Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa
File: Y1pheM6E9awSNrtsTzO20_sXtkQ.roa (raw, json)
Hash identifier: JIwdqGLl+/ExCw4zqu0xp+XsLU0HSrZTOAUdAACRhhw=
Subject key identifier: 63:5A:61:78:CE:84:F5:AC:12:36:BB:6C:4F:33:B6:D3:FB:17:B6:44
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 40
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa
Signing time: Thu 17 Apr 2025 11:42:31 +0000
ROA not before: Thu 17 Apr 2025 11:42:31 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 967
IP address blocks: 103.118.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:42:31 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=635A6178CE84F5AC1236BB6C4F33B6D3FB17B644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:7b:32:2a:b1:86:09:89:e3:2e:0e:ce:18:
18:ba:7e:e3:6f:f3:12:81:3b:b4:af:fc:64:45:28:
f6:42:69:27:71:63:75:1f:33:a9:0b:27:7d:e5:18:
c2:9f:7f:2f:9a:02:27:7a:c2:46:c1:54:f8:22:29:
30:39:7a:11:4f:79:b7:b4:91:34:a4:26:c3:52:6d:
80:4c:d3:70:95:ae:46:0d:b2:3e:84:90:15:1b:7a:
55:6d:84:72:83:ad:7b:ea:c8:9b:37:4d:4d:48:75:
c2:96:31:03:e8:a3:9d:94:bb:5e:fe:2a:15:40:14:
1e:54:23:1a:53:83:7f:58:2c:ff:cf:51:d5:de:34:
a1:b8:8d:97:1b:7f:db:45:61:28:74:c3:16:b4:7f:
01:cd:79:b9:8c:27:ee:2a:f4:db:0a:64:a6:49:1b:
6b:e1:5b:ad:83:7c:e8:7f:23:fd:19:4c:e5:6e:47:
e9:50:cc:56:21:98:a7:90:e6:1f:73:98:60:fb:bb:
e1:4a:9c:da:52:42:57:1c:04:dc:65:0f:cd:af:d1:
d2:06:cf:c5:53:7f:5c:78:8f:fa:f0:fd:a2:c2:99:
88:4c:7a:3a:91:50:12:5f:5d:f1:86:40:7c:e1:0a:
cf:47:53:9e:8d:6e:6f:bd:66:7c:e1:40:25:a9:f4:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5A:61:78:CE:84:F5:AC:12:36:BB:6C:4F:33:B6:D3:FB:17:B6:44
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Y1pheM6E9awSNrtsTzO20_sXtkQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:90:9b:43:19:4c:18:26:33:2b:7f:d6:21:e3:5d:22:52:1a:
6f:e2:67:96:68:6d:be:91:0f:b1:5e:8e:ca:54:62:7f:a5:69:
aa:4c:57:b7:89:24:dd:87:bf:47:52:1a:72:01:05:dd:dc:90:
0e:2d:09:a6:6e:3b:cd:9f:92:87:5e:75:c5:c4:b0:d7:24:52:
2a:e8:71:bc:13:f9:d6:28:79:3e:d3:ee:76:f7:4c:ba:7a:e8:
a0:93:5d:33:7b:5a:e2:97:98:2a:43:68:41:e5:de:4a:98:d5:
55:03:4f:c2:c0:45:50:2b:6f:1c:62:8c:cd:40:85:40:00:e9:
30:69:56:6c:35:d5:20:c7:e6:cd:f5:88:30:32:1d:2a:29:30:
2b:90:71:6a:22:97:03:5e:54:87:50:18:0f:8d:40:06:e3:53:
71:e2:c3:1f:8c:95:64:2c:0d:9e:6e:ea:8f:28:3c:45:3d:4f:
3e:a7:27:67:85:3d:89:28:3e:21:83:ef:30:6d:ed:b6:dc:82:
c3:bd:73:c7:9d:07:a9:af:10:07:bf:c9:52:57:cf:a6:99:12:
5f:5d:2b:2e:41:48:f7:06:34:ef:f5:1e:70:f1:91:f8:d9:31:
b6:68:79:7b:ff:08:78:a0:6c:ce:54:03:e3:0c:9d:ce:6d:9f:
e2:74:5d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:22 2025 by rpki-client