Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1082/245GYucSpaUoadtDQ8QIqw50V8U.roa
File: 245GYucSpaUoadtDQ8QIqw50V8U.roa (raw, json)
Hash identifier: fMgFFlzyEf5nzePcMKIWx0QdNucCDxf/kk1XhK/If+E=
Subject key identifier: DB:8E:46:62:E7:12:A5:A5:28:69:DB:43:43:C4:08:AB:0E:74:57:C5
Certificate issuer: /CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Certificate serial: 17CF
Authority key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/245GYucSpaUoadtDQ8QIqw50V8U.roa
Signing time: Tue 14 Oct 2025 03:16:48 +0000
ROA not before: Tue 14 Oct 2025 03:16:48 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 134765
IP address blocks: 103.23.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6095 (0x17cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Validity
Not Before: Oct 14 03:16:48 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DB8E4662E712A5A52869DB4343C408AB0E7457C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:4c:d0:0f:9f:3a:04:9e:00:78:ae:8a:2f:
59:af:2a:2d:78:91:ee:8a:35:b2:8e:2f:bd:01:97:
bd:76:3e:0f:a6:28:92:b2:6a:97:9e:c9:f6:c3:f0:
34:4c:26:0a:0a:1f:bc:8b:db:90:fe:d7:54:c9:8e:
d5:b4:c0:6d:e5:c5:7f:bf:3c:23:fc:88:7b:2e:e8:
0e:6c:dd:8d:f9:1a:d7:ba:c3:f8:73:98:86:a1:20:
92:7b:1a:24:0e:84:2f:84:79:9b:1d:a3:29:31:f0:
9e:95:b3:4e:f1:50:6a:29:83:35:5f:d7:79:38:4e:
68:e8:80:2a:dc:24:9f:5e:d7:7f:ef:b7:71:f0:ac:
a2:bf:4c:69:6b:57:ec:87:d7:43:91:88:11:0c:37:
31:28:41:da:ca:c2:f6:3e:8a:c5:00:26:3b:e4:13:
4c:a4:2f:c4:9d:c2:06:b6:3d:1d:ea:d0:0c:b7:d3:
ca:8b:07:5a:b6:93:6d:30:8f:bc:30:24:51:42:0b:
6e:6a:af:c6:01:2a:af:19:cd:9d:e4:89:d3:72:d7:
b8:c2:89:72:a2:eb:d7:f1:ae:51:e3:54:8f:de:fb:
72:38:32:c2:aa:4a:11:81:86:be:1b:d2:d3:9b:8a:
fb:bd:a5:f6:00:57:5c:ca:a5:39:5a:f8:62:61:9e:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:46:62:E7:12:A5:A5:28:69:DB:43:43:C4:08:AB:0E:74:57:C5
X509v3 Authority Key Identifier:
keyid:03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/245GYucSpaUoadtDQ8QIqw50V8U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.8.0/22
Signature Algorithm: sha256WithRSAEncryption
af:35:2c:17:65:f3:9e:aa:bf:1e:76:2c:10:ae:4b:81:c9:e9:
4c:42:ad:ea:50:18:3f:a9:4f:89:0a:a6:03:1e:bc:91:ba:16:
d4:ff:64:16:f8:37:62:89:7c:72:5c:8e:70:10:0e:8a:84:ff:
10:e2:7b:37:f6:9d:25:85:e3:58:b3:29:fd:3f:5a:18:e7:c3:
e5:d6:e7:3b:37:3d:b6:90:a9:73:2b:f0:33:03:3d:10:0f:39:
e3:73:b7:1e:a9:fe:15:05:4b:54:0e:a3:3b:61:e8:e2:d1:46:
64:16:68:f8:6f:3f:00:a3:d4:f4:fd:75:8c:49:df:b6:c2:0c:
94:4d:47:a1:d9:04:a3:d1:a2:04:6f:3b:11:82:c7:8c:a8:d0:
ee:62:92:d3:d8:b4:85:51:e4:8c:01:7a:8d:fe:f3:51:3d:59:
f0:94:75:db:2f:3e:3b:e1:20:e3:85:4e:79:02:2c:f6:a3:f7:
be:63:37:2c:a1:90:0e:16:f4:94:70:68:2d:1d:25:60:c0:5b:
b1:10:91:f4:e1:0a:b7:78:98:c8:3f:b9:31:93:83:36:96:a4:
29:4d:4f:2f:53:9f:98:6e:cb:31:6c:4a:92:23:16:c0:48:13:
d3:75:96:69:29:3a:d0:5d:3a:41:84:0c:a5:92:da:1b:95:e3:
59:2d:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:00 2025 by rpki-client