd:0b:70:64:39:ab:62:99:b3:bd:fc:da:80:
a6:c7:91:d0:97:42:be:6a:44:dd:d2:d3:c2:51:6c:a4:98:0c:
bd:a4:a5:7a:dc:37:91:a5:c8:b2:aa:9f:3c:4d:27:6c:6f:31:
8d:9c:04:52:fe:79:99:e6:ad:ec:6c:c5:aa:15:07:fa:57:ef:
d0:e9:73:59:56:39:58:d0:60:e9:24:ac:2d:02:a0:22:61:40:
c1:de:8b:17:15:2f:b0:59:45:5c:4e:bc:6e:21:01:67:aa:6e:
b1:a9:6d:b4:ba:d8:06:8c:39:a3:6f:19:a6:9a:98:86:c3:ef:
60:91:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:07:02 2025 by rpki-client