Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa
File: m-J4x3FhwTFullWg0U9W94xWX9I.roa (raw, json)
Hash identifier: HbhSeKqnZ9B9cPRJpASyX8XI3m9N2CfuC0NBikgxnSA=
Subject key identifier: 9B:E2:78:C7:71:61:C1:31:6E:96:55:A0:D1:4F:56:F7:8C:56:5F:D2
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 0570
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa
Signing time: Fri 01 Aug 2025 06:34:42 +0000
ROA not before: Fri 01 Aug 2025 06:34:42 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134768
IP address blocks: 103.236.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Aug 1 06:34:42 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9BE278C77161C1316E9655A0D14F56F78C565FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:1c:e0:b4:85:50:ac:40:1d:2f:1e:83:8b:
f8:0f:20:e0:97:cb:64:ec:cd:36:57:60:0e:9f:7f:
a4:fc:54:80:42:d2:dc:c3:54:17:dd:6b:26:3a:b2:
1a:a3:09:f9:af:17:a2:e5:63:ce:2f:36:14:46:88:
6d:c1:94:df:92:45:9f:bb:2b:ab:eb:34:59:af:32:
34:28:a2:bb:1e:3e:2a:75:36:b5:a5:46:8d:54:f1:
6a:14:5c:0b:74:7c:8e:78:1d:9a:c5:dc:ca:20:04:
8e:6a:3c:ac:53:d9:5d:88:b9:2c:7e:3a:5b:4c:99:
b4:e3:cf:c3:a9:17:93:3d:35:fd:2c:37:6e:df:44:
c8:6f:58:70:25:3d:33:6a:a2:0d:3c:ce:06:30:3c:
b0:f0:01:8b:89:fd:5d:78:e1:9c:29:e0:34:fa:29:
e7:26:9b:52:8f:36:0f:26:d2:cb:46:fc:89:95:09:
46:05:4c:b6:2c:05:8a:f0:08:b5:6a:ae:5f:88:6d:
f3:93:33:c0:25:a5:62:9d:fe:aa:f9:b5:59:78:2a:
1e:b1:85:56:a4:0d:65:3a:a0:32:9e:66:57:23:a2:
aa:e9:b8:54:9c:83:f9:9f:c1:5f:54:91:b8:7d:c0:
8a:ad:0f:a6:89:39:4e:9f:4e:01:6a:93:25:77:83:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:78:C7:71:61:C1:31:6E:96:55:A0:D1:4F:56:F7:8C:56:5F:D2
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/m-J4x3FhwTFullWg0U9W94xWX9I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.77.0/24
Signature Algorithm: sha256WithRSAEncryption
46:05:4d:10:24:31:13:f6:66:a2:75:32:ad:63:e6:a7:ee:3f:
62:4b:90:fe:69:ef:fb:f4:31:f0:c4:a4:93:c3:de:8f:07:36:
79:91:0b:83:a1:d0:04:f5:75:d0:4c:47:5a:ce:f3:44:f1:f4:
47:cd:bc:fd:c7:8f:78:5e:2c:f8:5d:2a:f8:3b:b0:ec:19:02:
bf:31:3c:ee:9f:d4:bf:78:b1:3d:21:bd:a4:91:75:54:46:7a:
72:02:4c:1d:02:0f:12:d2:ba:8b:bd:40:a2:dc:21:58:37:ab:
dd:42:1f:c7:a6:1d:11:c2:05:ed:0c:08:eb:66:0a:66:6b:37:
bc:05:c4:c1:6e:a5:25:cd:25:4d:12:ed:1d:f2:2b:9f:e8:da:
e6:5b:6a:fc:1a:9d:f0:e1:e1:1b:a7:30:ce:c8:77:f0:d3:8b:
4a:69:b6:07:9d:a5:14:37:2f:e5:fe:67:b5:ee:24:ba:bf:c0:
32:2b:56:86:60:c7:6f:b0:c0:2d:f1:e2:79:d5:c9:d6:77:c2:
00:af:a2:64:59:f8:a5:83:0c:cb:c3:b9:b2:83:f1:51:6b:9e:
8d:37:9f:0e:23:f6:c4:10:bb:e6:05:99:21:79:ba:5b:f5:bf:
86:27:74:d1:2f:03:a4:ab:e7:63:02:eb:d9:3d:5f:2f:ae:63:
f4:ed:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:34:59 2025 by rpki-client