Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0tDD6Prv9giOCi_ZdnIq_PgLxw.roa
File: v0tDD6Prv9giOCi_ZdnIq_PgLxw.roa (raw, json)
Hash identifier: KoEC5QM9HOxTx1q8MN53cAfKL7otIt4XtHMC7rvR260=
Subject key identifier: BF:4B:43:0F:A3:EB:BF:D8:22:38:28:BF:65:D9:C8:AB:F3:E0:2F:1C
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 017E
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0tDD6Prv9giOCi_ZdnIq_PgLxw.roa
Signing time: Tue 10 Jun 2025 10:09:21 +0000
ROA not before: Tue 10 Jun 2025 10:09:21 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 136897
IP address blocks: 103.114.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Jun 10 10:09:21 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=BF4B430FA3EBBFD8223828BF65D9C8ABF3E02F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:34:fe:2a:38:4c:9a:99:14:1f:33:a5:45:
e2:fc:6e:6b:81:04:44:82:6a:ed:9b:5d:5c:4b:ae:
8b:4a:f4:01:e0:ae:ac:52:05:4a:b3:1d:44:d8:70:
60:be:6f:80:09:9c:d3:1c:19:5c:4b:c4:51:0c:6b:
5a:96:5a:af:b2:59:a8:b2:cf:7a:d5:7e:63:bb:bd:
f6:e8:80:a7:d0:4e:99:aa:8b:b3:e8:3f:1f:6b:c4:
28:96:b8:4a:be:95:e5:04:82:15:b1:10:62:e7:09:
ae:83:67:d5:08:23:c6:2f:7b:f9:76:52:f6:d3:03:
ce:6d:76:12:51:ba:a8:2d:6d:36:e9:0e:e8:6d:d9:
fe:01:0d:a8:dc:c9:6a:22:5d:8b:84:8f:c7:1b:5e:
ac:de:04:35:f5:87:b5:9e:8c:10:d4:2d:60:7f:5b:
b4:5b:aa:68:bf:68:18:2a:d6:fa:e9:9e:4a:58:f3:
90:f2:43:e9:28:ee:3f:b6:46:59:84:89:58:b9:ff:
61:67:60:1f:db:96:0c:32:ec:bc:53:ca:de:34:91:
35:ad:a1:fd:c0:ba:7b:c1:bc:19:6a:68:6c:40:9a:
63:3a:6f:e1:b2:2d:d5:21:c8:91:8d:6c:91:87:2d:
d7:86:20:97:ff:2c:1a:1e:e3:cd:1e:76:45:90:7b:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:43:0F:A3:EB:BF:D8:22:38:28:BF:65:D9:C8:AB:F3:E0:2F:1C
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/v0tDD6Prv9giOCi_ZdnIq_PgLxw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.72.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:44:b4:c4:cd:87:7a:17:23:c3:74:b1:a0:1e:05:06:f9:de:
8a:b0:93:7c:8d:08:6d:ce:bd:6d:06:35:ad:18:5a:f6:63:a4:
06:0d:ee:b9:cd:b9:fe:8b:af:9a:d7:5c:a1:25:a5:9f:09:c7:
32:d4:e2:23:24:60:e3:5d:08:0d:ad:59:79:6d:05:f8:b8:06:
29:53:56:af:ab:37:5f:df:dd:c9:d4:53:94:15:fe:b4:8e:f0:
f9:ce:a1:d6:46:9a:81:6e:03:4c:3c:0f:95:70:7c:d8:26:4c:
9c:81:24:90:d5:cd:24:a0:b8:f8:a0:0d:22:9f:d6:af:19:ca:
55:f8:54:70:40:46:75:96:ec:18:42:d3:04:a7:34:ef:69:ea:
74:dc:bb:05:c2:f2:9e:7e:e6:f0:d6:91:a4:dc:63:53:22:48:
8b:b1:48:33:35:10:36:e9:52:61:c1:e5:a8:d4:65:f2:98:f6:
b7:35:03:99:9a:f3:b0:2c:9a:d2:bf:3d:de:fe:c2:6e:38:b2:
9d:2a:84:51:97:25:94:c5:45:23:1b:a7:92:12:63:31:f9:f9:
8e:95:f8:2c:5e:f7:c2:da:e5:ae:0d:76:5b:88:e6:5c:4a:a0:
55:b1:51:ec:89:ed:99:b1:c3:c2:ca:9d:af:ec:b1:4d:fa:5b:
dc:00:45:6b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzlF
RTg1MkZFMTM4Q0RFREM1QjQyRDExQTM0Mjk1RDEwOUFENDkyNTAeFw0yNTA2MTAx
MDA5MjFaFw0yNjA0MTUwOTA4MzBaMDMxMTAvBgNVBAMTKEJGNEI0MzBGQTNFQkJG
RDgyMjM4MjhCRjY1RDlDOEFCRjNFMDJGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtHDT+KjhMmpkUHzOlReL8bmuBBESCau2bXVxLrotK9AHgrqxS
BUqzHUTYcGC+b4AJnNMcGVxLxFEMa1qWWq+yWaiyz3rVfmO7vfbogKfQTpmqi7Po
Px9rxCiWuEq+leUEghWxEGLnCa6DZ9UII8Yve/l2UvbTA85tdhJRuqgtbTbpDuht
2f4BDajcyWoiXYuEj8cbXqzeBDX1h7WejBDULWB/W7Rbqmi/aBgq1vrpnkpY85Dy
Q+ko7j+2RlmEiVi5/2FnYB/blgwy7LxTyt40kTWtof3AunvBvBlqaGxAmmM6b+Gy
LdUhyJGNbJGHLdeGIJf/LBoe480edkWQe5oxAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUv0tDD6Prv9giOCi/ZdnIq/PgLxwwHwYDVR0jBBgwFoAUOe6FL+E4ze3FtC0R
o0KV0QmtSSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcx
Ni9PZTZGTC1FNHplM0Z0QzBSbzBLVjBRbXRTU1UuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MTYvdjB0REQ2UHJ2OWdp
T0NpX1pkbklxX1BnTHh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdySDANBgkqhkiG9w0BAQsFAAOCAQEAwES0xM2Hehcjw3SxoB4FBvneirCT
fI0Ibc69bQY1rRha9mOkBg3uuc25/ouvmtdcoSWlnwnHMtTiIyRg410IDa1ZeW0F
+LgGKVNWr6s3X9/dydRTlBX+tI7w+c6h1kaagW4DTDwPlXB82CZMnIEkkNXNJKC4
+KANIp/WrxnKVfhUcEBGdZbsGELTBKc072nqdNy7BcLynn7m8NaRpNxjUyJIi7FI
MzUQNulSYcHlqNRl8pj2tzUDmZrzsCya0r893v7CbjiynSqEUZcllMVFIxunkhJj
Mfn5jpX4LF73wtrlrg12W4jmXEqgVbFR7IntmbHDwsqdr+yxTfpb3ABFaw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:36:31 2025 by rpki-client