Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa
File: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (raw, json)
Hash identifier: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=
Subject key identifier: B4:85:7D:45:64:05:38:F4:88:11:B9:B2:96:7B:63:F9:DC:3D:15:59
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 3030
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa
Signing time: Wed 09 Apr 2025 20:06:35 +0000
ROA not before: Wed 09 Apr 2025 20:06:35 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 151492
IP address blocks: 103.186.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12336 (0x3030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: Apr 9 20:06:35 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B4857D45640538F48811B9B2967B63F9DC3D1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:2d:0c:0f:76:e2:38:0e:7a:c9:56:35:70:
55:38:14:84:42:93:6d:2d:b7:a5:27:73:70:86:71:
29:8b:36:bc:e0:ab:0a:67:fd:6b:67:b8:73:e8:02:
28:f7:c0:d6:c1:1f:45:70:14:85:5d:1e:9f:f2:44:
de:44:11:a0:8d:17:12:8a:ce:37:ce:ce:10:ab:6a:
5a:17:dd:4c:41:d4:e6:b6:85:27:45:d5:43:30:53:
0f:15:1c:f2:6f:ac:e1:79:dd:ce:af:0a:31:06:d2:
6e:1c:20:3f:35:3b:38:05:c2:54:24:03:70:e5:b7:
e8:38:ed:8a:64:2b:97:b0:47:31:c6:4e:d4:d5:76:
a1:31:14:3a:ca:48:48:d8:5e:1e:74:b1:7e:4f:45:
ce:d2:a4:6d:70:6f:f4:0b:72:42:39:35:8d:db:88:
e7:22:4c:4a:89:02:c7:c9:d7:6c:fe:7b:c5:3d:41:
be:0e:e3:97:18:0c:f0:0f:c1:08:52:c9:37:22:40:
e6:b2:00:75:93:62:78:ed:d3:80:5a:63:d8:52:c7:
c4:e5:af:dc:b8:12:2c:a4:0c:3d:4f:35:6f:5d:1e:
9e:1f:49:97:f5:f7:c5:c3:ea:c2:a4:94:7f:6e:38:
73:87:5f:64:f5:5f:54:ad:59:76:9b:eb:83:77:ab:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:7D:45:64:05:38:F4:88:11:B9:B2:96:7B:63:F9:DC:3D:15:59
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/tIV9RWQFOPSIEbmylntj-dw9FVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:4e:2d:e6:1b:7f:eb:d3:61:d4:e9:9a:8e:b3:f5:36:a3:ea:
67:41:68:8d:03:7a:50:82:ce:c9:4f:91:7a:29:34:29:44:4f:
ed:ea:a2:da:c8:99:f6:0a:30:e1:7f:ed:83:1f:06:ce:0c:66:
69:6a:0f:2b:a4:b5:cd:c3:cf:c9:3b:92:5f:fa:a9:37:00:5f:
96:1b:48:f5:ba:52:7e:0c:74:ad:a9:11:5e:85:6e:36:7b:86:
e4:e0:d8:56:51:bf:65:d5:04:f6:cd:47:63:c7:a7:20:6d:72:
a5:26:41:27:2c:37:57:36:7b:c8:b8:de:a0:35:b5:9e:96:30:
65:9d:6e:09:3c:c7:2f:ef:26:57:aa:d2:67:ca:06:c8:b3:6b:
ad:e9:a2:9d:7a:66:68:54:8d:61:38:08:8c:f2:47:35:bc:fa:
a0:34:f8:cc:83:83:08:1f:e3:11:e2:bc:b1:84:49:96:3e:ff:
6f:b7:22:62:fb:80:95:e7:f1:12:3e:d5:88:a6:69:f2:c3:ab:
e3:dc:9d:8a:16:25:77:11:71:51:47:7f:23:d5:90:c1:45:a9:
e3:07:da:ad:11:78:4e:2d:c4:72:06:44:5c:a8:8c:7d:70:db:
61:f6:fd:34:da:eb:84:8e:b5:27:60:87:aa:3c:8e:a9:22:6d:
27:88:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:41 2025 by rpki-client