Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa
File: frDZXAujTu7TpdfSnMRCAECQmCI.roa (raw, json)
Hash identifier: qjjFL33vYhxfQx37KTKN4utVLmJMiGJ7te/z/cs3cU0=
Subject key identifier: 7E:B0:D9:5C:0B:A3:4E:EE:D3:A5:D7:D2:9C:C4:42:00:40:90:98:22
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 4C
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa
Signing time: Thu 17 Apr 2025 11:45:25 +0000
ROA not before: Thu 17 Apr 2025 11:45:25 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.118.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76 (0x4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:45:25 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=7EB0D95C0BA34EEED3A5D7D29CC4420040909822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:7f:df:db:b9:b2:37:73:7d:73:c4:5c:7f:
16:37:b1:4a:ad:18:94:76:43:47:06:8d:94:ad:c9:
26:98:a7:03:0d:ef:48:49:43:6b:d6:b3:ae:57:5b:
ed:ea:4b:37:80:68:29:90:62:ed:ec:b1:d8:76:76:
11:52:73:38:2e:87:ce:e6:a4:4d:18:5b:d4:fe:29:
8f:26:51:ff:57:f1:a2:91:dd:13:16:f1:bb:9d:48:
51:1d:43:d9:65:6b:cf:14:f5:ff:b6:59:ba:26:9c:
f3:42:e2:cc:ef:f5:c8:15:5e:c1:37:d4:f0:04:0e:
15:07:41:6c:96:c2:55:4b:52:e9:e5:4c:35:85:70:
3c:b1:56:e5:a7:69:74:c2:a4:65:c8:b3:a5:a1:e2:
f6:c9:0a:e2:86:4a:f1:28:08:73:62:9f:cf:88:17:
5b:45:3e:23:e5:8b:bb:7b:2f:0e:95:eb:6f:c8:85:
fb:0c:8e:ed:ab:0d:c3:2e:58:fc:72:f9:30:5c:61:
e0:81:61:27:43:20:e9:e1:79:34:d8:d5:77:76:3f:
3f:74:5a:e3:20:11:7a:12:23:91:59:ed:bc:eb:f5:
16:54:d3:99:20:91:8e:2c:d5:f7:dc:02:35:25:f2:
a1:34:25:42:4d:b8:6a:40:f9:e8:22:90:86:d9:8f:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:D9:5C:0B:A3:4E:EE:D3:A5:D7:D2:9C:C4:42:00:40:90:98:22
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/frDZXAujTu7TpdfSnMRCAECQmCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:9f:d9:f1:51:5c:29:6e:dd:5b:68:09:2d:48:15:18:8b:74:
78:b4:e3:48:f0:23:6b:c6:7b:fb:3c:53:05:be:ed:24:c7:d4:
f2:4d:96:62:9f:82:b0:58:dd:26:62:2b:c4:dc:38:3c:fe:60:
51:4d:f0:dc:dd:ad:22:8d:cb:8b:05:25:63:58:e1:bd:30:a7:
10:ca:99:5c:6e:21:8d:78:9f:4b:13:a3:40:ba:a8:98:b4:b7:
1a:e8:ff:60:d5:c6:cb:ef:f8:ac:d0:02:4e:52:27:15:19:cc:
41:f7:ef:ff:dd:a0:37:4a:c8:77:4a:e4:e5:8c:1a:88:2c:fb:
56:4b:63:b1:ea:1a:71:95:09:1e:2d:6b:b9:33:7f:fc:57:d0:
a0:16:ff:cd:a9:3b:da:2a:ef:6e:c2:d3:16:e7:4a:33:cd:4c:
7e:3b:35:12:39:18:fa:0b:9a:d0:36:83:82:53:00:77:05:83:
1d:54:a5:2f:57:d4:7c:4e:01:bc:6c:2c:31:6a:72:2c:57:a9:
bf:bb:aa:59:76:2a:9d:41:01:7a:be:d4:85:44:c0:62:d7:7e:
7f:7b:1e:4c:e0:51:cc:48:b3:f3:c1:71:32:71:db:9c:5c:10:
36:6e:c1:e8:96:5a:a6:b0:32:16:7c:8a:b9:94:99:d5:a8:27:
07:6a:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:52 2025 by rpki-client