Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/ZEfeEV4GEKsIRBqfccW4zU_BeHw.roa
File: ZEfeEV4GEKsIRBqfccW4zU_BeHw.roa (raw, json)
Hash identifier: urV+iMgJ/8h4FfqxLmeHhrUNvpnKChB6iNCwvBWGE5E=
Subject key identifier: 64:47:DE:11:5E:06:10:AB:08:44:1A:9F:71:C5:B8:CD:4F:C1:78:7C
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 1D
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/ZEfeEV4GEKsIRBqfccW4zU_BeHw.roa
Signing time: Fri 22 Aug 2025 06:24:01 +0000
ROA not before: Fri 22 Aug 2025 06:24:01 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 138457
IP address blocks: 103.61.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:24:01 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=6447DE115E0610AB08441A9F71C5B8CD4FC1787C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:db:bb:74:da:00:df:03:70:93:0b:85:ec:
08:2c:84:d3:d9:cb:0d:60:2d:a2:75:4e:30:fc:39:
6b:1b:16:f6:86:02:af:1a:61:64:6a:98:db:8e:23:
e8:63:fd:4b:4f:b2:bc:57:97:a1:f5:e3:25:92:8c:
10:4b:57:74:80:cc:f2:03:f9:3f:44:e7:d9:54:56:
e0:d5:c3:03:1d:a2:4b:ab:7d:1c:2c:05:a3:d8:9e:
d8:c7:74:0e:57:64:d5:d9:0b:40:28:eb:45:c2:44:
09:80:7b:ee:fa:d7:94:b9:1c:cf:77:d1:90:83:07:
03:00:52:e2:26:60:d1:d6:f4:f9:75:40:1a:cb:aa:
e2:66:d9:41:4f:f8:43:c0:74:ce:c6:88:64:9e:5f:
da:21:31:7a:a9:48:52:df:56:ba:79:5e:2a:60:a8:
c2:62:7b:4e:71:5f:12:b1:e3:4e:fb:b4:2c:cd:5b:
97:99:b4:41:c3:47:34:81:c6:ed:42:fa:f8:02:b7:
53:47:25:87:e0:c3:91:90:83:df:81:c0:3e:a6:ad:
86:ff:8d:a3:29:8b:4d:9b:2e:13:55:83:38:e7:bb:
52:a1:d2:4c:c6:bb:b1:30:cb:3f:1b:c4:72:47:9e:
07:52:02:4d:c6:b7:3c:38:ce:3c:af:98:4e:a9:9f:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:DE:11:5E:06:10:AB:08:44:1A:9F:71:C5:B8:CD:4F:C1:78:7C
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/ZEfeEV4GEKsIRBqfccW4zU_BeHw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.61.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f2:5e:aa:a9:12:f3:0d:c4:ad:cd:3f:cd:24:5a:6f:18:81:
44:61:7b:4c:28:c5:2c:90:e9:2d:33:2c:b0:b2:c3:57:fb:a8:
1b:68:89:6b:32:02:d2:16:8b:6b:92:74:28:06:91:32:71:15:
bd:0e:d0:74:07:ec:8b:08:2f:e5:4f:ec:8d:53:5c:37:62:0a:
99:9f:4e:28:d3:b6:48:76:27:3d:97:83:8c:a0:6d:2b:25:39:
a4:31:bb:ef:f0:71:30:59:ee:04:17:87:03:91:e5:52:1d:b4:
34:b4:66:4f:ad:5e:85:9b:24:72:ea:1d:0c:bd:52:be:bb:ec:
5b:ea:e1:d6:65:fe:02:c7:9a:18:11:1c:f0:79:87:db:d3:17:
6a:06:33:67:92:2e:d3:54:d7:9b:22:65:c9:d7:de:cb:24:98:
fa:f2:e2:89:bf:a7:e7:31:a2:62:61:df:a1:0f:2d:5d:68:2e:
1a:b8:d3:1d:25:19:37:68:b4:39:60:56:1c:a6:89:50:c1:27:
1c:23:a7:89:9a:fe:87:5a:45:a0:a6:c5:79:31:41:a5:a9:25:
d3:3d:83:05:48:4f:90:15:70:44:ba:7c:b3:f2:a3:34:1a:eb:
b0:1f:5b:14:d1:b4:bd:e3:d1:4a:b6:2d:8e:74:02:8d:9a:07:
b9:25:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:36:39 2025 by rpki-client