Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa
File: xKb4GOTWZlcQfVhpy5F08sPz1lY.roa (raw, json)
Hash identifier: 5ftvvZWcbyxGC0a3UsUY30pdA2bZL7Jxc/xloszRW+Y=
Subject key identifier: C4:A6:F8:18:E4:D6:66:57:10:7D:58:69:CB:91:74:F2:C3:F3:D6:56
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 1F
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa
Signing time: Thu 17 Apr 2025 11:31:18 +0000
ROA not before: Thu 17 Apr 2025 11:31:18 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.132.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:18 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=C4A6F818E4D66657107D5869CB9174F2C3F3D656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:86:7c:bb:2f:f9:3e:28:10:d7:a4:97:2e:
8d:da:be:fd:de:b8:40:b7:95:ed:6d:95:7a:db:5d:
99:ac:70:83:09:c3:33:a4:e3:01:f2:13:b9:7c:a7:
ab:e5:fa:bc:e3:d6:98:91:61:8e:83:5f:8e:ef:a9:
2c:c7:cd:64:c8:37:ee:d6:31:e7:67:a0:33:6e:06:
6d:58:ba:9f:7d:26:11:56:8d:e5:b3:82:0a:47:b0:
4f:2c:96:82:3f:93:42:66:91:0d:c2:0c:64:4b:40:
ef:5f:0e:d7:36:05:b5:3c:be:7e:87:d3:e2:a7:12:
bb:2c:9f:05:09:94:ef:46:27:84:4a:af:40:bb:fc:
2d:83:cc:66:e9:49:43:d7:2d:14:9e:14:d5:a4:42:
bd:38:ab:58:71:a1:8f:2a:61:c3:ea:88:49:14:9b:
d8:82:14:2f:92:c1:2a:5b:f3:d3:d4:37:2c:79:0d:
f7:53:fd:a2:69:7a:94:10:c8:36:04:5c:2b:cc:be:
51:f1:9b:00:90:7a:a2:cf:c8:6c:b1:97:01:88:72:
ee:01:83:00:5f:15:a6:be:e2:cc:d7:9a:a5:7c:b3:
85:47:41:67:f6:d0:07:12:fa:4e:ff:b3:be:69:eb:
cc:5d:0f:77:cb:57:64:8a:f2:8a:06:74:ff:c5:4e:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:F8:18:E4:D6:66:57:10:7D:58:69:CB:91:74:F2:C3:F3:D6:56
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/xKb4GOTWZlcQfVhpy5F08sPz1lY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.164.0/22
Signature Algorithm: sha256WithRSAEncryption
02:5e:36:d7:08:c1:7d:c2:3d:bf:22:fb:0a:43:a9:b6:fb:0f:
8d:bd:8d:b2:02:61:aa:94:3a:ab:b6:54:45:49:85:4e:e7:a0:
ab:f5:74:c4:1d:b0:cb:85:85:fd:85:e3:3e:7d:69:50:2d:01:
47:a1:4d:db:7a:ba:23:0f:5b:95:09:a4:30:6a:19:aa:8b:3b:
d4:0c:82:06:fc:03:38:ae:da:89:dc:8e:a9:77:50:19:ad:68:
04:4d:c7:3d:5f:81:c8:6c:52:c6:52:db:1a:30:ce:c9:b6:04:
0a:72:b6:75:cc:2b:a3:70:1d:1e:56:67:d9:24:38:5a:15:ba:
c3:b3:67:4c:86:11:e5:71:93:98:bb:9a:de:a3:6b:d5:9c:4c:
b2:84:58:73:d2:5f:db:35:c7:78:93:9f:bd:ba:8d:4e:d4:4d:
a1:02:1d:2e:3f:d3:e3:7f:f8:76:c7:4d:b4:1b:ad:26:cb:8b:
b8:da:a0:69:bd:f1:16:37:ac:14:cf:5d:11:78:72:58:06:e3:
78:24:57:cf:74:1a:37:ba:42:b1:8a:0e:e5:b3:65:07:a6:c6:
11:6d:3d:30:ce:56:2c:a5:b3:35:dd:63:62:01:21:ab:54:18:
bf:bf:ae:83:e1:98:d9:66:94:89:d8:a6:f1:e0:67:28:08:e2:
8d:fb:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:41 2025 by rpki-client