Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/iDuiFAfKdum9SG4pbIZi7O--ExU.roa
File: iDuiFAfKdum9SG4pbIZi7O--ExU.roa (raw, json)
Hash identifier: 6ctC2ipz87ciT2eSqhURKjQ5FtnmZZt0tiyLU4OsfwM=
Subject key identifier: 88:3B:A2:14:07:CA:76:E9:BD:48:6E:29:6C:86:62:EC:EF:BE:13:15
Certificate issuer: /CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Certificate serial: 0A10
Authority key identifier: 5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/iDuiFAfKdum9SG4pbIZi7O--ExU.roa
Signing time: Wed 20 Sep 2023 06:51:18 +0000
ROA not before: Wed 20 Sep 2023 06:51:18 +0000
ROA not after: Sat 06 Jan 2024 08:35:17 +0000
asID: 151492
IP address blocks: 103.186.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Validity
Not Before: Sep 20 06:51:18 2023 GMT
Not After : Jan 6 08:35:17 2024 GMT
Subject: CN=883BA21407CA76E9BD486E296C8662ECEFBE1315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:eb:fa:3c:51:2d:dd:d9:b1:28:13:b9:a9:
02:1e:85:7b:0f:1e:c1:b3:fb:2d:41:2c:95:0e:ed:
84:07:82:25:ef:f9:00:ff:28:f6:e0:3f:b9:12:04:
a1:44:8b:66:d1:d1:6f:dc:b9:11:f2:4d:d9:42:78:
0a:db:22:49:74:71:71:95:8b:5f:b0:59:cd:c2:eb:
69:7c:0d:5b:9e:45:b8:07:48:b4:9e:05:80:9b:37:
c4:d8:51:12:62:bc:92:87:96:e1:df:8e:f8:76:6d:
dd:9e:79:9d:db:09:3c:d2:3a:88:17:12:43:f3:bc:
ee:15:d1:1e:c6:8c:89:db:a7:c1:c9:14:38:d1:69:
1b:1f:ef:9c:b3:1d:b2:d5:27:fd:1c:c5:72:d6:a6:
a7:ee:90:cc:3b:8b:1f:4e:62:bf:91:63:95:c6:8a:
1f:6b:e2:0e:ca:32:be:bb:d0:e9:f6:c8:7c:62:9e:
87:d6:cc:00:ad:aa:fe:c0:f3:63:cc:9d:f7:8b:f1:
79:21:17:79:43:b8:2e:21:c1:1d:33:ef:4d:a4:6c:
4a:3e:d4:21:67:bb:a3:62:b9:a6:14:44:b7:cb:fe:
46:3b:f1:5b:59:78:63:92:b6:0f:7c:81:5b:99:25:
76:e1:95:e7:55:8d:28:25:68:b2:f5:3c:1f:25:19:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:A2:14:07:CA:76:E9:BD:48:6E:29:6C:86:62:EC:EF:BE:13:15
X509v3 Authority Key Identifier:
keyid:5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/iDuiFAfKdum9SG4pbIZi7O--ExU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:04:bd:de:27:c2:ff:1d:bb:7e:17:bb:43:03:28:4e:3f:88:
88:68:2c:6c:17:e8:e7:09:2e:21:a4:cb:4b:ab:5b:47:4c:0d:
c1:f3:d5:2d:5a:90:f9:b2:5a:03:51:67:c7:f5:67:59:70:d3:
23:f6:8e:2a:2c:fa:d9:ed:80:bc:c1:7b:a4:aa:b8:19:81:5e:
49:aa:f6:e3:49:45:8f:d0:20:7b:07:01:78:1c:ed:38:bb:63:
9f:8f:51:7b:f4:e3:d1:2c:58:d0:86:33:fd:62:1e:f6:78:c4:
d4:fb:b6:c8:8d:38:c7:b5:36:38:f7:74:92:57:e9:54:4e:5c:
99:94:15:9e:47:d3:fd:93:06:23:c3:4d:32:91:ed:f8:52:7d:
47:b6:e9:5a:c4:55:83:b9:6c:ba:71:f4:78:91:1b:3f:59:61:
c9:b0:c8:37:af:e9:ff:38:23:ec:6f:39:ab:61:bf:67:62:ab:
65:28:20:93:ec:bf:55:37:23:8b:fd:86:de:35:83:7d:ef:bf:
7a:91:2a:b7:3a:5b:99:8d:62:dc:2a:75:2e:4e:10:46:83:7a:
17:be:e2:e9:42:31:d3:06:73:af:c9:50:30:73:fa:ad:11:78:
ba:e2:95:d5:46:f7:0e:3e:79:cd:42:86:59:ae:db:32:c6:40:
f6:85:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:56 2025 by rpki-client