Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/jJzvidoZux_W4ddUbnGBk544434.roa
File: jJzvidoZux_W4ddUbnGBk544434.roa (raw, json)
Hash identifier: hhAN3M73k1KHEzRrY7TNk4bsKWd7YptfctcHRCOPksA=
Subject key identifier: 8C:9C:EF:89:DA:19:BB:1F:D6:E1:D7:54:6E:71:81:93:9E:38:E3:7E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1E9C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jJzvidoZux_W4ddUbnGBk544434.roa
Signing time: Sat 13 Sep 2025 03:05:18 +0000
ROA not before: Sat 13 Sep 2025 03:05:18 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 103.5.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7836 (0x1e9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:05:18 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=8C9CEF89DA19BB1FD6E1D7546E7181939E38E37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:a5:f9:12:39:e1:f3:b7:fa:3a:80:42:a2:
15:c8:9e:b7:73:e2:53:69:4f:27:75:b2:d9:12:b7:
9c:78:e6:3e:a0:2e:a1:d2:92:92:52:33:4e:e3:bc:
de:22:cb:a3:38:59:bd:1e:2e:33:12:2c:85:ef:45:
e5:1d:01:24:5d:78:a1:fb:60:26:ad:79:4b:23:62:
98:7e:70:9a:d2:1e:5f:c0:21:09:75:12:f7:08:54:
0f:db:8a:a8:f0:47:21:97:a3:61:dd:d1:a8:05:eb:
d8:0e:61:5e:58:ad:38:6b:5a:cf:fb:a3:3a:ae:43:
db:fa:61:ae:48:70:07:5e:82:39:a5:6b:f1:d9:fe:
cb:4e:60:2e:26:47:db:0e:d4:cc:de:5a:5d:37:56:
35:7c:ff:46:30:32:f9:09:30:be:fc:1f:a8:ad:23:
de:81:25:3b:af:fe:f9:5a:dc:91:e4:61:67:7f:ed:
e1:ff:40:b7:73:7c:c2:ca:fd:8d:eb:01:9a:24:51:
38:36:9c:d8:5a:98:4a:09:dd:e9:ec:d9:8a:5f:5b:
ed:0e:87:e7:bb:cf:68:b6:a8:c9:89:ac:d3:95:29:
af:df:17:41:af:81:33:4e:53:d0:67:59:3b:56:47:
9b:c5:38:5f:54:95:58:b1:12:6a:d7:43:7b:f1:a9:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:EF:89:DA:19:BB:1F:D6:E1:D7:54:6E:71:81:93:9E:38:E3:7E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/jJzvidoZux_W4ddUbnGBk544434.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:04:b0:08:ed:69:97:60:3f:0f:a2:2d:42:18:62:c8:a0:4d:
75:9a:66:86:ae:e4:b2:e0:ef:d1:ce:ed:d0:d3:4b:44:37:fa:
51:fc:45:ca:0c:81:d9:a9:cd:8c:58:4d:6d:af:be:c2:cd:cb:
93:22:ab:23:5b:35:dd:c8:b0:6b:80:d6:c7:a1:2e:46:54:79:
4b:41:77:fb:d9:2c:a6:89:c0:66:b1:5b:45:70:85:63:c3:55:
cd:03:fe:ee:e1:cb:80:05:5b:7b:a1:7b:64:5b:1f:f8:a3:c3:
a4:4f:3a:1e:e8:76:65:72:09:4b:bd:b8:ff:c4:cb:dd:5c:60:
e2:f2:fb:a0:55:75:d4:be:e8:68:01:7b:06:9f:30:5f:fa:31:
b7:c8:da:cf:77:89:64:cd:ed:f5:13:40:a6:7c:31:78:ee:f0:
ed:79:dd:b9:8a:65:09:c8:66:a1:02:8f:77:89:5e:71:ff:a6:
4e:0e:40:2a:72:8b:72:0d:60:2e:12:ab:57:2a:e7:06:fc:2f:
f9:0d:f5:6c:26:db:69:36:b6:2e:d0:c8:2e:e7:23:c1:af:83:
aa:81:2c:0b:2e:86:d2:6d:93:de:96:78:00:55:79:fb:3d:f8:
ae:f8:b3:e3:8f:6c:50:74:f5:4a:c6:f8:03:0d:08:60:41:b6:
68:d8:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:51:54 2025 by rpki-client