Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/dZcq-nR31W2M8QnlYseMVjrFh18.roa
File: dZcq-nR31W2M8QnlYseMVjrFh18.roa (raw, json)
Hash identifier: tkCQcrw4cpxDA0sRnN76gszUgPyr4x6IQkB3Y3MQ2ZE=
Subject key identifier: 75:97:2A:FA:74:77:D5:6D:8C:F1:09:E5:62:C7:8C:56:3A:C5:87:5F
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 44
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dZcq-nR31W2M8QnlYseMVjrFh18.roa
Signing time: Thu 17 Apr 2025 11:45:22 +0000
ROA not before: Thu 17 Apr 2025 11:45:22 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 55933
IP address blocks: 103.118.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:45:22 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=75972AFA7477D56D8CF109E562C78C563AC5875F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:23:de:3d:20:ad:b0:d0:1d:1d:48:da:fa:
3e:18:e9:c6:73:7a:4f:fa:ee:4a:a9:58:7c:dc:67:
b2:5b:d7:63:df:a4:11:5c:c9:54:75:62:7e:8a:ef:
5a:0a:df:51:6b:13:12:a2:fb:ee:14:9f:b0:31:78:
a3:92:9a:b8:e7:a4:14:71:3d:a5:9f:a6:06:09:b5:
db:5f:d1:e6:4c:a8:7e:9e:b0:ec:06:50:be:b2:4d:
55:51:c7:7f:46:23:a9:b7:96:44:89:33:c0:c8:68:
13:16:64:23:2b:48:11:ad:21:12:b3:35:2d:f1:06:
94:f3:8f:59:22:53:b7:72:cf:a9:6d:66:b2:11:80:
f3:c0:0e:19:fb:80:f7:3e:f2:f5:63:6d:fd:6b:99:
63:4c:24:a4:d2:8d:4b:58:36:30:c5:50:d8:e0:1e:
d2:d0:73:2f:8a:86:45:51:8e:49:d7:c2:54:b2:1d:
f6:1d:d5:1d:3e:eb:79:ba:97:31:8b:dc:41:b5:2f:
d4:13:d1:62:26:7c:19:d5:7b:e4:fb:2c:5b:1b:51:
a8:29:3c:b8:ba:72:59:ab:73:99:81:74:f1:51:74:
ac:68:79:9f:37:59:1d:de:31:30:4b:be:54:81:fc:
4a:be:27:cf:08:20:05:f3:67:22:2e:bb:3c:b2:51:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:97:2A:FA:74:77:D5:6D:8C:F1:09:E5:62:C7:8C:56:3A:C5:87:5F
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/dZcq-nR31W2M8QnlYseMVjrFh18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:fe:75:51:f7:44:46:34:33:1e:ee:0e:ae:bf:d3:0a:c3:86:
2f:ec:af:17:18:54:81:a7:31:68:aa:16:31:73:6f:ef:36:ee:
06:2b:03:5b:5c:00:57:77:96:d0:9a:ca:e2:dc:99:c3:f4:05:
fc:ab:ef:73:96:f5:08:53:a7:cd:db:e3:6f:32:ed:f3:e9:6e:
16:fd:41:9d:4b:c9:b3:8f:c0:d5:ff:bf:8c:34:e2:00:61:e9:
5c:74:0a:43:24:be:60:3f:cb:2f:7a:85:ec:b4:f0:66:d1:17:
b4:18:c0:f0:a1:0f:f8:43:dc:00:77:3b:a1:29:ac:e9:a0:0e:
9e:b8:92:03:ba:4f:d5:04:d6:13:bb:26:5d:d6:7a:d7:15:67:
63:f9:d0:40:07:41:3b:aa:46:f0:de:32:d1:39:7f:4a:ec:77:
a6:85:0b:f2:12:44:72:10:da:3c:1b:75:30:1d:a5:67:a5:10:
58:37:75:2c:e5:91:0b:4f:41:46:6e:01:91:90:94:fb:18:99:
4e:c5:17:1e:00:7d:f8:03:cc:fd:c4:ba:1b:71:23:2f:84:94:
3f:71:bc:4c:ee:ab:2b:f3:42:df:31:6c:42:5e:8c:19:3b:59:
4c:44:36:d7:27:77:ae:ac:6a:aa:a0:04:c5:49:db:c0:6a:84:
b4:bf:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:35 2025 by rpki-client on console.sobornost.net