Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa
File: Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa (raw, json)
Hash identifier: 7JYzi8wNmGetBqkqq4TaSTPE6M0T+awLOmkmSp9BLW8=
Subject key identifier: 02:6D:E2:D3:4C:F9:05:D6:17:79:3C:D2:55:97:86:D0:15:A8:3B:34
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0655
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa
Signing time: Tue 04 Mar 2025 06:58:43 +0000
ROA not before: Tue 04 Mar 2025 06:58:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7641
IP address blocks: 103.8.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Mar 4 06:58:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=026DE2D34CF905D617793CD2559786D015A83B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:58:fe:7a:5f:89:45:7f:f0:32:c1:77:bf:
0c:57:40:30:81:fa:56:7c:24:96:7c:be:b5:e7:6e:
d6:46:5c:6b:49:49:47:48:ca:20:02:b6:99:1c:6d:
55:de:00:6d:c9:df:b2:60:34:2d:64:44:b6:ba:9f:
fa:7f:d4:79:59:24:86:ae:4a:8a:80:b7:78:b8:72:
ca:8e:b4:c2:be:96:cd:34:0f:77:67:87:b2:aa:1c:
a0:2f:83:59:e7:34:81:f8:02:6b:d5:1a:cb:bb:28:
72:f8:f2:4a:40:7f:63:ab:62:56:9b:9b:39:64:7a:
7a:f7:6a:ba:23:1c:d2:cb:14:78:19:90:15:2b:9e:
96:46:d7:d7:03:56:50:e2:71:e3:1d:66:34:37:af:
9b:75:b8:33:09:9e:71:0f:c1:f4:b0:92:5e:fc:15:
f6:4d:8b:48:93:56:da:91:ea:24:88:27:83:73:8b:
3a:e6:5a:bb:61:d0:9b:28:8a:0b:32:a1:a1:84:9f:
cb:4a:55:49:b0:7a:68:d3:12:01:f1:be:e7:29:6e:
80:1f:fc:f7:cc:bb:45:39:b7:16:b8:cd:41:36:37:
ad:e2:e2:cd:0a:6b:e4:04:5f:3b:bd:16:88:9b:7f:
92:68:1e:88:f8:e1:30:c8:d5:08:b0:16:63:08:c5:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:E2:D3:4C:F9:05:D6:17:79:3C:D2:55:97:86:D0:15:A8:3B:34
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Am3i00z5BdYXeTzSVZeG0BWoOzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.204.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e6:d3:19:63:5a:1a:d0:9a:77:a8:8a:d6:25:a3:8c:2c:50:
c0:bc:88:3c:a6:43:7d:fd:c1:2b:46:54:3f:7b:06:78:c2:82:
d9:37:7f:bd:27:d6:92:d8:76:cf:25:fd:ec:fe:8f:18:cd:70:
05:c9:39:6f:6a:df:c1:08:57:96:ef:86:d8:b0:a6:18:8d:cc:
89:17:9d:13:85:b9:26:71:1b:f8:42:a2:50:e4:5e:f5:d9:01:
54:c9:8d:0f:79:e0:97:eb:b4:9b:a7:cb:29:26:3e:84:de:c8:
3b:88:ac:c2:20:6a:19:f1:7b:00:37:95:e8:49:b1:f0:39:b8:
ce:6d:64:e0:a9:4e:45:1f:37:ce:36:00:1e:80:f4:9d:2f:29:
de:72:83:41:34:b9:16:b1:d3:bd:e8:be:57:f3:bb:84:72:a1:
e1:04:72:13:2e:0c:4e:53:59:a2:b1:ec:cf:bb:e0:14:78:7d:
29:41:66:96:d2:85:1c:94:0e:5d:3e:1e:b7:82:75:ad:bc:eb:
ba:bf:db:b9:8b:74:98:6a:59:17:ab:8d:94:23:e7:6e:67:66:
f2:bd:33:99:aa:60:fc:cc:0c:28:3d:b4:79:d5:d0:1b:39:38:
23:4f:b0:c1:60:99:bd:14:91:fa:3b:5c:ba:b1:57:13:f9:d1:
a2:d8:12:3c
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw
MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTAzMDQw
NjU4NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyNkRFMkQzNENGOTA1
RDYxNzc5M0NEMjU1OTc4NkQwMTVBODNCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJzFj+el+JRX/wMsF3vwxXQDCB+lZ8JJZ8vrXnbtZGXGtJSUdI
yiACtpkcbVXeAG3J37JgNC1kRLa6n/p/1HlZJIauSoqAt3i4csqOtMK+ls00D3dn
h7KqHKAvg1nnNIH4AmvVGsu7KHL48kpAf2OrYlabmzlkenr3arojHNLLFHgZkBUr
npZG19cDVlDiceMdZjQ3r5t1uDMJnnEPwfSwkl78FfZNi0iTVtqR6iSIJ4Nzizrm
Wrth0JsoigsyoaGEn8tKVUmwemjTEgHxvucpboAf/PfMu0U5txa4zUE2N63i4s0K
a+QEXzu9Foibf5JoHoj44TDI1QiwFmMIxXirAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUAm3i00z5BdYXeTzSVZeG0BWoOzQwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U
IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv
TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9BbTNpMDB6NUJkWVhlVHpT
VlplRzBCV29PelEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
ZwjMMA0GCSqGSIb3DQEBCwUAA4IBAQAh5tMZY1oa0Jp3qIrWJaOMLFDAvIg8pkN9
/cErRlQ/ewZ4woLZN3+9J9aS2HbPJf3s/o8YzXAFyTlvat/BCFeW74bYsKYYjcyJ
F50ThbkmcRv4QqJQ5F712QFUyY0PeeCX67Sbp8spJj6E3sg7iKzCIGoZ8XsAN5Xo
SbHwObjObWTgqU5FHzfONgAegPSdLynecoNBNLkWsdO96L5X87uEcqHhBHITLgxO
U1misezPu+AUeH0pQWaW0oUclA5dPh63gnWtvOu6v9u5i3SYalkXq42UI+duZ2by
vTOZqmD8zAwoPbR51dAbOTgjT7DBYJm9FJH6O1y6sVcT+dGi2BI8
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:45 2025 by rpki-client on console.sobornost.net