Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa
File: Zly-QXDFs91GR4zXFGHuWOeTjUo.roa (raw, json)
Hash identifier: QKSfxMwMhHxIWXkvvTOhEOPIlWRregs7TxDp0oCXGrc=
Subject key identifier: 66:5C:BE:41:70:C5:B3:DD:46:47:8C:D7:14:61:EE:58:E7:93:8D:4A
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 32
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa
Signing time: Thu 17 Apr 2025 11:34:31 +0000
ROA not before: Thu 17 Apr 2025 11:34:31 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.115.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:34:31 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=665CBE4170C5B3DD46478CD71461EE58E7938D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:f4:4c:23:2b:8b:5b:81:f0:a9:8d:9a:b5:
59:3f:b8:9f:df:db:40:0c:08:d6:88:b1:fa:63:8f:
bd:1d:a3:a8:5e:c5:2c:6e:e8:9a:9c:95:23:47:11:
93:8b:f5:c2:82:3e:1c:5d:9b:39:f3:06:c7:4d:2c:
4d:64:ba:1a:46:e7:bb:2e:07:75:38:cf:d8:e4:77:
77:a8:37:52:97:dc:c9:c1:80:e5:af:2e:53:9b:90:
98:8c:29:5b:4f:ae:3b:c0:5f:f0:bc:75:1c:41:1f:
e5:24:53:94:05:ab:3c:d1:32:85:f8:11:fd:71:68:
2f:2a:80:e4:9c:46:b2:0e:89:fe:81:af:d1:56:e4:
9c:a8:06:fd:28:12:6b:b5:b5:c4:75:3c:11:5e:27:
fa:82:b5:50:0c:e7:90:f8:92:9c:e7:0b:7a:71:15:
60:06:e8:69:7f:d7:b3:27:b9:0d:08:5a:00:66:94:
54:f0:eb:09:68:26:54:4b:f2:e1:9e:63:e0:24:a1:
4a:1a:45:77:ad:a1:be:da:46:78:34:a1:1e:5f:4c:
b7:b3:e5:42:ec:cf:fc:09:c6:70:ff:05:51:85:ba:
52:c9:4a:8f:42:1f:4e:59:3e:89:18:01:be:9d:0e:
47:62:38:bc:f3:44:2d:9f:3e:a9:5f:d2:ff:da:0d:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:BE:41:70:C5:B3:DD:46:47:8C:D7:14:61:EE:58:E7:93:8D:4A
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Zly-QXDFs91GR4zXFGHuWOeTjUo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:0e:8b:5a:ad:db:42:d5:02:01:77:23:5f:94:bd:27:64:65:
ee:0f:53:94:02:30:2b:cf:2d:fe:f1:62:0e:c0:b0:85:c3:b6:
e5:05:2d:f8:32:d5:12:ee:10:af:2b:51:ac:d8:f2:44:f5:3c:
05:f2:54:f7:6b:89:7f:fb:2f:b0:4d:a4:f7:12:86:e1:18:d3:
c3:31:bd:d2:34:ab:95:a5:4f:c4:a9:2b:7e:a2:d8:e5:f2:80:
55:19:55:5e:35:2d:f4:fa:17:cb:91:c5:8b:d9:12:15:ad:f8:
20:fe:7f:39:ac:ee:f3:51:99:d4:31:30:1b:78:4d:3b:97:9a:
89:8b:d1:8f:df:a3:66:ea:e8:88:e3:f7:d3:33:b4:a6:e8:9c:
b4:44:16:c0:02:5c:9b:42:5b:9c:9b:57:17:e0:d1:6e:e4:28:
4d:5b:b6:61:47:9c:66:ad:ae:d8:3a:6f:43:27:ba:1c:88:8d:
ad:08:ae:06:d4:c7:cd:25:32:cf:06:19:e3:47:3d:ed:00:a2:
6d:be:24:89:16:fa:da:94:b4:05:36:16:f0:5d:72:06:8c:25:
34:cc:1d:9c:4a:e7:09:88:02:8a:92:8c:e5:c7:70:8d:30:21:
ec:88:f1:93:53:6b:33:b3:19:57:31:71:6e:cc:c8:9b:57:ce:
24:d7:bf:c0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF
ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx
MzQzMVoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoNjY1Q0JFNDE3MEM1QjNE
RDQ2NDc4Q0Q3MTQ2MUVFNThFNzkzOEQ0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ+N9EwjK4tbgfCpjZq1WT+4n9/bQAwI1oix+mOPvR2jqF7FLG7o
mpyVI0cRk4v1woI+HF2bOfMGx00sTWS6Gkbnuy4HdTjP2OR3d6g3UpfcycGA5a8u
U5uQmIwpW0+uO8Bf8Lx1HEEf5SRTlAWrPNEyhfgR/XFoLyqA5JxGsg6J/oGv0Vbk
nKgG/SgSa7W1xHU8EV4n+oK1UAznkPiSnOcLenEVYAboaX/Xsye5DQhaAGaUVPDr
CWgmVEvy4Z5j4CShShpFd62hvtpGeDShHl9Mt7PlQuzP/AnGcP8FUYW6UslKj0If
Tlk+iRgBvp0OR2I4vPNELZ8+qV/S/9oNF08CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBRmXL5BcMWz3UZHjNcUYe5Y55ONSjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj
QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2
L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9abHktUVhERnM5MUdS
NHpYRkdIdVdPZVRqVW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3M4MA0GCSqGSIb3DQEBCwUAA4IBAQBdDotardtC1QIBdyNflL0nZGXuD1OU
AjArzy3+8WIOwLCFw7blBS34MtUS7hCvK1Gs2PJE9TwF8lT3a4l/+y+wTaT3Eobh
GNPDMb3SNKuVpU/EqSt+otjl8oBVGVVeNS30+hfLkcWL2RIVrfgg/n85rO7zUZnU
MTAbeE07l5qJi9GP36Nm6uiI4/fTM7Sm6Jy0RBbAAlybQlucm1cX4NFu5ChNW7Zh
R5xmra7YOm9DJ7ociI2tCK4G1MfNJTLPBhnjRz3tAKJtviSJFvralLQFNhbwXXIG
jCU0zB2cSucJiAKKkozlx3CNMCHsiPGTU2szsxlXMXFuzMibV84k17/A
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:48 2025 by rpki-client