Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa
File: gALoy-WEClG9nOagRiQccU0WnpE.roa (raw, json)
Hash identifier: Gmv5mtUHklFp3j+m8mMU5eiB9lpckT1KXPsOboMEr50=
Subject key identifier: 80:02:E8:CB:E5:84:0A:51:BD:9C:E6:A0:46:24:1C:71:4D:16:9E:91
Certificate issuer: /CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752
Certificate serial: 17CD
Authority key identifier: 7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa
Signing time: Tue 05 Aug 2025 13:45:43 +0000
ROA not before: Tue 05 Aug 2025 13:45:43 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 18186
IP address blocks: 103.99.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6093 (0x17cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CF44C06D5EA7DF0CBD4F68508F14E84DA08B752
Validity
Not Before: Aug 5 13:45:43 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=8002E8CBE5840A51BD9CE6A046241C714D169E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:cb:22:d3:d4:ef:41:d5:aa:d1:3b:87:8d:
27:54:df:0b:6c:4f:9b:7c:a9:d9:05:96:36:af:c4:
e4:7e:a0:9e:15:1c:0d:58:88:fd:2f:25:d9:75:1a:
fe:9b:4f:95:d9:dd:36:f7:1a:9a:99:c0:ee:a7:bf:
62:52:7a:b3:58:ad:c6:40:bd:b0:87:5e:6e:55:2a:
32:e5:3a:af:d9:88:76:43:7a:ea:35:b8:39:fe:cc:
f3:d9:8f:79:8e:d7:2d:00:55:00:58:b2:f4:16:43:
86:f3:0a:1b:6d:ed:4d:06:eb:f5:c6:74:50:00:11:
1f:3e:33:49:e3:67:9d:da:55:f8:bc:ae:89:92:1e:
56:94:e2:e7:f4:13:56:c6:a5:90:77:d8:fa:a3:a7:
60:81:24:60:ae:b0:74:4b:9a:34:27:92:3c:79:b2:
03:2d:d9:85:68:3c:0f:63:6e:f8:b2:db:4c:df:e8:
75:4a:50:93:16:cd:e5:a9:9d:57:ed:b7:d7:2f:4e:
ac:3f:9a:aa:84:fa:8d:5d:83:16:98:32:b9:09:b3:
7a:77:ed:fc:5f:33:8d:9b:59:91:16:26:58:3b:20:
91:30:b4:10:e2:4e:f7:65:90:b8:4f:00:0d:70:04:
dd:7d:2c:de:c1:e5:e0:df:b0:8c:53:97:ea:58:a4:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:E8:CB:E5:84:0A:51:BD:9C:E6:A0:46:24:1C:71:4D:16:9E:91
X509v3 Authority Key Identifier:
keyid:7C:F4:4C:06:D5:EA:7D:F0:CB:D4:F6:85:08:F1:4E:84:DA:08:B7:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/fPRMBtXqffDL1PaFCPFOhNoIt1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPRMBtXqffDL1PaFCPFOhNoIt1I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/gALoy-WEClG9nOagRiQccU0WnpE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.76.0/24
Signature Algorithm: sha256WithRSAEncryption
04:59:5b:2f:00:fc:a8:ec:05:e2:45:8a:eb:2b:8b:e2:79:50:
c7:08:5d:2d:fc:55:d7:ad:71:b9:8c:89:cd:b9:09:8e:92:6f:
12:67:9a:c0:6a:c7:73:6f:ef:62:ca:09:03:14:a6:0f:67:3e:
75:83:dc:5d:82:4c:3f:5a:32:e6:76:96:7e:69:61:86:a0:af:
17:a2:ce:9b:56:c1:01:4c:c1:c6:01:d4:89:9a:26:4a:0b:73:
2b:b2:98:0b:a1:cd:9d:8b:4f:06:6f:8b:61:eb:96:a7:2e:94:
bc:ea:e0:0a:24:d3:09:e8:bd:95:59:ed:cf:70:ed:30:64:52:
26:4d:00:09:33:c0:7c:45:ba:10:30:d2:d8:7d:d5:5d:55:4e:
5d:2b:42:50:cf:81:a4:db:25:ac:e2:4f:69:29:5e:ee:73:27:
b8:22:0f:10:7f:e7:9d:7e:01:10:b5:8f:05:5a:57:93:04:1f:
b6:ff:bf:4b:16:f2:1f:71:d4:19:54:f5:b9:0a:7b:c9:fa:d6:
0b:84:a5:c8:2d:c7:5f:93:22:85:93:bf:72:ef:5e:e6:36:6c:
4f:82:b8:29:93:e9:76:b9:e3:7e:17:7b:3d:80:6a:fb:d5:1a:
c0:e4:e3:13:59:db:3a:9b:b0:cf:46:a2:ff:d0:61:fe:97:40:
6d:0d:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:37:53 2025 by rpki-client