Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/FqiXvXg9SSabQS99jIs40XRDgo8.roa
File: FqiXvXg9SSabQS99jIs40XRDgo8.roa (raw, json)
Hash identifier: 9YojKex9CAfemj0su85VPeMEoO3ae0WXXkilYFI12hk=
Subject key identifier: 16:A8:97:BD:78:3D:49:26:9B:41:2F:7D:8C:8B:38:D1:74:43:82:8F
Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB
Certificate serial: 0F6A
Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/FqiXvXg9SSabQS99jIs40XRDgo8.roa
Signing time: Sat 13 Sep 2025 03:03:58 +0000
ROA not before: Sat 13 Sep 2025 03:03:58 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 103.96.224.0/23 maxlen: 24
103.96.224.0/24 maxlen: 24
103.96.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3946 (0xf6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB
Validity
Not Before: Sep 13 03:03:58 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=16A897BD783D49269B412F7D8C8B38D17443828F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f1:72:98:98:77:d8:04:49:31:22:ad:3c:70:
b8:cf:55:95:89:82:2f:24:65:f8:b8:0f:8b:6a:67:
96:56:8c:ab:65:60:8d:ba:b3:24:8a:b9:7c:4e:a0:
9f:52:aa:41:03:66:ab:29:ac:57:8e:68:bd:93:5b:
37:9c:6b:b7:19:18:e1:dc:bc:71:4d:5a:e5:ed:b7:
27:cc:6d:90:93:f5:4b:3c:49:bb:f2:32:4f:c3:62:
be:c8:7e:c0:54:95:35:1f:f2:cc:fe:0c:0e:f8:6a:
d0:b9:b7:b4:11:df:fa:d4:79:33:24:8a:33:9b:e0:
87:4c:b5:66:13:24:b3:7e:84:0f:15:35:93:65:65:
5b:e9:65:1c:6e:77:32:42:46:02:49:28:df:89:79:
21:31:26:0a:0b:a5:14:a1:cc:c4:65:98:9d:a4:e4:
4e:35:84:7f:5a:f5:f3:26:ca:f2:e3:17:2d:5a:98:
5c:25:9d:e6:c7:6b:15:34:b2:53:45:8d:8c:f9:5b:
97:6d:8e:e0:93:69:cc:59:d3:eb:10:6b:4b:41:77:
15:bb:ad:18:96:3a:b6:b6:4b:0e:52:a8:f4:f9:91:
ad:1e:4d:98:91:79:a0:38:c0:44:ba:fd:5c:5b:b2:
7d:6f:43:13:f1:0a:5f:13:40:78:03:9d:f8:e2:ec:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:97:BD:78:3D:49:26:9B:41:2F:7D:8C:8B:38:D1:74:43:82:8F
X509v3 Authority Key Identifier:
keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/FqiXvXg9SSabQS99jIs40XRDgo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.224.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a1:bd:2e:e4:5a:9d:9b:a1:61:a3:ce:05:65:44:a5:38:69:
0b:08:ef:81:e9:5a:91:5e:34:f2:a5:45:c0:17:74:de:b7:16:
b9:72:63:a4:8d:de:ae:77:34:34:8e:48:bc:07:26:0b:d7:f5:
05:dd:9e:c7:2a:4e:a1:0f:4c:40:d1:57:c5:81:17:74:0e:14:
01:9e:39:ee:6a:0d:c5:4b:34:00:cd:5f:a3:9f:2b:71:3b:b0:
e0:4e:8e:19:42:ac:9f:3d:e9:fa:ca:bb:51:c0:aa:ed:08:85:
2c:01:ad:f8:57:83:68:f4:4d:d5:e9:75:ac:18:f5:b1:09:55:
ff:98:b5:04:72:6e:8e:d3:88:45:9f:df:19:0a:7f:5c:76:fc:
0b:09:77:63:97:65:81:a1:ae:71:c8:61:bc:1e:bd:0a:ac:08:
e9:4e:2f:ea:43:99:9c:5e:ea:d2:34:89:27:55:67:89:99:37:
fa:0b:68:b2:a3:f1:1d:e6:ab:85:5d:c0:83:e4:80:33:53:01:
e7:b4:b2:95:90:0d:67:ab:aa:24:e8:16:9a:b5:33:1d:c2:7d:
ed:95:0b:e8:2a:12:6e:28:bb:55:55:c2:2f:da:a1:f9:b1:92:
4e:1f:0f:bd:44:77:48:c4:55:37:5a:4d:1b:39:67:c9:3d:34:
3c:ae:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:25 2025 by rpki-client