Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa
File: sZKnapg00fgKKe4LkAFvTWPY7bc.roa (raw, json)
Hash identifier: QsFYItD1U7Qqi5MRKBnZXLcVx+4eR2sBukx9xvp60fM=
Subject key identifier: B1:92:A7:6A:98:34:D1:F8:0A:29:EE:0B:90:01:6F:4D:63:D8:ED:B7
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 112C
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa
Signing time: Sat 13 Sep 2025 03:07:10 +0000
ROA not before: Sat 13 Sep 2025 03:07:10 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 21859
IP address blocks: 103.116.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4396 (0x112c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Sep 13 03:07:10 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B192A76A9834D1F80A29EE0B90016F4D63D8EDB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:aa:b3:97:25:f5:fe:b5:14:77:57:c5:18:d5:
2e:be:52:0d:de:7b:9a:d9:87:d4:4c:95:42:ad:75:
0d:57:de:a2:4e:67:90:9b:ac:1b:aa:42:6c:44:03:
8a:c9:fe:6b:e9:bb:c6:42:f2:d8:74:f4:52:30:14:
59:df:8b:26:78:b1:5e:52:87:a8:ad:c8:2d:ae:eb:
8b:2f:75:18:13:66:46:52:ad:8b:81:1d:94:f4:d5:
bf:d3:f9:7b:40:cf:07:a3:0e:f2:18:df:f7:80:7a:
1b:f2:54:91:ae:23:c8:c6:35:06:52:fb:63:12:63:
64:3b:6d:30:07:ca:6b:d7:5c:d2:10:7a:d9:ae:b1:
d4:73:69:fa:39:cc:0a:45:5d:2c:e3:45:f7:d2:10:
0d:09:04:0a:87:f3:01:0f:de:15:36:45:29:6a:29:
62:11:4a:2d:2c:1d:4e:e0:83:5a:26:0a:18:bb:a6:
0b:ea:24:d7:8f:5b:4b:8b:07:52:5a:a9:0c:53:40:
84:35:cc:5d:01:df:88:4d:8e:73:3a:d4:fe:cd:e2:
e2:db:72:19:b4:ff:6e:d5:03:87:10:24:ac:1b:88:
4c:51:e5:49:2a:45:ad:6a:61:85:6c:48:cd:5f:ee:
ef:4b:a7:2b:dd:58:42:c6:dc:f0:90:1b:b0:9d:96:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:A7:6A:98:34:D1:F8:0A:29:EE:0B:90:01:6F:4D:63:D8:ED:B7
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/sZKnapg00fgKKe4LkAFvTWPY7bc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.148.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b1:58:dc:69:e1:e8:f7:a0:00:01:7d:a9:bf:28:7b:87:e4:
66:b9:43:74:92:ef:b5:4a:7f:82:2f:31:fd:b9:c9:e7:03:98:
67:47:ad:54:c3:44:0e:a4:dd:06:33:03:e1:9f:44:4d:b7:3a:
67:7b:fb:b4:82:d5:ab:00:c6:f0:c8:d4:16:fe:d9:a3:b1:c1:
63:6a:44:91:b8:30:8f:93:07:87:63:36:5b:ab:59:c5:fd:90:
a9:d2:5e:b6:dc:7d:5b:02:f0:23:d4:66:af:3b:b0:2e:cc:34:
14:bf:b6:f0:b0:a5:65:98:d0:27:7a:a6:10:75:90:29:40:03:
f3:11:70:d6:55:74:64:33:01:a0:d3:94:cf:72:10:4f:73:26:
33:28:8d:30:de:1d:36:54:84:bf:f9:a1:f6:bd:f2:1f:be:0d:
71:f2:48:97:89:6d:13:bb:2f:4e:e7:c8:56:fd:84:3d:7b:df:
fe:8c:40:49:d4:1a:ce:33:17:7f:c9:a7:40:9b:fe:24:d8:e5:
2c:b7:40:23:43:29:46:d2:0c:99:aa:2c:9e:ca:40:e1:7b:0e:
50:b9:a3:3e:3f:5d:91:74:3e:a2:09:7e:80:a1:d3:92:b1:a9:
88:22:cb:31:3d:9d:8a:e2:1a:cb:ac:f8:82:bd:6b:2e:f4:6f:
69:e7:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:08 2025 by rpki-client