Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/lAgR_MIgrmMfu9a5RX3rfdzcY14.roa
File: lAgR_MIgrmMfu9a5RX3rfdzcY14.roa (raw, json)
Hash identifier: mZrino2pfC9lY63b3gFD5/z7++zlXL/wtapf7/0/C3I=
Subject key identifier: 94:08:11:FC:C2:20:AE:63:1F:BB:D6:B9:45:7D:EB:7D:DC:DC:63:5E
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 3C
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/lAgR_MIgrmMfu9a5RX3rfdzcY14.roa
Signing time: Thu 17 Apr 2025 11:42:29 +0000
ROA not before: Thu 17 Apr 2025 11:42:29 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 967
IP address blocks: 103.118.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:42:29 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=940811FCC220AE631FBBD6B9457DEB7DDCDC635E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:f2:02:34:dc:c5:54:e8:27:95:d1:62:7a:
ea:7d:af:24:41:34:e9:c1:de:4a:a5:f2:27:6a:b4:
26:83:d5:50:1e:4d:dc:64:e8:21:06:8b:e1:b2:f9:
d0:47:d8:f5:02:f1:66:eb:5e:00:ba:34:be:0e:0e:
cd:6d:68:45:ee:13:5c:32:e2:ac:bc:5d:fb:0a:b7:
3d:40:6b:42:38:a1:3c:9a:ae:79:cf:09:a6:cc:a2:
9b:09:da:af:a9:ff:53:30:0b:72:32:4c:26:e7:95:
eb:36:d4:35:89:4b:8c:26:78:0c:51:30:e0:c1:c0:
82:f1:82:fa:3a:e6:00:13:ff:a0:69:b2:f9:5f:9b:
12:82:57:33:54:18:ca:5a:b6:66:7e:e1:ec:fd:f9:
0a:a7:6c:79:24:ad:94:9e:f0:6b:50:66:66:16:b4:
6b:b1:c9:8e:d7:7f:85:5b:03:11:21:31:3e:a3:55:
d6:a8:4b:f8:92:39:29:e5:7e:f7:b5:1b:de:40:c0:
21:db:f0:4c:8e:3d:aa:54:9a:87:6a:27:be:7d:82:
07:88:6f:30:85:cf:15:a6:16:32:92:f5:ba:ba:7f:
f0:e7:15:d4:9f:01:80:08:a4:1b:b6:fa:aa:8f:d2:
32:3a:f4:1c:91:8a:f6:bf:7b:d5:0a:a8:d3:c3:27:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:11:FC:C2:20:AE:63:1F:BB:D6:B9:45:7D:EB:7D:DC:DC:63:5E
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/lAgR_MIgrmMfu9a5RX3rfdzcY14.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.248.0/22
Signature Algorithm: sha256WithRSAEncryption
81:66:78:98:d3:f2:4f:5c:ba:32:9f:1b:f7:32:88:99:31:d4:
09:5d:6b:8f:8c:5d:69:4c:2d:e6:0c:d8:36:23:79:15:88:79:
13:c9:b7:57:ce:fc:21:ec:f5:89:1f:0b:79:c6:3d:7e:da:12:
ee:69:81:d8:0e:16:b3:b4:6c:20:1e:77:83:45:97:73:ba:52:
51:3b:a5:29:57:01:05:af:78:f2:4c:b3:99:d2:75:ac:a3:ce:
4d:cf:9a:a9:1d:2c:ef:7d:06:0f:35:ef:88:ff:45:71:f9:81:
d3:38:ab:a8:80:98:56:6b:13:ef:ff:b7:ea:d3:e3:07:28:6c:
de:4a:6d:fd:fb:ce:8a:1d:59:c7:39:12:62:f9:61:2b:9d:f1:
0a:56:d5:ad:d1:8d:a1:9f:c0:5a:69:97:d2:19:5a:81:9e:c1:
92:79:e6:a0:2c:f3:f1:b0:b2:93:77:31:e2:26:0e:af:aa:ea:
52:98:58:a0:39:9c:d4:92:92:1d:b2:6d:4c:fd:37:96:78:16:
e4:d5:56:d5:1f:3d:99:6a:e2:b1:eb:75:67:13:eb:2e:92:f1:
ce:a8:f8:89:48:ac:8c:df:22:5c:32:5d:fd:6d:7a:55:ed:11:
2a:b4:41:ce:5d:c9:86:93:6d:fb:62:ab:a2:9e:92:15:cb:aa:
c0:3d:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:04 2025 by rpki-client