Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa
File: QzJMPKa_UR9p8iXarj2Kjw14lYM.roa (raw, json)
Hash identifier: Ejh8zms5wpasOwH1ISI9WMHFunG6pEslLTTvHhjIQVE=
Subject key identifier: 43:32:4C:3C:A6:BF:51:1F:69:F2:25:DA:AE:3D:8A:8F:0D:78:95:83
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 38
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa
Signing time: Thu 17 Apr 2025 11:34:33 +0000
ROA not before: Thu 17 Apr 2025 11:34:33 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.112.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:34:33 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=43324C3CA6BF511F69F225DAAE3D8A8F0D789583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:53:0d:e3:98:36:7e:d6:07:14:62:d2:0d:
c1:46:aa:21:dc:89:03:35:05:7f:13:61:d9:20:75:
39:d9:30:17:ec:40:df:b7:2a:43:7e:84:8e:8b:54:
60:1a:39:22:e2:41:f3:46:64:d9:8f:78:db:4f:f5:
a3:9a:09:2c:2b:4d:ce:18:23:5a:a4:d6:4b:39:3d:
72:e0:25:2d:aa:d8:65:13:d9:df:7e:59:0e:8c:70:
20:66:c1:04:3b:02:c5:83:af:78:6b:b1:89:a8:7f:
b4:2d:ae:b4:f8:4c:fc:e2:bf:3c:5c:5b:99:78:99:
9a:cb:9e:76:d8:ca:34:25:0e:a1:10:8b:e0:48:0f:
63:13:a3:4f:47:39:d3:1c:70:c1:a3:d2:0b:3b:08:
cd:08:ae:f5:57:53:8d:b4:79:e5:f8:0a:f8:b4:a7:
32:74:52:11:0a:e5:c5:da:0f:83:09:5e:56:95:d2:
4e:0e:d6:d2:cc:22:b1:f5:77:b3:02:02:29:11:5b:
58:ea:56:39:11:f8:64:20:06:50:40:47:a7:cc:75:
30:fd:15:be:ba:dc:7f:4b:08:bd:89:94:3b:fb:55:
4d:24:97:b0:c4:9e:21:a0:04:18:7a:8a:1a:ea:46:
78:ef:9a:2a:30:2a:2a:96:4f:3b:0a:0e:19:23:cf:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:4C:3C:A6:BF:51:1F:69:F2:25:DA:AE:3D:8A:8F:0D:78:95:83
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/QzJMPKa_UR9p8iXarj2Kjw14lYM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ea:ff:ec:ce:e2:d7:23:99:3b:2f:e1:7a:b7:68:b2:fe:f9:
6b:9b:4b:bc:46:a5:e0:fe:e3:8f:88:42:2a:2f:6c:83:ea:7c:
5c:e0:29:71:1b:24:ff:51:66:ea:de:2c:c0:af:84:4f:33:76:
16:b2:01:c0:10:01:4f:cb:8b:1b:f0:22:f1:9f:84:9c:67:0e:
4d:da:d1:6d:ad:1c:27:f8:c2:ff:8a:5d:95:c0:db:b9:2d:ed:
4e:d5:f2:65:64:85:00:ca:25:cb:55:13:27:99:c4:37:5c:2c:
25:fd:6a:4c:1d:2a:aa:cf:df:5e:62:dd:fa:61:46:7d:2b:66:
ae:49:80:2d:ba:2d:4c:94:2a:a5:e5:f4:fd:24:8f:52:df:11:
03:c0:98:0b:c3:e5:69:57:68:0c:87:b9:7e:22:62:0f:ef:35:
42:15:08:58:db:0f:93:10:5a:38:37:7e:7e:1c:2c:2a:e7:44:
f1:27:18:4c:67:97:cc:c4:87:f2:e0:77:7e:19:6a:bc:21:2e:
73:98:01:c5:8d:ef:1e:a3:eb:71:4c:97:2b:14:b7:24:54:4d:
cc:55:90:5e:06:1d:69:b0:3e:b2:44:a0:37:f6:c9:f0:7d:19:
ae:25:b6:c8:a3:c6:b4:3e:10:f5:b1:7f:7f:ad:8c:d5:22:fa:
78:b4:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:14:11 2025 by rpki-client