Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa
File: wLav8diVujIwKx1aw07gOQsWsL4.roa (raw, json)
Hash identifier: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=
Subject key identifier: C0:B6:AF:F1:D8:95:BA:32:30:2B:1D:5A:C3:4E:E0:39:0B:16:B0:BE
Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE
Certificate serial: 1DF9
Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa
Signing time: Mon 21 Apr 2025 07:54:57 +0000
ROA not before: Mon 21 Apr 2025 07:54:57 +0000
ROA not after: Thu 09 Apr 2026 06:41:08 +0000
asID: 132168
IP address blocks: 103.90.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7673 (0x1df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE
Validity
Not Before: Apr 21 07:54:57 2025 GMT
Not After : Apr 9 06:41:08 2026 GMT
Subject: CN=C0B6AFF1D895BA32302B1D5AC34EE0390B16B0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0f:9d:1f:0d:14:bf:fe:ff:c3:82:ec:9e:27:
6d:fb:59:a9:04:14:f8:13:5d:5e:92:08:b0:bc:9c:
d7:03:90:dd:1f:65:64:08:ac:47:57:6d:c7:04:5a:
a9:a8:3a:a6:06:f7:c7:55:df:d6:69:54:13:28:71:
51:19:1b:e0:48:d4:72:62:4c:61:2f:af:29:f7:3d:
66:11:2e:63:8d:8e:ae:23:2c:30:40:1f:7b:8e:6a:
f8:98:8e:33:20:19:42:b4:3c:3b:1f:3c:28:9d:83:
a7:f9:bc:de:9e:65:10:f9:82:5c:a2:ce:54:cc:50:
1b:54:a3:32:a3:c6:36:4e:3f:c0:2a:c6:a4:8d:9e:
ed:00:32:05:a9:d3:56:72:a0:33:6c:c8:56:8e:68:
b8:5c:cf:7f:23:c1:6d:cb:d9:73:a3:ed:97:82:80:
f1:8b:72:7d:53:bd:b5:e4:28:5d:75:88:b4:ac:02:
58:f3:5e:fc:4f:b5:c8:de:3f:24:bd:0f:eb:c8:ce:
03:31:1b:76:7e:db:3c:a3:5c:64:c6:64:ce:a7:2e:
37:d9:c5:b4:b3:cb:e9:b1:b4:93:b4:50:cf:9a:29:
60:93:44:9e:a8:dd:2b:89:74:65:50:06:94:fc:d5:
64:24:fa:ff:c8:15:60:02:8c:3a:35:7e:ce:55:85:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:AF:F1:D8:95:BA:32:30:2B:1D:5A:C3:4E:E0:39:0B:16:B0:BE
X509v3 Authority Key Identifier:
keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wLav8diVujIwKx1aw07gOQsWsL4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.56.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:87:97:40:2f:36:00:96:c4:e0:80:af:bb:21:20:41:e1:51:
d8:1a:10:61:39:c0:a5:ec:a3:3e:d3:93:3c:90:c1:be:6b:c0:
fd:15:4c:b1:2d:c4:c1:ee:30:99:5a:d5:54:70:d4:3c:4e:d0:
45:94:2c:7d:7e:b2:74:d4:5d:86:bd:64:eb:81:6c:65:8f:74:
41:31:3e:a1:67:ad:5c:6e:6c:45:0c:d7:c1:0d:c1:c3:ac:8e:
76:7f:e9:7d:14:af:8c:43:25:24:e3:11:46:ec:f4:9a:5a:fe:
20:b6:84:18:fb:08:27:bd:c6:a4:c9:d3:e3:b1:15:07:51:9d:
bf:30:0f:00:84:6c:15:fb:17:07:77:3b:51:94:fa:94:df:f4:
63:7a:92:a7:33:cb:ea:ea:b3:b9:45:33:ca:04:cf:e5:8f:98:
2b:e8:66:aa:49:8e:4e:e7:d6:97:4f:71:b3:a0:b1:18:05:c9:
79:da:2e:95:cd:63:a6:98:2a:34:8f:09:53:81:bd:1b:e0:f6:
08:da:60:8e:b8:97:9b:22:44:15:43:6e:a1:d1:ad:ad:7a:40:
ca:01:36:7b:b2:af:c9:9d:a2:5c:64:24:73:12:73:7e:82:08:
7c:7f:9b:8a:f1:75:90:c8:14:1d:c0:07:54:d7:0f:02:a4:49:
2d:6b:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:31 2025 by rpki-client on console.sobornost.net