Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa
File: tYzefTVPxgpygIMPRD26zTcUgtU.roa (raw, json)
Hash identifier: yyfidgyIO0pdltmu6lmorIrzApRemp1bv9z3rJSdDuk=
Subject key identifier: B5:8C:DE:7D:35:4F:C6:0A:72:80:83:0F:44:3D:BA:CD:37:14:82:D5
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 49
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa
Signing time: Thu 17 Apr 2025 11:45:23 +0000
ROA not before: Thu 17 Apr 2025 11:45:23 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.112.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:45:23 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=B58CDE7D354FC60A7280830F443DBACD371482D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:cc:3e:ab:c3:8c:9d:ed:21:9c:e8:dd:d5:
05:bc:ab:6c:f5:1e:aa:5e:f6:30:0e:c5:e3:40:9d:
ec:83:6c:32:93:36:07:56:62:d5:7d:ec:c1:14:70:
79:08:07:92:91:be:ba:c5:db:7d:83:6f:b0:cd:72:
22:b6:64:8d:04:b4:86:75:52:75:ec:82:bd:1f:03:
99:8b:9a:fb:e5:43:f1:91:68:9a:a2:2b:9b:f4:19:
e6:c0:9d:b6:55:ea:be:88:8e:d0:0e:6d:10:af:bf:
bb:00:93:53:0c:8b:27:27:dc:2e:59:e1:ba:14:23:
53:6a:6e:9c:fd:13:64:29:75:f6:00:85:2b:07:07:
d1:cf:3e:e9:7a:36:36:0f:81:19:3e:00:6a:64:26:
87:1c:b9:89:39:32:ee:10:04:13:84:17:00:3e:22:
81:77:2a:56:b5:7f:aa:b1:e3:9b:88:fe:8f:b1:b9:
c7:f3:ff:e3:9e:8f:30:cf:d9:22:1f:b5:e9:4e:1c:
24:5f:e4:24:48:74:ee:85:24:56:28:0f:7f:2d:6b:
99:0c:58:24:4a:76:04:1a:32:fe:36:d7:d3:1f:f5:
f1:45:a8:a1:1e:cd:5f:51:e0:e8:c1:c3:ec:70:92:
a2:2c:9a:ce:46:91:f7:fb:4f:e6:17:23:78:e7:1c:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:DE:7D:35:4F:C6:0A:72:80:83:0F:44:3D:BA:CD:37:14:82:D5
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/tYzefTVPxgpygIMPRD26zTcUgtU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.68.0/22
Signature Algorithm: sha256WithRSAEncryption
37:38:53:77:85:4c:28:d5:5a:7a:01:9f:67:80:b0:d1:c7:92:
ac:af:13:f7:6e:ca:b7:91:3e:09:3c:6a:26:8a:dd:7e:cc:dc:
7c:85:12:f4:ca:1a:0a:23:5f:fd:94:1c:22:1c:4b:5e:fe:ae:
8a:49:b7:b5:bf:85:04:c4:80:32:5d:3d:a7:11:19:e9:99:fe:
bc:0d:95:dc:9f:b9:79:70:1f:e4:bd:c8:f6:c6:60:66:10:b8:
30:f8:15:6e:62:e2:cd:1b:83:2f:83:0d:a7:9b:df:34:6a:55:
4c:1b:79:e2:74:8b:70:55:52:69:bf:3a:6e:df:89:84:7f:71:
46:92:15:a6:1f:6f:ca:70:24:b6:d0:f3:e9:a9:a8:18:06:f0:
4a:2b:b7:fc:51:70:4f:bf:c7:85:31:8a:3b:0f:45:8a:3e:2b:
59:18:36:7d:77:e4:bf:16:73:41:ba:0c:d3:6e:50:42:ab:83:
ac:05:7f:fc:fa:2f:36:b6:11:f4:b9:7e:97:33:fa:63:3e:78:
e1:a6:41:ce:34:b0:4f:69:ca:4d:32:b1:04:7d:ca:69:b7:7b:
0c:80:f8:29:0e:e9:0b:7d:54:ec:1a:75:a4:89:ef:8a:89:85:
f1:9c:3d:e4:aa:05:69:59:09:b7:ae:e1:0b:7d:c1:bf:f8:44:
8c:47:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:10:57 2025 by rpki-client