Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa
File: oxsNF5_DGEGNQM4NRd457UeNp7w.roa (raw, json)
Hash identifier: 72pTtljS41equenPZ5Ij7P/eKDzRHAeaAEMEgrljKjk=
Subject key identifier: A3:1B:0D:17:9F:C3:18:41:8D:40:CE:0D:45:DE:39:ED:47:8D:A7:BC
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 4D
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa
Signing time: Thu 17 Apr 2025 11:45:25 +0000
ROA not before: Thu 17 Apr 2025 11:45:25 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 55933
IP address blocks: 103.118.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:45:25 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=A31B0D179FC318418D40CE0D45DE39ED478DA7BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:27:3f:0c:6b:29:e8:99:9e:89:c2:6d:0c:
0f:30:ea:02:7b:09:ed:67:6f:db:21:74:5e:cc:35:
3a:51:f4:ab:db:5b:33:38:40:5c:c4:53:4b:e0:d3:
bb:ce:86:55:d4:13:04:28:06:c8:b0:f2:00:57:73:
62:76:63:66:f6:25:27:79:6b:45:17:d0:d5:43:bf:
9d:61:73:ff:c8:00:78:57:25:20:28:f3:c3:25:0c:
97:c3:28:dd:96:5c:15:48:96:50:d0:c5:d7:54:09:
f8:c3:b2:a8:85:8d:5e:ed:e0:89:f4:4a:57:64:ce:
3c:83:25:62:3c:58:b7:cc:4e:d0:92:fa:b8:73:fb:
f9:6f:2f:4a:06:cb:bb:ec:57:c6:22:15:09:98:cb:
c7:48:a4:d6:ee:6a:d1:ad:e7:a3:c2:c6:d4:3e:c9:
63:2c:4d:99:9e:35:b9:e0:c3:3b:3a:5c:bb:1a:6d:
56:d6:f1:ca:ca:34:9d:39:21:d1:3f:c6:33:99:62:
52:1e:49:63:98:5e:95:db:05:48:ff:74:8a:e1:b2:
62:f1:8d:d5:19:29:69:44:73:72:bf:4d:8e:32:52:
1f:f3:85:fd:d2:48:50:22:31:21:a7:b2:59:a3:45:
22:1f:f8:ac:ef:17:ea:81:02:29:77:2d:2f:2e:23:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:0D:17:9F:C3:18:41:8D:40:CE:0D:45:DE:39:ED:47:8D:A7:BC
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/oxsNF5_DGEGNQM4NRd457UeNp7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.192.0/22
Signature Algorithm: sha256WithRSAEncryption
31:ab:04:a3:aa:77:e6:af:68:76:1e:0f:03:08:f2:b8:58:ee:
56:b3:7e:c2:88:d3:01:1c:66:d2:c6:14:0f:35:e9:47:c7:05:
ab:80:b6:8b:10:c4:11:9f:a5:a3:3c:42:4c:5c:ec:38:7c:ca:
a4:97:09:af:f9:4a:98:a3:09:22:ba:e4:79:c6:9f:4f:e6:79:
61:9d:af:53:1f:8f:b0:09:ae:43:95:87:9e:1b:bf:06:05:c9:
72:de:e7:80:d4:a9:fe:0e:64:f3:b4:c3:b8:2c:52:3f:ca:4e:
2d:66:e9:c1:af:0c:d4:91:5f:26:ae:21:15:b0:7c:0c:fc:0a:
f9:44:03:9d:31:4b:24:4e:77:a6:e3:4c:30:44:dc:fb:66:7f:
27:35:71:01:98:9e:3e:62:9c:ac:72:a1:a2:8b:53:af:1a:2e:
03:48:8a:6b:71:cf:5d:c2:74:a8:57:a9:cf:d1:f9:15:33:57:
ec:fe:f7:9e:58:b3:c0:f8:fc:f8:ff:86:93:6e:84:93:8f:11:
ad:49:b4:93:c7:d1:54:63:1e:0b:a1:81:9d:d5:c9:7a:8a:b2:
02:5b:e4:c5:9e:cb:d0:dc:92:b5:26:7e:b0:47:92:bb:de:21:
49:4b:4a:9f:4b:c5:96:e2:3c:01:1b:f0:98:54:fb:af:d2:3d:
79:62:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:36 2025 by rpki-client on console.sobornost.net