Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa
File: mUE2DJdXmRLSTNXync1F3D0afNM.roa (raw, json)
Hash identifier: bEUxl4wigpyKcL6lmpdKyd5pxWHIiTnflZl/LuOueR8=
Subject key identifier: 99:41:36:0C:97:57:99:12:D2:4C:D5:F2:9D:CD:45:DC:3D:1A:7C:D3
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 1C
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa
Signing time: Thu 17 Apr 2025 11:31:17 +0000
ROA not before: Thu 17 Apr 2025 11:31:17 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.115.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:17 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=9941360C97579912D24CD5F29DCD45DC3D1A7CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:ba:b2:66:b6:f5:19:dc:16:43:46:b1:c2:
36:9f:42:64:f0:20:89:79:a5:37:5b:2e:33:0a:df:
e1:c7:a8:43:b8:e0:d3:da:85:ce:ca:5f:25:d8:c8:
27:10:db:ca:fc:56:1c:e3:7e:a0:90:94:07:0a:17:
44:fc:ed:cb:80:04:c2:79:18:1c:0a:91:54:9e:0c:
6b:86:94:56:17:f7:58:82:3d:67:b9:55:0a:80:23:
75:18:d3:22:05:89:5d:a1:7e:e9:d2:bb:05:46:e3:
e1:b2:a8:a6:2b:55:86:fd:0f:59:ca:c4:03:4e:b4:
f1:a8:ee:a9:d4:f3:9c:d6:26:c2:de:76:a2:de:51:
99:7c:64:a2:b7:fc:88:d3:81:ee:a5:a1:7c:b1:63:
05:a1:e3:cd:4f:f8:a4:17:ae:9e:91:8e:95:d9:56:
34:46:ad:2f:12:b2:58:84:a6:93:c4:38:ea:a5:cc:
6e:ab:65:7d:2a:d3:de:12:8a:7a:79:65:77:5c:fe:
86:18:d7:31:1b:24:b1:1e:b4:4e:c4:64:bc:b7:dc:
20:fc:9e:fa:bb:ca:d2:eb:db:b7:b0:26:ba:09:cc:
60:19:95:3d:81:60:80:8a:64:e9:c6:09:86:96:2d:
ba:99:93:a7:99:73:8a:83:6c:d0:97:c4:a2:0e:a9:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:36:0C:97:57:99:12:D2:4C:D5:F2:9D:CD:45:DC:3D:1A:7C:D3
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUE2DJdXmRLSTNXync1F3D0afNM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:59:62:65:e4:3c:13:61:84:8f:d6:ea:51:01:c6:e6:c6:4c:
d2:0c:b5:13:e0:e0:59:64:24:d9:20:56:e4:2c:24:b0:cd:93:
d0:06:fe:0b:16:13:fa:6e:2a:1b:30:37:23:63:45:6c:65:55:
ed:99:70:43:28:1c:12:3a:66:ce:34:f8:fb:ad:56:18:d0:a3:
ee:0b:9e:24:16:02:66:5b:b6:6a:7b:b8:b7:1b:de:11:e1:17:
26:9d:31:dd:93:29:51:63:5a:e0:f7:85:2b:09:11:fa:02:0f:
38:82:fb:f1:f8:14:0b:de:b8:f9:4b:82:6e:a7:8d:95:62:cc:
ad:de:d8:53:ce:75:ee:4d:cf:da:28:f4:d3:1d:ac:f3:1d:a8:
b0:09:f7:53:01:cc:8e:ab:61:23:f5:af:93:c6:2e:78:3c:1c:
49:48:85:ea:26:94:52:21:9f:23:0a:1a:0b:8b:9b:83:1b:b4:
45:ad:f1:24:be:6e:6b:bd:5c:0d:97:90:9c:ce:54:ce:94:96:
f3:5c:12:56:ee:85:b9:ec:ea:c7:78:53:42:29:9e:9d:a6:c3:
da:b5:e8:02:5d:90:2c:e9:38:ac:bc:aa:da:cd:23:5b:26:a4:
74:7e:5e:eb:a1:c7:92:cd:1e:f7:4f:6a:21:5b:f9:2d:9f:f8:
f9:23:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:12 2025 by rpki-client