Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa
File: kF2ol2wr5IyxXc6XU79wqFIBNJc.roa (raw, json)
Hash identifier: 8bF2zND8MZXNlXZwDWPi72GKo3HkOIXInlagf6o0sFg=
Subject key identifier: 90:5D:A8:97:6C:2B:E4:8C:B1:5D:CE:97:53:BF:70:A8:52:01:34:97
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 234D
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa
Signing time: Tue 08 Apr 2025 03:16:47 +0000
ROA not before: Tue 08 Apr 2025 03:16:47 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23724
IP address blocks: 103.202.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9037 (0x234d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Apr 8 03:16:47 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=905DA8976C2BE48CB15DCE9753BF70A852013497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:f7:ad:40:0b:05:87:e1:cd:5d:94:10:4d:
aa:6b:ee:6b:b5:5f:79:af:16:6c:ca:99:81:f2:ff:
33:7a:b5:09:55:fd:b5:1d:a9:dd:09:e0:97:65:0a:
7b:38:12:ff:a3:ab:b5:7d:6f:d1:c6:31:80:ec:fd:
02:5e:60:00:7d:05:67:8f:67:ab:89:be:c4:07:0b:
da:7c:ca:6f:8e:d9:0b:ec:89:e8:1c:9a:3a:d9:b9:
a4:70:60:43:3b:f8:eb:c6:c1:d9:dc:ee:8a:86:dc:
65:12:93:88:d6:b6:df:3c:e5:de:a7:a9:d8:a6:47:
e7:03:b4:e8:ed:a1:c9:c4:9d:8d:83:9f:10:06:01:
b4:95:9b:3c:1b:f3:3d:a9:4f:05:3a:0e:e9:ca:fe:
7a:37:ce:b9:9b:01:63:74:4d:1e:45:19:24:31:3e:
44:78:13:90:4f:08:6f:3e:ec:d4:8f:5d:62:86:bc:
9c:1c:7b:09:0b:ac:fa:99:85:8a:00:a9:1b:7a:0b:
8c:4f:f9:83:da:bb:04:11:08:45:ba:88:f9:26:dd:
b6:36:1e:35:c8:2d:30:fa:cf:20:97:ed:88:5e:5a:
e5:c7:5b:24:44:72:e7:73:37:f9:5e:e3:59:87:40:
fb:e1:0f:09:33:d2:b9:18:9c:dc:9c:ca:25:f9:03:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:A8:97:6C:2B:E4:8C:B1:5D:CE:97:53:BF:70:A8:52:01:34:97
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/kF2ol2wr5IyxXc6XU79wqFIBNJc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.202.116.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7c:ec:1b:33:63:30:96:8c:ea:52:17:ec:62:da:ef:7b:bf:
4a:80:cf:34:37:70:ba:b1:13:11:34:f1:df:33:88:04:46:5e:
28:a7:e3:5f:d8:df:20:00:01:fa:d3:3a:70:a9:f2:8a:e6:7a:
ff:67:41:73:2d:49:b8:9a:fe:08:61:cf:35:54:33:e2:3f:6a:
85:10:f2:39:19:d7:e5:5c:b3:08:5a:4c:57:c8:08:a8:26:f5:
7c:47:f1:b4:21:e6:a5:1c:df:20:90:d5:cf:cf:fe:e1:26:5e:
94:bb:b9:92:11:16:3a:3c:47:ff:ed:2c:ca:33:63:b1:5f:f0:
58:87:11:08:62:56:5c:6b:ed:56:68:69:9e:da:99:a2:e6:57:
69:96:dd:b9:ff:ab:88:ac:45:77:e3:fd:79:7b:b9:99:93:80:
43:f7:8e:d3:bd:c6:bc:d9:e7:dc:97:a1:d4:aa:46:54:24:a0:
76:99:1a:18:65:96:b3:a9:1e:f0:7a:1c:8c:09:cc:89:de:0c:
4c:b8:d5:af:d5:f8:60:32:52:fa:d9:5b:ea:73:1f:0b:67:b1:
3d:7a:ee:50:ad:e8:8e:fe:d1:bb:01:d4:b6:e7:94:3c:2c:63:
b4:57:60:ad:57:01:8e:63:57:16:7f:9d:64:22:33:3a:c1:92:
07:01:79:15
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICI00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB
NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTA0MDgw
MzE2NDdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDkwNURBODk3NkMyQkU0
OENCMTVEQ0U5NzUzQkY3MEE4NTIwMTM0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW6vetQAsFh+HNXZQQTapr7mu1X3mvFmzKmYHy/zN6tQlV/bUd
qd0J4JdlCns4Ev+jq7V9b9HGMYDs/QJeYAB9BWePZ6uJvsQHC9p8ym+O2Qvsiegc
mjrZuaRwYEM7+OvGwdnc7oqG3GUSk4jWtt885d6nqdimR+cDtOjtocnEnY2DnxAG
AbSVmzwb8z2pTwU6DunK/no3zrmbAWN0TR5FGSQxPkR4E5BPCG8+7NSPXWKGvJwc
ewkLrPqZhYoAqRt6C4xP+YPauwQRCEW6iPkm3bY2HjXILTD6zyCX7YheWuXHWyRE
cudzN/le41mHQPvhDwkz0rkYnNycyiX5A//hAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUkF2ol2wr5IyxXc6XU79wqFIBNJcwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa
1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQva0Yyb2wyd3I1SXl4
WGM2WFU3OXdxRklCTkpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfKdDANBgkqhkiG9w0BAQsFAAOCAQEAaXzsGzNjMJaM6lIX7GLa73u/SoDP
NDdwurETETTx3zOIBEZeKKfjX9jfIAAB+tM6cKnyiuZ6/2dBcy1JuJr+CGHPNVQz
4j9qhRDyORnX5VyzCFpMV8gIqCb1fEfxtCHmpRzfIJDVz8/+4SZelLu5khEWOjxH
/+0syjNjsV/wWIcRCGJWXGvtVmhpntqZouZXaZbduf+riKxFd+P9eXu5mZOAQ/eO
073GvNnn3Jeh1KpGVCSgdpkaGGWWs6ke8HocjAnMid4MTLjVr9X4YDJS+tlb6nMf
C2exPXruUK3ojv7RuwHUtueUPCxjtFdgrVcBjmNXFn+dZCIzOsGSBwF5FQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:30 2025 by rpki-client on console.sobornost.net