Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa
File: GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa (raw, json)
Hash identifier: 3qXm3+lk5XLaY3V7FcSpIrb2+VzRfoseYvCbETIDo5E=
Subject key identifier: 18:22:1D:C6:A9:BE:59:CB:07:3A:3E:BF:60:55:18:46:60:D1:6D:9B
Certificate issuer: /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Certificate serial: 1673
Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa
Signing time: Fri 17 Jan 2025 01:30:03 +0000
ROA not before: Fri 17 Jan 2025 01:30:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55996
IP address blocks: 103.40.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5747 (0x1673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Validity
Not Before: Jan 17 01:30:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=18221DC6A9BE59CB073A3EBF6055184660D16D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:9a:cd:25:d5:ef:2f:49:3b:be:4f:f1:c6:
9a:f4:ff:be:00:ef:49:93:40:a3:e9:db:f5:d2:13:
cc:f9:a9:9d:d2:4c:bd:61:f8:ed:bb:31:eb:45:b8:
9b:e4:7e:db:be:86:7a:e7:39:ff:16:30:aa:0b:d9:
0f:96:d7:06:da:92:0b:6b:ea:ac:ea:11:ad:02:13:
35:5c:40:83:db:83:fc:4f:25:9a:30:8d:8d:a2:73:
45:c1:f9:12:4b:1d:32:dc:c9:4b:47:fc:59:40:83:
d3:c6:cf:58:4a:f4:da:af:9b:c6:bd:6d:62:17:dd:
12:2d:f5:f8:f7:a9:36:c9:b3:64:79:12:0f:e8:b5:
cc:ae:17:5a:2a:fe:98:04:3c:95:7c:fb:93:b3:b0:
77:f8:f9:13:87:2a:2b:61:c1:c4:98:64:a0:4a:1d:
ff:d6:c6:1f:bf:3b:6d:81:49:4d:74:83:74:fa:39:
d4:fa:37:50:03:1d:10:0a:19:e2:94:92:1b:ac:d0:
db:af:a1:92:0d:55:67:00:09:3c:4a:22:6d:0f:4a:
44:53:50:e5:3d:47:88:d0:66:68:a3:de:2d:b3:2d:
a4:80:2b:4e:72:06:cb:c7:62:90:9a:ad:e1:e6:35:
16:3b:64:ca:37:29:c9:a2:65:8c:19:48:29:4c:ce:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:1D:C6:A9:BE:59:CB:07:3A:3E:BF:60:55:18:46:60:D1:6D:9B
X509v3 Authority Key Identifier:
keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/GCIdxqm-WcsHOj6_YFUYRmDRbZs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.174.0/23
Signature Algorithm: sha256WithRSAEncryption
80:b3:4a:4b:88:03:ad:ac:85:92:eb:28:ab:f5:3a:c8:49:e4:
38:4b:74:9c:53:15:e5:88:c2:1f:cd:d4:e7:a9:cf:4c:a2:d7:
44:7b:af:5e:e8:26:1e:d2:97:ec:76:f4:85:6a:77:4f:43:69:
bf:84:a1:4a:c3:69:50:1a:8f:1d:44:ee:ba:e3:38:53:50:67:
da:70:0c:fb:58:f7:37:f1:45:84:83:d1:57:49:3a:75:2c:51:
c0:5c:4f:ec:13:f9:3d:58:96:54:95:8b:d5:7e:55:18:16:3f:
20:19:d8:3f:31:1b:e0:15:70:09:ee:c5:ff:6a:77:05:fa:5a:
8d:fb:ce:94:2e:f2:da:09:38:ea:c2:6a:ce:a0:b7:14:7d:19:
85:45:26:87:8f:dc:b5:b6:1f:7d:3c:b6:f7:95:ce:8a:a9:15:
44:9b:6d:0d:75:17:35:c8:dc:fd:20:4a:79:b4:64:97:9f:6f:
9d:3a:16:c5:3d:76:af:50:b9:7f:1c:c5:1a:3a:c6:47:fa:0e:
7e:7a:21:87:10:50:23:42:89:22:dd:bf:59:d3:1c:36:f9:1b:
94:12:6e:58:34:e4:fc:85:9e:d0:4f:3f:1d:ea:82:90:45:1c:
4e:22:69:fe:7e:85:c4:ba:90:61:38:40:75:a5:c2:8f:ee:20:
02:61:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:53:24 2025 by rpki-client