Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/E5xM3YV_Ngrf0MnYrzMdFuqu0wo.roa
File: E5xM3YV_Ngrf0MnYrzMdFuqu0wo.roa (raw, json)
Hash identifier: qyAEEw/7JwWRaVIfOnJ3ECx+7OzrLFhICVPf3CBcEl4=
Subject key identifier: 13:9C:4C:DD:85:7F:36:0A:DF:D0:C9:D8:AF:33:1D:16:EA:AE:D3:0A
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 86
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/E5xM3YV_Ngrf0MnYrzMdFuqu0wo.roa
Signing time: Fri 03 Nov 2023 14:18:32 +0000
ROA not before: Fri 03 Nov 2023 14:18:32 +0000
ROA not after: Thu 10 Oct 2024 06:10:11 +0000
asID: 63567
IP address blocks: 43.241.50.0/24 maxlen: 24
103.205.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Nov 3 14:18:32 2023 GMT
Not After : Oct 10 06:10:11 2024 GMT
Subject: CN=139C4CDD857F360ADFD0C9D8AF331D16EAAED30A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:3c:46:63:63:e1:dd:b0:a2:66:6a:96:d7:
4c:c5:03:14:e5:13:18:99:05:5a:73:75:3c:e2:35:
3a:27:cc:9c:46:b0:77:3a:6a:2c:4b:a6:f3:de:a3:
c7:ac:51:ae:eb:b4:9d:c7:75:68:3e:4b:74:73:ce:
69:dc:e1:61:b4:d4:da:13:24:5d:96:89:56:f9:6f:
e6:1c:31:7c:d9:44:35:df:d6:74:02:ed:84:de:b8:
dc:60:a7:34:7d:14:27:9b:2a:7a:0b:2f:e0:27:90:
63:d2:fd:85:ba:ae:9c:2f:5c:8e:e2:cf:bf:1d:9f:
70:9a:bb:0c:7e:c8:0e:4b:1b:fe:0e:11:17:c7:98:
f1:2f:00:c9:3e:62:e1:2b:7e:38:84:5d:85:3a:dd:
22:95:4c:49:0a:aa:46:71:36:16:e7:65:cc:73:7b:
98:ce:89:48:74:4d:f4:02:8e:c1:8e:5e:44:e5:71:
4e:e0:67:f0:5e:dd:f5:7d:df:24:40:2b:0f:6c:d0:
50:1c:c3:9d:24:16:c1:0c:b9:9b:c0:72:eb:9d:14:
9a:62:8b:48:cd:08:3d:bb:59:86:1e:9a:07:13:31:
57:74:08:bd:83:c4:5e:32:5c:fd:c1:ec:1a:0d:7e:
94:04:72:d2:3d:cc:5a:94:8b:2b:74:c4:6c:79:d2:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:4C:DD:85:7F:36:0A:DF:D0:C9:D8:AF:33:1D:16:EA:AE:D3:0A
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/E5xM3YV_Ngrf0MnYrzMdFuqu0wo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.50.0/24
103.205.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:9f:c7:8f:8b:f4:89:d4:e7:3f:d2:e7:dd:d3:53:a1:5b:73:
28:36:af:99:fb:ae:45:d1:a6:24:98:49:57:a9:81:3a:05:c8:
fa:58:24:d0:b8:76:c0:8a:90:33:18:16:19:03:21:55:2f:bb:
8d:d0:6b:65:11:83:1b:08:2e:9a:37:d2:e6:82:3b:26:06:c0:
92:27:73:e9:d6:47:3f:07:56:76:0c:4b:79:fe:6f:07:6a:ef:
ae:58:89:93:3c:fc:2f:3b:66:b4:d1:18:11:cc:68:1b:9e:38:
eb:47:aa:96:21:c6:10:6a:1b:c8:63:4f:0e:50:c8:eb:80:27:
36:a1:e6:6e:5d:fa:38:5a:ac:58:99:c0:2e:24:30:e4:53:27:
16:52:93:ba:b6:ca:0a:21:f7:e5:e2:45:ef:e6:4c:68:e5:9c:
e6:28:d2:a9:ff:b8:61:be:6a:a1:16:f7:e9:04:90:67:68:23:
c4:3c:13:eb:73:61:56:c7:8e:c5:82:b9:e1:ee:a3:9f:4a:20:
9c:5a:d3:fc:8b:30:64:f1:f3:e0:e4:79:e5:75:83:37:c2:6a:
5e:84:b6:07:34:a4:02:26:cd:21:fe:f8:2a:77:a2:a3:28:fe:
4c:04:61:10:13:a0:80:9a:2d:46:5a:5d:26:60:c8:15:41:7b:
08:a4:87:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 16:58:11 2025 by rpki-client