Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa
File: rUSEJt21P-SZTDhUlqSLzFTJBk0.roa (raw, json)
Hash identifier: OayZzUQ1Cvz6t+sRSLYRoH1XJsCFaIDQtnghp25qVlo=
Subject key identifier: AD:44:84:26:DD:B5:3F:E4:99:4C:38:54:96:A4:8B:CC:54:C9:06:4D
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 14C8
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa
Signing time: Sun 27 Apr 2025 09:29:39 +0000
ROA not before: Sun 27 Apr 2025 09:29:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 152320
IP address blocks: 103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5320 (0x14c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Apr 27 09:29:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AD448426DDB53FE4994C385496A48BCC54C9064D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:5b:a3:f2:20:0a:e7:68:66:f2:58:27:21:
ae:c6:00:9a:d5:ec:09:0a:77:a0:5a:b4:15:25:01:
a7:60:77:03:35:d6:84:25:4e:07:c8:85:5d:6e:6c:
f8:7a:49:bf:31:05:d0:f6:54:3a:1e:87:91:82:81:
db:e4:af:9b:b4:3f:37:cd:24:46:9c:c6:36:8f:90:
e6:ec:94:86:07:5d:9b:45:71:bd:e2:07:1d:e5:00:
e5:02:db:1b:8a:f7:1b:35:67:88:20:69:f7:19:9c:
e8:40:99:7c:c1:0d:fa:94:5e:d3:2e:84:f8:6c:87:
36:1f:c4:27:51:bf:5e:93:3c:98:15:1e:5e:d2:1e:
8a:94:c4:c1:a6:b5:ab:f0:de:e3:5b:dc:fb:1a:8d:
2d:c0:a1:dd:22:7e:79:00:96:25:8f:f0:c2:8a:95:
25:ab:64:e8:c9:24:e3:dd:6b:bd:ec:8d:54:c3:01:
ec:a5:9d:1b:4a:5d:58:cd:b5:26:56:97:85:d9:b3:
f7:a7:d0:a6:f6:2a:a6:ea:9d:37:35:e2:38:0c:ee:
8a:c8:f5:db:a7:e3:ab:f8:ad:6c:5b:26:ce:74:5d:
0d:25:64:a5:15:a9:1c:02:05:b3:cc:29:a1:2b:7b:
ee:17:65:24:02:27:80:48:fe:37:a2:7b:83:54:2b:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:84:26:DD:B5:3F:E4:99:4C:38:54:96:A4:8B:CC:54:C9:06:4D
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/rUSEJt21P-SZTDhUlqSLzFTJBk0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.223.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8f:98:b5:58:40:96:bd:e0:0d:48:45:45:38:6b:b0:70:0c:
83:28:76:7d:93:83:53:1a:f2:12:f4:2b:f5:11:05:de:0b:9e:
a0:23:64:04:80:e7:e6:7d:2f:bc:a8:de:f1:59:c9:9c:85:5a:
84:a2:bd:85:12:98:d6:8c:c5:46:82:2e:e2:1d:96:4f:69:4b:
aa:24:71:97:fa:f2:a9:44:2e:22:51:df:80:ef:01:49:34:13:
23:63:b0:55:92:97:e7:da:be:d1:0e:90:e3:d4:f1:80:f8:b7:
35:1e:7c:fb:55:7b:cf:6a:c3:60:87:9b:c1:06:73:1b:b1:94:
e2:82:35:4d:75:c1:4c:d7:07:92:17:a1:21:06:72:54:4d:9d:
7d:f2:65:b0:b6:9a:45:5c:f8:c6:21:3b:08:7d:62:cc:7b:a4:
ee:19:db:9b:6a:6d:5f:54:0c:c5:ef:47:a3:86:39:47:fd:8a:
e7:4c:b2:95:31:9f:0a:40:fb:8a:85:db:04:55:3e:d0:9e:1b:
ab:86:d1:2f:66:f2:d8:be:ec:88:47:8a:46:ab:46:bd:f3:47:
74:40:2d:df:ff:10:c5:84:0f:bc:e0:45:94:d8:aa:7e:eb:ac:
a7:17:59:42:3f:f2:62:8e:36:33:e5:16:51:94:d1:91:10:db:
fc:58:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net