Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa
File: RTeG_cMKUesZNpVhG7UA4krUtXs.roa (raw, json)
Hash identifier: xUyzft64Ti8bFTxikcM6qtI4dRlBaGPtLEsmWVMdlCI=
Subject key identifier: 45:37:86:FD:C3:0A:51:EB:19:36:95:61:1B:B5:00:E2:4A:D4:B5:7B
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 15
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa
Signing time: Thu 17 Apr 2025 11:31:16 +0000
ROA not before: Thu 17 Apr 2025 11:31:16 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.118.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:16 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=453786FDC30A51EB193695611BB500E24AD4B57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:e1:65:a8:e6:84:8f:5d:cc:6e:42:4b:6c:
15:75:10:f8:1b:da:d0:25:be:99:37:4d:55:d6:9f:
74:89:a6:57:e6:24:81:68:60:df:06:0f:1e:32:14:
c7:e4:ef:43:9f:16:e8:52:e9:ee:7f:13:b0:c3:75:
8c:2d:23:c4:46:91:00:b9:e0:a6:49:2e:13:2f:b1:
4b:2c:2a:92:fb:f5:68:3f:81:02:cc:4d:04:05:88:
14:87:fa:d7:e0:09:4c:ac:54:bd:4f:97:63:db:ab:
ea:2c:1d:64:38:b6:a5:e3:6c:19:61:33:95:f9:2d:
19:4c:73:75:b5:b8:bf:bb:86:7a:81:37:95:ea:51:
3b:9a:2e:3e:d5:10:3a:45:15:9c:60:eb:98:19:ed:
c1:8a:d4:7b:5b:8c:c6:73:a0:ce:e9:f4:5c:59:5c:
7c:bc:45:3e:4b:5a:7d:0c:b3:25:b0:19:3f:ed:26:
59:ba:65:1d:ca:73:58:64:e4:6e:11:4f:cc:13:cf:
58:71:a2:8a:aa:83:f9:e5:88:8f:fa:26:19:ce:61:
aa:51:e3:f1:65:bf:23:2a:83:fe:ae:f8:24:0a:e8:
b2:78:a2:28:3b:10:77:73:0a:24:aa:97:a6:5b:28:
12:1e:3c:61:bf:89:b7:79:77:de:0d:a9:42:66:72:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:86:FD:C3:0A:51:EB:19:36:95:61:1B:B5:00:E2:4A:D4:B5:7B
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/RTeG_cMKUesZNpVhG7UA4krUtXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:31:a7:aa:17:58:d6:52:34:be:bf:9a:72:9b:eb:c4:5a:7c:
57:d6:be:a9:34:99:0d:8e:09:a3:a6:76:46:18:f6:5a:9f:43:
5a:02:cb:09:32:cf:cd:4b:b9:bc:6d:6b:bc:c7:b5:66:95:c2:
c5:0f:6e:ec:e6:55:24:c1:4b:21:85:ff:6a:e8:b3:4b:84:32:
6d:37:30:da:8f:ec:17:33:53:e2:61:fa:11:25:0d:8b:89:29:
8a:11:e8:83:45:33:e6:ec:26:81:d1:21:d0:80:6d:cd:e4:a8:
6f:27:79:dc:28:9d:db:c7:de:0d:c5:b6:10:ce:58:3b:07:42:
3c:9b:94:12:b2:32:8d:21:7d:11:06:fe:89:78:b2:4e:c9:b8:
da:af:a6:2c:d5:d4:a9:c1:14:9a:de:e0:0a:0a:7e:4d:de:ad:
8b:82:a6:b1:2b:8a:10:47:5f:56:89:76:10:0c:98:14:44:0c:
fb:11:2c:15:8d:ac:f1:df:81:1e:99:61:bd:07:12:85:f1:61:
29:ab:2b:6a:b4:2a:d3:7d:56:92:4c:6b:ae:35:b0:f7:58:13:
83:f2:45:ed:ab:b7:a5:7f:a2:9c:e1:0c:94:63:25:3f:29:c0:
3e:a1:c2:9d:b4:40:d4:86:fa:f0:e2:6b:10:e4:ac:ea:ba:35:
1c:92:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:56 2025 by rpki-client