Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa
File: Y9YxvW3iT58rtGc6ivfvJgmka48.roa (raw, json)
Hash identifier: Eh3qcOOmxut46QWkOjUJrfVq1p60qw7crgGaN5mLY6I=
Subject key identifier: 63:D6:31:BD:6D:E2:4F:9F:2B:B4:67:3A:8A:F7:EF:26:09:A4:6B:8F
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 14C3
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa
Signing time: Sun 27 Apr 2025 09:29:38 +0000
ROA not before: Sun 27 Apr 2025 09:29:38 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 152320
IP address blocks: 103.223.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5315 (0x14c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Apr 27 09:29:38 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=63D631BD6DE24F9F2BB4673A8AF7EF2609A46B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:ed:5d:ec:67:02:7f:63:cd:6d:72:a6:43:
fb:90:60:39:57:e6:13:a1:9c:dd:01:45:87:32:14:
7b:c3:13:8d:24:5e:f4:ad:6a:63:dd:fe:2b:ee:be:
df:66:24:97:27:b1:3f:c2:91:81:a1:ab:d3:9a:71:
8b:7f:4c:8e:57:16:1f:2b:e3:6e:b6:c4:4c:e3:9d:
f3:23:bf:42:54:ce:14:21:81:e7:a3:78:d8:6c:79:
e1:e8:75:e2:0d:c0:7d:bc:00:98:cc:0b:03:1a:9f:
0d:12:92:e8:dc:39:1f:bf:69:41:52:1b:0c:6c:0f:
74:69:e8:dd:52:8c:5f:af:45:62:5c:28:20:45:84:
b4:b7:a4:df:f3:c4:80:ac:9f:ed:89:86:ca:fa:e7:
ec:8e:81:e1:da:01:74:b2:85:35:7d:ad:dc:5a:96:
d7:ba:9e:cf:c5:e7:cb:06:06:bf:ce:26:9b:a5:ba:
e8:f9:8a:07:77:93:41:6f:ad:f3:c0:f3:16:e0:f5:
f1:4e:9e:61:81:69:3a:d6:18:8e:da:6b:15:31:83:
db:ba:c4:d7:0d:6d:2e:0c:6d:71:08:1b:9f:89:75:
11:b4:2a:16:1f:41:11:a0:22:5e:ad:80:7b:09:6f:
78:e7:bc:e3:13:eb:59:04:e9:0d:df:cd:70:6f:c3:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:31:BD:6D:E2:4F:9F:2B:B4:67:3A:8A:F7:EF:26:09:A4:6B:8F
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/Y9YxvW3iT58rtGc6ivfvJgmka48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.223.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fc:74:93:65:c2:6b:91:25:1b:24:62:b0:07:56:52:e5:45:
58:aa:2b:fe:e3:ec:ad:c0:c8:ee:21:2a:6c:48:c7:02:3c:ae:
a0:db:e3:72:35:00:3a:6f:c4:37:19:80:0f:2c:59:77:cc:75:
ad:c7:2c:8d:a2:e6:77:a2:d2:ef:bc:76:68:af:09:7d:a6:dd:
4d:fa:8e:1f:0e:48:86:c6:c5:fe:10:0c:b2:a9:0e:c7:9c:1c:
06:01:c9:08:c3:8a:ed:e4:77:9d:a2:84:7c:9e:6b:67:12:d1:
a8:3d:66:63:c1:0f:59:2c:a8:6e:66:12:fe:56:78:f4:18:0a:
82:00:00:d1:da:47:e4:9b:bc:69:15:12:c9:a7:94:8c:75:7c:
93:37:a1:c3:60:df:4c:4d:73:8d:53:c5:d6:d4:2a:03:5e:3b:
81:e5:77:cb:dd:7b:06:06:52:83:32:4b:7d:31:46:13:97:d5:
b8:87:46:7b:89:08:41:4e:4f:8a:a3:f4:f5:78:20:67:72:7a:
9d:6e:3a:2b:d0:63:56:dc:9c:17:0a:db:db:5e:e5:fc:fb:60:
3a:96:56:79:f9:0f:e9:f9:e9:88:19:1b:5d:62:cf:41:50:2e:
6c:38:b5:ab:71:f5:e4:d3:0f:8b:9d:71:8e:05:90:96:10:bb:
ff:49:9e:4c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzUz
MjREM0I4RjFENUVCQTU3NzBFNjYxRUUxNkFGMjRBNzUwNTU0RjAeFw0yNTA0Mjcw
OTI5MzhaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYzRDYzMUJENkRFMjRG
OUYyQkI0NjczQThBRjdFRjI2MDlBNDZCOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF6u1d7GcCf2PNbXKmQ/uQYDlX5hOhnN0BRYcyFHvDE40kXvSt
amPd/ivuvt9mJJcnsT/CkYGhq9OacYt/TI5XFh8r4262xEzjnfMjv0JUzhQhgeej
eNhseeHodeINwH28AJjMCwManw0SkujcOR+/aUFSGwxsD3Rp6N1SjF+vRWJcKCBF
hLS3pN/zxICsn+2Jhsr65+yOgeHaAXSyhTV9rdxalte6ns/F58sGBr/OJpuluuj5
igd3k0FvrfPA8xbg9fFOnmGBaTrWGI7aaxUxg9u6xNcNbS4MbXEIG5+JdRG0KhYf
QRGgIl6tgHsJb3jnvOMT61kE6Q3fzXBvw+MDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUY9YxvW3iT58rtGc6ivfvJgmka48wHwYDVR0jBBgwFoAUdTJNO48dXrpXcOZh
7havJKdQVU8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTgy
Ni9kVEpOTzQ4ZFhycFhjT1poN2hhdkpLZFFWVTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2RUSk5PNDhkWHJwWGNPWmg3aGF2SktkUVZVOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE4MjYvWTlZeHZXM2lUNThy
dEdjNml2ZnZKZ21rYTQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGffeDANBgkqhkiG9w0BAQsFAAOCAQEAD/x0k2XCa5ElGyRisAdWUuVFWKor
/uPsrcDI7iEqbEjHAjyuoNvjcjUAOm/ENxmADyxZd8x1rccsjaLmd6LS77x2aK8J
fabdTfqOHw5IhsbF/hAMsqkOx5wcBgHJCMOK7eR3naKEfJ5rZxLRqD1mY8EPWSyo
bmYS/lZ49BgKggAA0dpH5Ju8aRUSyaeUjHV8kzehw2DfTE1zjVPF1tQqA147geV3
y917BgZSgzJLfTFGE5fVuIdGe4kIQU5PiqP09XggZ3J6nW46K9BjVtycFwrb217l
/PtgOpZWefkP6fnpiBkbXWLPQVAubDi1q3H15NMPi51xjgWQlhC7/0meTA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net