Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa
File: v4AAxFJbbTiRR_KP0xELNmVo8bA.roa (raw, json)
Hash identifier: R/ssDd6LgSKrUio2Uz4xAHOlqcn6ipq1sdzBp22bRHc=
Subject key identifier: BF:80:00:C4:52:5B:6D:38:91:47:F2:8F:D3:11:0B:36:65:68:F1:B0
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 15D1
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa
Signing time: Sat 13 Sep 2025 03:03:55 +0000
ROA not before: Sat 13 Sep 2025 03:03:55 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 137443
IP address blocks: 103.197.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5585 (0x15d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Sep 13 03:03:55 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=BF8000C4525B6D389147F28FD3110B366568F1B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:16:e0:3c:de:bd:55:c6:d3:c2:41:1f:ae:
95:48:9b:ed:99:a1:0f:4f:e1:65:3d:87:17:5c:2d:
42:ab:98:d5:eb:ab:57:98:d1:28:79:b6:51:32:04:
68:85:ae:87:32:b3:eb:a6:e2:78:9e:86:51:28:90:
08:03:f3:a8:a4:0d:71:72:3c:53:36:7a:d6:5a:e3:
8c:32:92:4e:02:ea:bb:b0:ee:aa:40:af:07:f4:36:
fa:df:c7:43:1c:1f:cb:44:c8:c1:7b:57:51:88:f9:
b1:1d:7c:cf:b4:c6:4a:e1:76:16:e1:1b:3b:64:69:
ec:bf:d6:92:f5:b5:16:e2:38:47:ef:bf:a1:f4:95:
91:e0:85:9f:4e:dc:ab:9e:e6:9e:ff:5e:bf:92:7d:
d1:79:2a:cb:db:6c:8e:a6:e0:35:e0:b5:4f:d3:bb:
6a:85:61:b5:da:77:a9:3c:79:1e:96:dd:1b:3f:0e:
9f:11:35:39:b8:1f:49:d2:d7:2f:fb:73:9e:ad:d5:
29:35:51:75:a1:9f:be:73:42:b5:30:24:34:ab:a7:
a7:f1:88:02:f0:3b:97:51:4a:8a:b4:05:cd:45:8e:
71:90:94:be:39:6f:fd:0f:11:55:fa:84:2c:34:2b:
ef:65:09:28:1e:f2:f9:07:f6:cc:e2:db:36:1b:d4:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:80:00:C4:52:5B:6D:38:91:47:F2:8F:D3:11:0B:36:65:68:F1:B0
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/v4AAxFJbbTiRR_KP0xELNmVo8bA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d9:42:1e:be:6b:ae:62:27:31:63:fb:f6:af:da:cc:af:d7:
b9:80:17:3c:39:17:90:88:30:26:4d:77:be:08:63:f6:c7:48:
bb:a3:e8:8d:dc:b5:a1:95:4f:e0:00:d5:a4:c9:77:2f:a7:6f:
50:a4:ed:e4:d1:bc:1c:1a:d5:ba:3d:84:16:81:3d:51:f2:60:
3a:31:c0:d9:4c:2d:21:4b:59:02:a0:65:29:da:15:65:4a:d5:
d5:2a:ae:5c:c3:87:f7:5b:85:ba:df:8f:fc:5f:a0:0c:a7:3e:
e4:38:a6:ea:1a:92:19:e1:89:83:02:10:e3:f2:dc:07:d3:c5:
b7:d7:fd:7b:bc:07:f5:f4:0c:8f:d7:0b:1a:e2:9b:32:b2:dd:
8d:af:64:5f:ee:32:ad:06:6b:08:ca:30:e3:1e:24:df:f6:5c:
cb:d2:eb:9b:25:83:ef:b0:83:b4:a8:e9:4e:aa:02:4f:63:fc:
90:60:f7:8b:2d:27:40:a1:8a:13:74:39:2a:5b:a1:e7:f0:3e:
07:cf:6d:84:14:20:49:6f:04:b0:03:21:4d:fa:76:60:41:cf:
ac:44:ec:09:81:be:0a:2c:3a:34:5d:d5:bf:b5:aa:b8:ba:cb:
99:d2:56:2a:35:2d:38:b8:1f:0d:42:6f:6b:ab:97:b0:6f:d7:
46:e2:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:58 2025 by rpki-client