Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa
File: v0jjhXjyYpH1pI2lj868WtSjRIs.roa (raw, json)
Hash identifier: 0reLJZKF/UrewxaDiofHFzbbX4ifd0i6OgBZi1SftSI=
Subject key identifier: BF:48:E3:85:78:F2:62:91:F5:A4:8D:A5:8F:CE:BC:5A:D4:A3:44:8B
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 42
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa
Signing time: Thu 17 Apr 2025 11:42:31 +0000
ROA not before: Thu 17 Apr 2025 11:42:31 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 134823
IP address blocks: 103.115.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:42:31 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=BF48E38578F26291F5A48DA58FCEBC5AD4A3448B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:5b:19:b7:02:36:67:ca:50:6f:e4:a0:a1:
2d:ac:81:88:cb:70:38:57:db:c9:91:a5:cd:0d:89:
ff:0f:98:9d:87:f0:a0:6c:bb:0b:a7:20:db:ca:85:
9d:df:4e:55:0c:a8:0c:3a:79:e8:81:bf:a4:50:db:
9e:4b:3c:3c:99:64:b8:85:39:65:e9:bd:dc:91:a7:
e4:80:f6:6b:d1:b4:98:d9:fe:68:18:5b:fa:d3:5d:
3b:ec:79:47:84:57:a6:e3:49:de:19:a3:05:4c:38:
c3:8d:88:b9:19:3b:05:2e:fb:8a:24:b1:5e:4a:fb:
c7:76:ba:4d:81:64:fc:b4:bb:f5:1c:b3:fe:cd:32:
c4:25:31:e4:d7:c0:c2:2c:5e:53:f5:91:45:72:4a:
bd:d5:ef:10:bb:d5:09:09:44:43:6d:86:58:d0:0c:
fd:94:9c:68:fd:77:33:4d:eb:7a:28:b3:ba:19:a2:
7c:a1:4b:c6:30:03:3c:f0:1b:5d:fd:d7:ff:41:7a:
c0:5f:83:30:3d:25:f8:cc:f8:91:37:cd:96:de:60:
72:e3:6a:e8:1f:e4:97:4c:c7:84:f0:0a:12:7c:c9:
56:2b:ad:0f:75:07:01:d4:4a:eb:cc:fd:41:3b:6e:
90:79:96:97:fa:70:de:0c:69:75:5b:cc:41:ba:27:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:E3:85:78:F2:62:91:F5:A4:8D:A5:8F:CE:BC:5A:D4:A3:44:8B
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0jjhXjyYpH1pI2lj868WtSjRIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:32:f1:8f:66:0d:8b:23:18:ca:4b:0a:93:80:1e:46:83:e3:
5c:67:6e:81:ca:dd:ad:e4:46:b2:78:01:fb:86:32:29:75:48:
f0:96:d5:1e:74:b2:f6:60:57:57:48:e8:ad:19:18:53:58:f5:
13:a8:54:70:e9:d5:d5:50:fc:ed:b4:12:3b:56:16:2e:b6:3a:
41:08:bc:36:c9:6b:26:4e:b8:d6:57:f4:95:ac:32:2e:49:a3:
58:f1:1d:0e:c0:4c:e2:6b:00:bf:f6:27:5e:de:4a:46:fc:fb:
55:ae:c3:2e:63:a3:5b:11:90:f3:78:10:5c:04:ea:b3:22:1e:
bd:31:e3:f8:ce:f4:39:9e:61:59:31:c0:fd:b0:b1:54:3a:92:
45:03:b8:1b:0d:43:87:ff:1d:42:8c:de:35:59:8b:b9:08:8e:
4a:cb:2f:60:03:67:86:39:81:f6:0f:7f:69:5d:d8:18:25:58:
93:e9:b1:64:52:98:b0:b0:00:b0:53:18:aa:b3:3a:df:e0:2d:
bb:e3:33:f7:91:8b:37:24:0e:e9:d4:b1:f3:61:63:1f:04:43:
9d:6d:3d:a9:6f:09:6a:37:9b:45:cd:24:aa:86:af:06:a7:4a:
0a:8e:ce:65:0a:2b:66:18:c6:05:1f:9b:c7:50:b0:21:15:89:
07:ae:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:53 2025 by rpki-client