Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZYPB0sgU69U94UQmgERo23Kak24.roa
File: ZYPB0sgU69U94UQmgERo23Kak24.roa (raw, json)
Hash identifier: zvupR9pBaClUjYEe3mqdNYDB1mllUTZ2hQXt+AUtD3o=
Subject key identifier: 65:83:C1:D2:C8:14:EB:D5:3D:E1:44:26:80:44:68:DB:72:9A:93:6E
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 6D
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZYPB0sgU69U94UQmgERo23Kak24.roa
Signing time: Mon 21 Apr 2025 18:15:56 +0000
ROA not before: Mon 21 Apr 2025 18:15:56 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.118.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 21 18:15:56 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=6583C1D2C814EBD53DE14426804468DB729A936E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:6d:07:b7:18:61:9f:4f:e6:33:e7:78:62:
b9:ac:a1:01:59:9a:7a:11:b0:cd:b3:40:81:a3:ce:
65:ae:a2:63:33:30:7d:73:c9:0b:d7:fc:b7:4b:44:
c0:9e:c8:8f:5b:2b:65:76:c3:0f:2b:f1:46:28:78:
d2:db:89:9d:e9:cc:13:bb:02:70:8f:31:d7:08:0d:
8c:6e:18:e6:5b:10:29:45:4d:d3:11:53:e1:71:72:
fa:5a:2f:84:74:48:88:a2:34:a4:81:90:ff:67:29:
d3:c2:8d:2c:7e:30:8b:7a:dc:7b:13:9e:c1:96:55:
d3:11:6d:dc:e5:21:a4:a2:ee:bd:e1:1f:1a:36:87:
64:b0:8b:c1:40:28:15:47:c2:ce:e2:2b:68:21:e1:
5d:77:35:24:34:b9:da:e0:d7:7b:41:2c:48:aa:38:
3a:25:49:dd:b2:a6:36:af:f7:58:b7:f0:fd:9f:18:
c0:1b:7c:c0:b9:d7:66:f4:95:df:db:e5:9a:71:ca:
f0:97:e6:cf:de:56:64:6f:54:4f:09:1b:eb:f3:48:
23:61:94:5f:95:bc:d3:a2:be:22:31:82:35:2a:bb:
e4:bd:a4:2b:59:61:90:7a:05:62:20:74:8e:9b:e7:
93:b4:27:c0:4f:dc:dc:40:ff:0c:3b:27:f7:b1:49:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:C1:D2:C8:14:EB:D5:3D:E1:44:26:80:44:68:DB:72:9A:93:6E
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/ZYPB0sgU69U94UQmgERo23Kak24.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.252.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:f1:c8:a1:87:2c:47:81:09:c0:a2:96:e7:93:ec:5b:66:2f:
a8:96:7e:cd:03:bf:a1:4e:7c:0c:39:3a:9d:a2:5d:45:73:f5:
03:f5:ff:85:03:24:3b:57:77:54:d0:1f:a1:4e:74:e8:42:b3:
f7:a6:74:e5:46:2b:dd:12:e7:fb:d3:13:50:30:bc:33:59:df:
a5:7a:dd:b0:8c:98:b9:a7:32:8e:78:2c:c2:e8:9a:d8:6d:27:
84:af:3f:fb:b3:76:95:4e:bd:77:88:b6:a7:bc:a0:de:97:f4:
76:37:7f:bb:ff:3a:47:74:5f:f1:41:30:da:df:f4:8f:2a:c0:
65:c8:3d:e9:ef:aa:e8:4e:5d:01:27:6f:bd:ea:69:85:51:40:
00:94:11:cd:1a:c2:80:97:c4:10:9c:12:31:7d:24:39:87:d9:
e7:ed:58:db:b5:0e:a3:c1:7f:b8:a7:c2:ff:38:df:3f:9b:e0:
85:6b:7c:af:c5:ae:2c:c2:ec:37:fd:01:76:27:8c:b1:e6:c2:
1f:e0:e3:32:31:fe:c7:12:8c:81:85:18:df:85:71:93:e1:2f:
f5:7d:a8:b6:3f:ff:ab:39:3a:7c:bd:80:1f:80:5c:6b:ba:f9:
97:de:e3:88:a8:4e:c5:fc:04:f9:36:ee:87:9f:6d:25:a9:61:
6a:16:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:35 2025 by rpki-client