Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/508/gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa
File: gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa (raw, json)
Hash identifier: W4N2kLS/TBnU7hLEU2XcWlrf1fkrk2tPC5ARdXrekA0=
Subject key identifier: 81:CB:F7:21:1B:41:30:FD:20:FD:03:F6:1D:79:09:E0:8B:91:94:A5
Certificate issuer: /CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Certificate serial: 1B0F
Authority key identifier: 9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa
Signing time: Sat 13 Sep 2025 03:09:15 +0000
ROA not before: Sat 13 Sep 2025 03:09:15 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 55996
IP address blocks: 103.40.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6927 (0x1b0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B4A3C36B42347ACEF36E84A66E69EE59BED8B76
Validity
Not Before: Sep 13 03:09:15 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=81CBF7211B4130FD20FD03F61D7909E08B9194A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:b2:91:3f:10:f8:4d:25:20:7f:86:54:34:
d0:93:69:7c:7d:13:4f:f7:51:5d:24:52:19:b8:d3:
19:1e:72:19:80:fe:4d:db:65:41:6d:67:74:a0:ad:
83:5a:83:dc:49:69:a0:8e:d2:30:ac:9c:b8:3f:57:
98:ce:da:2f:88:9a:21:60:a0:ae:6f:6e:d1:71:00:
a2:38:b4:88:0d:b5:15:ac:cc:ec:c4:49:44:d0:c6:
fd:e2:5b:76:09:e7:6b:e0:49:7e:6a:19:68:7a:9b:
78:4d:7d:96:eb:89:5e:bc:63:79:72:d1:f6:41:45:
e4:9f:e1:df:ab:7e:ad:72:41:2f:b0:61:2f:eb:a0:
bd:8b:8d:05:88:d3:dd:7c:98:a2:f5:d0:c1:50:4f:
e5:f2:0c:20:21:fa:fe:c3:d8:90:3d:a3:dd:bb:b7:
1e:e1:e8:e3:2f:11:3c:8e:4e:b0:f0:6b:f6:39:fd:
2a:e9:24:b4:04:a4:42:ba:6d:a5:b7:7a:30:4e:54:
18:ba:4e:1b:7f:fb:de:15:f4:08:ee:9a:12:3f:fb:
29:64:1b:fd:f8:e5:13:7b:ed:a2:a2:e8:a3:fc:85:
e4:6b:cd:28:85:cd:b1:80:fd:68:89:a6:ed:de:5a:
a8:34:d9:99:fd:e8:05:31:bb:c6:26:a7:1d:b9:82:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:F7:21:1B:41:30:FD:20:FD:03:F6:1D:79:09:E0:8B:91:94:A5
X509v3 Authority Key Identifier:
keyid:9B:4A:3C:36:B4:23:47:AC:EF:36:E8:4A:66:E6:9E:E5:9B:ED:8B:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/m0o8NrQjR6zvNuhKZuae5Zvti3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/m0o8NrQjR6zvNuhKZuae5Zvti3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/508/gcv3IRtBMP0g_QP2HXkJ4IuRlKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:de:0c:98:a6:c6:ff:d2:53:80:db:d7:45:60:c5:db:53:8a:
23:61:57:a6:df:b7:66:44:a1:9e:ea:c0:8b:9b:4d:2b:cf:be:
b9:f8:90:dd:03:44:b7:5f:1a:95:89:a7:33:36:0e:18:ea:94:
9e:87:7d:df:17:93:76:40:04:1d:c1:6e:41:52:96:22:b6:e2:
93:83:4a:ba:52:1b:4e:5b:b1:63:69:a3:be:f3:a5:8a:da:5a:
68:28:af:85:a7:7b:f4:5b:a2:1c:9d:0b:1b:ba:cd:c6:4b:d9:
51:c5:6d:b6:b2:19:70:f9:ad:3c:34:ad:24:4a:62:fd:b6:a3:
7f:c7:35:fe:ab:61:88:ae:bf:46:71:7e:e3:ab:0d:1e:60:f0:
da:4a:76:ce:6c:74:25:08:c0:ac:3d:0f:8b:79:21:ba:39:30:
5b:07:3c:68:00:23:61:4d:f6:e7:d1:ee:f5:f4:62:55:dc:70:
fa:ac:f0:25:f3:4f:2d:d6:26:f4:8f:8e:f6:ef:09:d8:cc:90:
79:0d:31:c6:22:63:27:5a:c5:0f:93:cf:18:a7:b5:fc:0e:4f:
2c:12:e1:6d:ad:84:71:dc:88:e0:1a:db:d8:51:44:98:8a:dc:
bc:fd:46:da:5c:a1:c1:94:f0:99:a5:ce:01:6f:44:e1:4d:36:
4f:0d:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:36 2025 by rpki-client