Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa
File: a-C0ZcbMEIueflbcZASicAD8he0.roa (raw, json)
Hash identifier: j0QlysAnrzL+WWQvVGQm8SUA6f3yOOh++yMn2DzuE1Q=
Subject key identifier: 6B:E0:B4:65:C6:CC:10:8B:9E:7E:56:DC:64:04:A2:70:00:FC:85:ED
Certificate issuer: /CN=1FCAD722567791FD73A091FE891C948F1914D672
Certificate serial: 05A6
Authority key identifier: 1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa
Signing time: Wed 09 Apr 2025 06:48:45 +0000
ROA not before: Wed 09 Apr 2025 06:48:45 +0000
ROA not after: Thu 09 Apr 2026 06:41:32 +0000
asID: 132019
IP address blocks: 103.69.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FCAD722567791FD73A091FE891C948F1914D672
Validity
Not Before: Apr 9 06:48:45 2025 GMT
Not After : Apr 9 06:41:32 2026 GMT
Subject: CN=6BE0B465C6CC108B9E7E56DC6404A27000FC85ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:5c:c8:28:29:e3:ca:37:18:cc:e3:a0:1b:
06:43:93:9a:7e:75:a9:b4:b5:60:e7:27:aa:a8:b7:
e7:e6:bc:56:1d:38:62:21:58:7b:8b:2f:ab:19:07:
a0:f1:27:b3:fb:7b:0a:81:df:8a:53:c5:36:09:35:
ca:e7:e8:ab:ed:c3:32:4c:41:af:56:b9:3a:b0:4d:
d2:e4:d1:85:e0:3c:e2:9f:88:ea:e0:0c:51:dc:42:
e0:1a:e9:80:0d:30:88:24:6d:e7:27:92:69:c3:5b:
6c:34:31:3f:66:07:40:ce:aa:f1:fe:d8:31:7a:ba:
12:d7:ee:14:22:63:f3:f9:c4:80:41:e4:92:50:24:
dd:bb:18:40:4a:c0:d4:34:87:8d:0c:c3:76:48:1b:
fd:44:ba:ec:17:1f:6a:7d:d7:93:29:a1:c8:ca:d7:
47:4c:16:1a:6b:86:a9:58:6c:e2:55:f2:d7:4f:37:
0a:e0:17:0d:95:8e:08:31:b7:c3:01:e5:59:fa:c1:
bd:3b:a9:67:6e:8a:eb:a3:00:43:3e:42:64:57:cb:
7a:9f:e1:b3:c5:ac:0f:de:13:d2:43:e0:df:20:3a:
ce:d2:08:32:10:f6:2a:fe:1a:e9:8b:8f:10:63:95:
df:2a:33:fe:77:07:46:ee:b9:fd:b3:16:fe:af:1f:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:B4:65:C6:CC:10:8B:9E:7E:56:DC:64:04:A2:70:00:FC:85:ED
X509v3 Authority Key Identifier:
keyid:1F:CA:D7:22:56:77:91:FD:73:A0:91:FE:89:1C:94:8F:19:14:D6:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H8rXIlZ3kf1zoJH-iRyUjxkU1nI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2815/a-C0ZcbMEIueflbcZASicAD8he0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.116.0/22
Signature Algorithm: sha256WithRSAEncryption
09:7b:76:8c:24:38:e8:8d:b5:1c:79:d0:8d:1f:bc:a5:76:fa:
ea:56:8a:72:ed:c2:b1:19:cd:68:bf:d1:72:89:c6:d5:a3:51:
d8:06:1a:12:fd:bc:b4:15:1c:b7:bd:2f:41:17:e1:12:84:67:
c0:8c:96:2e:bd:cc:35:bd:f6:f6:05:a4:a6:9d:5a:a4:7e:39:
5c:d2:60:70:e9:57:95:c4:aa:ca:cd:f0:a9:dd:34:23:4c:54:
40:cb:67:83:3a:41:80:da:b6:58:a6:b5:6d:00:1d:83:e8:e7:
28:9c:55:67:50:81:26:41:a1:91:e2:26:ed:44:c0:d2:97:87:
2e:67:38:78:99:da:21:e4:50:0d:ef:66:67:ef:bd:0f:7c:84:
9e:02:d8:16:45:5f:4e:9c:4b:4f:53:11:01:d0:cc:a2:5b:cc:
4c:49:8f:17:a6:04:a0:54:99:35:50:b3:39:19:c4:66:17:3d:
6c:72:c2:5f:2b:f8:2e:99:2c:bc:ce:bb:50:30:7e:bd:7c:8b:
ab:98:78:5c:93:2c:ad:ba:14:de:e4:00:c1:c6:58:c2:69:f5:
36:77:ab:2c:20:6b:99:d2:a5:05:07:9c:62:af:bc:a4:d5:aa:
7a:2f:e4:30:c5:3e:19:83:67:1d:5f:2c:80:00:bd:dc:3b:64:
a6:54:7d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:39 2025 by rpki-client on console.sobornost.net