Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/dlDauHGPZBhDFFw4OxWb9MY3lrQ.roa
File: dlDauHGPZBhDFFw4OxWb9MY3lrQ.roa (raw, json)
Hash identifier: 58DOupbD+xQqn3YTw9friqRlhfHLsi6CATnE4/H3LXY=
Subject key identifier: 76:50:DA:B8:71:8F:64:18:43:14:5C:38:3B:15:9B:F4:C6:37:96:B4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0835
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dlDauHGPZBhDFFw4OxWb9MY3lrQ.roa
Signing time: Wed 14 Jun 2023 02:24:02 +0000
ROA not before: Wed 14 Jun 2023 02:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 02:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7650DAB8718F641843145C383B159BF4C63796B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:7e:26:92:dc:20:0c:83:63:05:9a:54:55:
fb:d9:16:c6:2e:35:9f:3b:6b:64:e1:c5:31:b3:c9:
5a:b9:a3:c2:d5:68:35:12:62:fd:d3:36:dd:ae:6c:
0c:a5:b0:9a:49:90:91:31:f3:12:97:68:70:74:53:
30:00:18:cb:cd:53:cd:c0:68:e8:97:d6:24:25:05:
93:ed:48:c9:23:8b:4d:8b:dc:2a:06:93:8b:f6:97:
1e:5e:9c:81:b6:0f:9b:ea:31:b8:af:6c:13:8b:62:
1e:97:2b:7f:38:a2:23:fa:4c:4a:18:c0:1f:d0:52:
07:85:79:1f:82:4b:30:3d:aa:f9:5d:7c:97:1d:94:
52:45:2a:3d:c4:ff:84:8f:97:2c:b5:e4:46:46:3c:
04:f7:d7:f3:28:b4:fd:67:7f:03:a7:12:35:24:b1:
46:03:db:1a:bc:03:40:f9:a7:0b:43:29:f3:d9:77:
05:70:43:b9:88:0d:5d:0d:68:88:89:53:66:6b:2f:
6c:c1:6a:88:dd:a2:55:fb:77:8b:56:40:d8:76:58:
f6:58:54:c5:69:c3:64:5b:f6:17:32:9a:57:16:39:
20:84:1c:26:e9:5a:f8:8e:6e:dc:8c:47:8e:e5:e8:
a7:d8:34:4a:59:8f:03:83:57:98:94:ae:50:a8:8c:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:DA:B8:71:8F:64:18:43:14:5C:38:3B:15:9B:F4:C6:37:96:B4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dlDauHGPZBhDFFw4OxWb9MY3lrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:18:d1:21:90:7b:5c:57:c4:4c:2d:9c:dd:93:bb:f2:c0:91:
12:16:da:1e:57:f3:43:e5:4f:1b:0f:45:6c:91:1b:2a:e4:c3:
11:0d:8b:f4:f1:8f:f0:4e:e0:51:00:d7:4b:d2:a8:96:a2:99:
b4:1f:8f:f9:12:ee:5b:29:64:79:4b:cb:e5:4d:13:c4:0b:46:
ac:e1:e2:d6:0f:42:30:0f:a1:2b:71:41:23:2e:d9:53:ca:fe:
f4:c7:5c:3f:34:e5:08:01:7e:d4:1c:56:73:df:28:67:cc:45:
d0:9d:c6:de:73:f7:23:bb:8a:6c:f8:e3:64:6e:ce:a4:60:cd:
bc:d8:69:59:87:1a:6b:63:df:a6:bd:b7:69:af:f1:d8:e9:df:
ad:5a:75:29:4b:61:61:f7:5c:8b:c6:e8:c8:ed:f9:9a:89:a8:
3b:eb:64:f0:49:9c:6d:1a:70:83:7e:06:42:f9:21:61:53:89:
fc:f8:00:c0:91:d8:44:ad:eb:ac:90:2f:a9:2b:06:e6:48:6d:
3c:80:80:3f:b5:63:25:0f:b1:ed:a0:85:3a:ea:37:d0:5a:38:
d9:21:04:a7:55:a8:06:9b:fa:ab:b7:9d:70:52:d3:26:b7:b2:
e9:80:25:89:36:dc:9d:db:f2:4a:fc:e7:df:eb:59:c5:cd:d2:
3a:02:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:23 2025 by rpki-client