Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa
File: ZEe61U8oROyQXetEFyaf_srIWyQ.roa (raw, json)
Hash identifier: 9d6jFhGeC6aabPaXbTCChkAYRez4xDkdA08KPQhDXJw=
Subject key identifier: 64:47:BA:D5:4F:28:44:EC:90:5D:EB:44:17:26:9F:FE:CA:C8:5B:24
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 56
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa
Signing time: Fri 18 Apr 2025 01:19:34 +0000
ROA not before: Fri 18 Apr 2025 01:19:34 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.216.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 18 01:19:34 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=6447BAD54F2844EC905DEB4417269FFECAC85B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:1b:e5:38:86:1f:25:7b:88:03:71:e0:3f:
aa:fe:b8:08:45:db:5c:f5:7a:e8:1a:06:0c:b6:da:
86:f2:c7:ef:60:d8:b8:20:37:8c:e0:7b:30:0f:a7:
d9:8e:8f:a4:3e:47:26:1a:51:97:aa:ab:6a:ff:f3:
54:83:42:5f:fc:4f:54:de:9b:8c:14:95:42:e6:4b:
56:c7:c8:40:fc:f7:40:05:bf:11:f0:27:89:12:c3:
c7:cd:0a:08:1b:04:93:36:a1:b3:c3:cc:bb:21:c6:
66:44:f4:b3:ac:1b:f4:1a:85:df:59:d1:34:19:19:
85:bd:e2:e4:95:82:b2:97:2a:fb:53:29:64:4d:9e:
73:55:a7:87:0e:75:46:72:43:4e:e3:b6:05:03:4a:
8f:63:2b:dc:8b:1e:6f:b2:bf:96:6d:a6:31:38:a1:
08:c9:08:f1:59:7c:9a:47:5a:db:39:8b:31:ed:3d:
98:2f:a2:75:0f:fd:59:90:9a:76:6b:7c:72:00:cd:
5c:f0:8b:6d:72:5e:8d:44:d6:b9:98:13:74:3d:88:
70:1e:40:3c:9e:12:37:b7:b1:1f:02:7f:5c:62:3d:
82:a9:a9:8c:19:14:37:35:25:c3:6f:ad:fd:f3:1d:
fa:4c:f4:de:2b:40:bc:47:a5:10:e5:42:96:15:9d:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:BA:D5:4F:28:44:EC:90:5D:EB:44:17:26:9F:FE:CA:C8:5B:24
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZEe61U8oROyQXetEFyaf_srIWyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:fb:ed:a3:12:2b:92:df:af:12:d2:d8:3a:04:f0:b1:fe:7e:
9f:c5:25:75:87:96:58:ab:79:44:64:55:8c:bb:83:12:49:14:
80:a3:13:cd:55:ee:7d:76:7d:c3:94:5d:af:f6:3e:d2:ce:a0:
27:72:0a:4d:f6:7d:e2:66:3c:b6:9b:cc:fd:f4:8e:23:50:46:
af:4a:96:d7:73:c9:83:cb:50:8c:bc:22:9a:cd:7f:52:00:3b:
e3:35:6c:10:39:a2:4d:50:c7:50:8a:5a:a6:f6:dc:25:a0:af:
66:9d:04:74:8d:e5:fe:09:b2:3e:8d:6b:2c:a2:5e:cc:84:95:
54:0d:01:31:33:92:c0:92:f9:ff:a2:98:4b:f0:26:97:a4:f3:
b3:fd:db:65:89:f7:4f:14:b9:b4:31:97:e3:80:0b:0a:72:32:
4d:84:d1:3c:99:f5:a4:c4:8e:a6:7c:6b:7e:97:ab:fc:54:98:
3e:a5:ca:2f:75:85:de:fd:7b:42:5f:ff:9f:47:62:4c:98:ed:
f6:df:cc:7e:a4:9b:08:97:b0:20:d0:f7:21:07:a2:0c:13:12:
03:01:46:20:46:81:e3:b4:27:02:6c:55:08:44:df:56:b7:c1:
4f:58:2b:e3:52:1f:1c:6e:bc:22:ad:e0:5c:5e:80:74:12:80:
9a:a0:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:48 2025 by rpki-client