Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa
File: iuNLjW5aNVuPizS31DIcoCGoV2w.roa (raw, json)
Hash identifier: nQzkZCMfDtMP9rCWIskW7i99TB9f3yRw/FKCNkfUaQU=
Subject key identifier: 8A:E3:4B:8D:6E:5A:35:5B:8F:8B:34:B7:D4:32:1C:A0:21:A8:57:6C
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CBA
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa
Signing time: Thu 02 Jan 2025 13:58:23 +0000
ROA not before: Thu 02 Jan 2025 13:58:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 14.103.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7354 (0x1cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8AE34B8D6E5A355B8F8B34B7D4321CA021A8576C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:12:c6:ee:a0:d1:80:b8:f4:09:dd:e0:d7:
4e:36:ef:7b:57:1b:87:40:8b:d2:b3:e2:ce:88:5a:
d5:15:e9:56:52:e5:ef:e7:6f:07:af:f6:5e:8f:3a:
cd:ce:d2:8d:a7:4a:c5:0c:ea:2c:d6:b0:d2:80:32:
59:42:ba:2d:a9:7a:3a:a6:b5:35:b7:27:50:0d:80:
df:05:40:f1:82:79:ff:e6:1a:09:22:50:ef:0f:49:
16:a0:3f:ad:44:dd:11:22:7d:bc:72:a6:d2:b3:8d:
5f:00:d9:a0:68:19:a5:14:51:a3:b0:72:8c:9d:9f:
78:7e:28:23:cb:00:5f:b1:b6:30:e6:7f:cb:90:1e:
9d:3c:9c:39:e1:d6:14:7b:fc:76:c6:67:a3:d6:e1:
02:1c:e7:dc:75:31:a0:41:18:b7:f6:f4:07:ee:b0:
07:ab:6f:14:95:06:a5:cf:de:ab:f4:26:2f:de:f6:
66:08:4d:c4:b4:f8:89:20:cc:de:f5:ec:27:42:3e:
9c:bc:cb:30:c0:de:9b:df:56:68:16:37:c9:63:78:
d1:e7:ce:90:17:fc:da:74:f6:2f:fc:b9:a4:ff:ea:
fb:cd:47:8c:cd:df:82:bd:1e:37:42:eb:44:17:c3:
56:ca:f4:0a:2b:db:42:52:32:f3:cd:31:06:c3:28:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:4B:8D:6E:5A:35:5B:8F:8B:34:B7:D4:32:1C:A0:21:A8:57:6C
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iuNLjW5aNVuPizS31DIcoCGoV2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:e3:04:95:73:9d:ba:c0:5a:3f:20:43:7b:d6:3c:52:52:b8:
7d:1d:ab:1e:32:cc:82:ec:8f:22:59:f4:a8:f6:87:49:5d:78:
de:fd:e2:8c:3d:09:2e:6e:14:f0:d4:ff:e7:df:b0:18:e4:9f:
95:48:49:27:c3:0f:c9:c8:d5:0e:7a:df:21:06:a8:81:56:90:
20:d5:2e:74:4b:05:d5:f7:13:0a:4e:d8:59:c3:8d:a2:6b:aa:
59:ac:47:1d:be:c3:cf:4f:42:e6:a8:d4:72:64:d1:5c:e8:27:
3c:6d:bd:66:5f:6e:8e:d0:13:31:f0:29:2a:fd:08:f6:a7:bb:
a3:1b:fa:7d:13:93:78:09:b1:24:ef:0c:01:5f:66:fe:0c:6a:
95:7e:68:73:69:f4:4d:e5:e5:37:d9:ed:bf:04:67:14:e8:43:
ee:b3:5c:f5:28:91:87:b4:1a:db:1f:ed:39:78:c8:46:3c:aa:
43:33:fd:37:42:c9:57:3e:51:16:9f:0e:72:45:76:4d:20:51:
fa:31:3e:6f:42:74:8f:49:2a:6d:d4:4d:d5:55:24:64:d8:06:
d2:40:68:bc:98:e7:62:e9:7c:66:c8:db:3b:56:28:e9:ca:dd:
aa:8b:07:0e:50:f7:7f:d0:4c:09:a6:7c:2a:fd:05:2b:fe:b0:
3e:6b:80:3f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
MzU4MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhBRTM0QjhENkU1QTM1
NUI4RjhCMzRCN0Q0MzIxQ0EwMjFBODU3NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRsxLG7qDRgLj0Cd3g104273tXG4dAi9Kz4s6IWtUV6VZS5e/n
bwev9l6POs3O0o2nSsUM6izWsNKAMllCui2pejqmtTW3J1ANgN8FQPGCef/mGgki
UO8PSRagP61E3REifbxyptKzjV8A2aBoGaUUUaOwcoydn3h+KCPLAF+xtjDmf8uQ
Hp08nDnh1hR7/HbGZ6PW4QIc59x1MaBBGLf29AfusAerbxSVBqXP3qv0Ji/e9mYI
TcS0+IkgzN717CdCPpy8yzDA3pvfVmgWN8ljeNHnzpAX/Np09i/8uaT/6vvNR4zN
34K9HjdC60QXw1bK9Aor20JSMvPNMQbDKOPlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUiuNLjW5aNVuPizS31DIcoCGoV2wwHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvaXVOTGpXNWFOVnVQ
aXpTMzFESWNvQ0dvVjJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAw5nWDANBgkqhkiG9w0BAQsFAAOCAQEAC+MElXOdusBaPyBDe9Y8UlK4fR2r
HjLMguyPIln0qPaHSV143v3ijD0JLm4U8NT/59+wGOSflUhJJ8MPycjVDnrfIQao
gVaQINUudEsF1fcTCk7YWcONomuqWaxHHb7Dz09C5qjUcmTRXOgnPG29Zl9ujtAT
MfApKv0I9qe7oxv6fROTeAmxJO8MAV9m/gxqlX5oc2n0TeXlN9ntvwRnFOhD7rNc
9SiRh7Qa2x/tOXjIRjyqQzP9N0LJVz5RFp8OckV2TSBR+jE+b0J0j0kqbdRN1VUk
ZNgG0kBovJjnYul8ZsjbO1Yo6crdqosHDlD3f9BMCaZ8Kv0FK/6wPmuAPw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:44 2025 by rpki-client