Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa
File: QCpxlqVembFTmfeMtuBzBESm-JA.roa (raw, json)
Hash identifier: xcpaUEvMmYAW2SGTqp3FuvaFDPrTL4CzFzU/n/pTTVA=
Subject key identifier: 40:2A:71:96:A5:5E:99:B1:53:99:F7:8C:B6:E0:73:04:44:A6:F8:90
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 14C1
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa
Signing time: Sun 27 Apr 2025 09:29:37 +0000
ROA not before: Sun 27 Apr 2025 09:29:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 152320
IP address blocks: 103.223.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5313 (0x14c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Apr 27 09:29:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=402A7196A55E99B15399F78CB6E0730444A6F890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:27:95:6b:92:25:a7:9e:5a:57:fa:da:b2:
e3:12:cf:86:b6:09:08:8c:65:6b:83:b2:4c:93:be:
fe:ca:26:5d:86:fe:fc:ad:b2:63:a5:ec:10:3d:31:
41:af:18:44:64:73:4e:3b:8e:eb:f8:cb:b7:88:92:
3d:92:9c:eb:b2:da:bd:db:4f:c4:5a:6b:16:90:0d:
bb:49:b9:45:8a:22:49:a9:45:4a:bc:ba:8d:7c:57:
f8:1b:08:53:13:50:b9:d9:8a:08:93:60:6d:a5:f4:
72:af:ac:f1:80:3e:2c:04:3d:be:00:b8:29:84:87:
79:96:42:fe:ab:15:d0:f1:df:6d:ad:5c:4b:d6:60:
ed:c8:6c:f9:42:f2:80:9e:97:ee:a5:7d:1d:93:51:
46:56:53:39:f4:47:7a:8a:4d:0c:bd:ee:9a:47:0b:
3b:45:12:de:1c:ea:98:bd:72:6e:56:38:a0:3c:c4:
c8:88:01:c7:bf:62:e8:f8:d8:d1:6f:bb:65:41:0d:
58:6c:c7:71:08:3b:63:cf:4a:98:4c:02:94:47:60:
e8:82:2f:d8:f9:bc:9a:78:6d:87:42:46:9f:43:71:
78:5e:60:72:53:95:13:d4:f7:8c:9e:6d:3d:fb:70:
93:f4:79:62:79:13:b3:90:9f:68:bb:c8:25:ff:66:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:71:96:A5:5E:99:B1:53:99:F7:8C:B6:E0:73:04:44:A6:F8:90
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/QCpxlqVembFTmfeMtuBzBESm-JA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.223.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ec:0c:24:b1:8e:56:6f:f9:5e:76:54:74:26:61:73:4b:df:
e6:13:e0:9a:83:e1:26:0e:a7:20:45:2d:32:94:15:97:ed:3f:
7d:78:de:c5:de:59:f3:a5:a3:d1:7a:00:42:3d:f4:37:7e:ea:
fa:7c:1c:7d:53:29:25:94:c0:eb:fa:4f:c5:57:11:13:82:90:
81:90:94:1d:11:87:a8:62:db:1b:4e:60:ce:0b:65:3c:93:cf:
74:14:28:bf:f4:91:03:82:f9:05:53:57:65:7f:c9:06:bb:f1:
21:55:6c:26:a4:de:24:4a:40:ef:ef:18:ae:90:51:a6:d6:a1:
75:f9:87:38:30:8f:3e:e1:14:f1:10:50:c4:a4:b7:16:db:83:
aa:73:42:96:9c:e5:8c:ec:6f:1f:9a:30:95:57:90:5f:a7:74:
8b:4d:c2:aa:b5:52:bf:78:db:ff:b0:2f:8c:bf:78:be:ef:61:
3f:09:5a:0f:a5:f6:c4:ee:92:80:7c:5b:94:9d:fa:da:0a:83:
87:36:0f:57:bb:bd:1b:f8:bc:89:2a:a6:b7:aa:6d:1d:78:a4:
19:ee:80:28:a7:f5:34:b9:35:d5:3f:93:a8:38:f0:d1:68:df:
7f:4c:b0:12:1a:88:40:a5:cd:b0:ba:cc:84:b8:e6:90:00:cc:
20:8d:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net