Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/WJy_rkvaH-YVVyy-AwrfMAEWwIs.roa
File: WJy_rkvaH-YVVyy-AwrfMAEWwIs.roa (raw, json)
Hash identifier: Ka34Z8TRrof8EZtW7EAvIvtIwmiXwTYVdlJavN1+l1Q=
Subject key identifier: 58:9C:BF:AE:4B:DA:1F:E6:15:57:2C:BE:03:0A:DF:30:01:16:C0:8B
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 2E
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/WJy_rkvaH-YVVyy-AwrfMAEWwIs.roa
Signing time: Thu 17 Apr 2025 11:34:29 +0000
ROA not before: Thu 17 Apr 2025 11:34:29 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.115.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:34:29 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=589CBFAE4BDA1FE615572CBE030ADF300116C08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:71:06:a3:5a:b0:ed:a1:96:3f:ae:be:18:
4a:b1:95:ca:9d:28:5e:3f:12:51:dc:49:d9:74:1c:
33:c8:54:61:b5:1e:78:64:cc:ac:77:f2:d3:01:18:
47:64:0f:be:38:27:35:d4:24:f6:dd:81:3a:ca:b8:
c4:cd:e7:39:c2:9c:6c:3e:eb:57:a3:9b:17:37:98:
c0:75:07:66:02:50:63:4e:9b:1c:7e:17:9e:e2:a6:
6f:e0:c8:f7:20:ba:25:61:26:72:41:1d:df:59:4b:
3e:aa:08:06:f8:51:90:7e:b6:d3:cf:c9:86:6b:6a:
08:e4:7c:4a:f4:f0:9c:4a:12:b9:7c:57:32:ed:93:
67:4d:41:86:60:1a:9d:a9:ce:93:2e:c3:e8:ee:25:
77:8c:15:76:82:99:92:be:f1:f7:a0:7d:ef:f1:d3:
b2:b4:59:a6:86:b3:20:88:b2:ef:32:4e:98:db:9e:
6f:a8:77:e2:69:4b:dd:a9:66:61:21:8c:84:52:00:
e4:3f:f4:11:0f:b5:d7:89:48:f9:6b:04:76:0a:ce:
19:a0:9d:3c:f7:ca:94:a5:b7:45:cd:1f:18:5a:a8:
6b:2f:1a:e9:08:6c:13:db:08:89:0d:6a:8f:95:c4:
b2:2f:5e:67:f2:86:ac:8c:96:de:3f:23:11:1b:95:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:BF:AE:4B:DA:1F:E6:15:57:2C:BE:03:0A:DF:30:01:16:C0:8B
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/WJy_rkvaH-YVVyy-AwrfMAEWwIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.48.0/22
Signature Algorithm: sha256WithRSAEncryption
51:48:c4:cb:0d:a5:82:42:2b:06:f9:e5:64:6e:ae:ea:28:2e:
95:ce:8a:36:c8:dc:76:95:0f:7d:72:b2:2e:24:d5:9f:4f:b9:
84:5e:6a:fe:21:a8:0c:c6:af:4c:9b:fb:f5:ec:1f:c9:b0:48:
b8:f8:77:09:03:f0:d7:0a:73:d1:ae:38:53:85:40:22:60:02:
c2:7d:f4:90:c0:92:a5:7b:a2:ba:ed:7b:2b:e9:63:54:19:d0:
4a:60:ba:d3:20:48:cd:8a:8c:11:80:a4:c1:8f:23:60:1b:44:
8c:f9:4e:cb:0e:5f:48:5b:8c:7c:77:31:43:bd:28:44:97:d3:
95:e5:37:ed:ce:2a:cd:32:b1:66:5f:13:ef:e4:17:d0:af:4a:
8f:8c:f9:1c:48:c4:97:4d:f2:6c:bc:7f:95:c1:3b:17:f7:24:
54:e0:95:fd:70:7b:a3:fd:c3:02:47:09:26:fb:4f:b8:9c:d5:
90:e6:25:6f:47:00:72:f4:1f:e5:91:b3:e9:99:98:f0:5e:74:
42:c7:44:01:49:a3:47:1e:26:89:d3:c2:bf:30:d7:8d:e8:b8:
17:cf:24:b4:22:a1:b1:a7:84:50:95:29:f7:35:6a:8e:a2:54:
0b:c1:92:f9:1d:2d:6c:d0:86:50:7a:37:79:b5:9f:7c:8a:57:
d4:97:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:34 2025 by rpki-client