Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/384/y9DLCNSIuLkBZIkz41fZp7cJGZU.roa
File: y9DLCNSIuLkBZIkz41fZp7cJGZU.roa (raw, json)
Hash identifier: Cp0py42ioGyYnkGJjzIyPolL5ICxx82QyuevAMu3xEM=
Subject key identifier: CB:D0:CB:08:D4:88:B8:B9:01:64:89:33:E3:57:D9:A7:B7:09:19:95
Certificate issuer: /CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
Certificate serial: 2D63
Authority key identifier: 30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/y9DLCNSIuLkBZIkz41fZp7cJGZU.roa
Signing time: Thu 19 Jun 2025 01:51:38 +0000
ROA not before: Thu 19 Jun 2025 01:51:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 174
IP address blocks: 103.248.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11619 (0x2d63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30959C0FE88B7D31BD29C12C17FE4AF495DC6FC8
Validity
Not Before: Jun 19 01:51:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=CBD0CB08D488B8B901648933E357D9A7B7091995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:27:1d:3a:3c:e3:72:7b:1a:0c:89:0e:2d:3e:
a5:9a:a6:d8:7d:2d:be:49:65:80:7b:d5:fa:14:09:
ed:3d:33:4a:14:ab:8f:0b:2b:7c:9e:b8:7b:6f:62:
f4:b4:de:49:5e:71:59:4a:4b:d6:19:0e:dc:39:fd:
7f:3c:44:c7:fa:cf:ec:d8:91:03:32:6d:38:f6:b3:
a3:1b:cb:a9:20:ba:02:90:9a:c6:09:7d:ac:aa:18:
12:89:ba:9a:53:ec:9e:92:29:e8:07:49:08:5d:dc:
73:f7:0b:3a:b2:12:17:52:90:f8:c1:43:d7:17:59:
13:3c:ea:98:13:a8:57:cb:77:d4:00:bd:20:38:5a:
44:94:7b:8c:22:33:1a:c7:b5:d5:6c:69:98:68:a3:
ba:4d:28:e7:23:b8:4f:7a:ec:aa:ea:0e:bd:37:db:
8a:24:08:4f:4a:f4:38:76:8d:14:09:a1:93:37:65:
1c:f4:73:4d:58:28:ba:a7:a0:e1:66:e0:2b:a3:e2:
4d:a6:4e:fe:1f:af:d3:a4:c0:bd:ec:1b:5a:18:74:
6c:b4:85:8f:7d:59:71:b5:8c:f9:a8:70:4d:fe:ef:
93:d2:a2:b9:be:b8:34:9f:cf:9e:6c:92:41:df:01:
96:a8:d6:1c:79:61:0d:d9:49:4e:3a:14:54:1e:97:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:CB:08:D4:88:B8:B9:01:64:89:33:E3:57:D9:A7:B7:09:19:95
X509v3 Authority Key Identifier:
keyid:30:95:9C:0F:E8:8B:7D:31:BD:29:C1:2C:17:FE:4A:F4:95:DC:6F:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/MJWcD-iLfTG9KcEsF_5K9JXcb8g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJWcD-iLfTG9KcEsF_5K9JXcb8g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/384/y9DLCNSIuLkBZIkz41fZp7cJGZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.64.0/22
Signature Algorithm: sha256WithRSAEncryption
01:ff:e8:24:8a:3b:54:0a:02:8e:d8:d5:86:87:12:57:b0:fe:
66:c2:d4:4d:b2:c1:4c:f3:84:94:88:9e:0c:a4:98:95:33:81:
63:d7:c0:86:bc:26:03:24:d2:08:48:62:4d:e5:54:93:1c:48:
fb:3f:34:dc:d4:81:37:2b:39:2a:10:31:7a:16:d1:33:31:1a:
85:42:1c:59:c4:98:d8:ac:f1:bf:db:4d:c0:0c:a7:d5:86:94:
3a:39:a8:46:c9:0c:9f:0d:a6:38:d0:aa:a6:b7:65:ec:aa:e0:
45:c0:19:94:ff:e2:22:87:b3:02:32:93:b3:de:18:88:8a:50:
60:ae:34:bf:f7:b0:9e:b2:a8:9d:b9:44:33:ca:c4:b5:42:52:
35:2e:e1:d7:73:86:65:ea:77:1c:1e:06:69:9a:16:54:9b:3b:
22:e8:63:5b:69:a9:ab:42:c4:b4:a7:5d:64:5f:a1:33:1b:fd:
b9:87:74:06:0c:72:37:11:c7:a7:5e:9f:1f:b2:ad:fa:39:6e:
95:3d:3c:01:5b:36:46:d3:05:a7:e1:a9:4d:69:ac:f6:69:5c:
c1:6d:99:3f:a8:37:95:f2:18:bc:6c:45:e9:05:4a:37:f6:3b:
6b:45:ed:ef:44:81:7d:41:c5:44:e1:41:80:57:f5:81:fd:45:
1e:ce:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:09:11 2025 by rpki-client