Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/w4HEwKEO53uns6F5bPZtoS7brDc.roa
File: w4HEwKEO53uns6F5bPZtoS7brDc.roa (raw, json)
Hash identifier: jzLKZdvGdi8FSr1ESnAkZ8I3hS9jvXDJXr9MbrelEyI=
Subject key identifier: C3:81:C4:C0:A1:0E:E7:7B:A7:B3:A1:79:6C:F6:6D:A1:2E:DB:AC:37
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1E6D
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w4HEwKEO53uns6F5bPZtoS7brDc.roa
Signing time: Sat 13 Sep 2025 03:05:08 +0000
ROA not before: Sat 13 Sep 2025 03:05:08 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 103.24.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7789 (0x1e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Sep 13 03:05:08 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C381C4C0A10EE77BA7B3A1796CF66DA12EDBAC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:e4:38:d0:04:5a:11:18:23:b9:c4:ce:27:
18:ae:37:61:f8:31:2c:98:33:fa:5a:b4:89:95:07:
d7:81:e8:e7:3d:88:43:cd:b0:67:59:fd:be:89:bd:
a6:90:4b:4e:44:93:eb:59:03:fb:9c:ce:04:7e:db:
2a:a1:f9:88:c2:5b:7a:8e:7e:d0:4a:56:8e:4b:c0:
f3:75:bf:ad:22:b8:81:f3:53:fa:85:d4:5e:79:49:
c0:25:40:5b:09:ee:d1:3c:54:47:33:69:da:bd:33:
9a:ad:75:af:4b:73:28:c6:c7:13:8f:7b:82:67:01:
f6:0f:33:45:df:a9:a1:7f:49:3b:83:28:ee:4e:27:
e0:19:1d:4a:35:70:0d:49:51:0c:87:91:8e:66:ce:
37:1d:d2:15:9b:6f:bd:23:81:5b:ce:d7:2d:bb:cb:
0f:5b:70:44:4c:28:66:f7:dc:25:88:d2:e4:85:ff:
eb:4c:50:a9:53:74:ec:ea:9f:c8:31:29:42:62:f6:
19:62:0f:a4:97:45:59:a6:29:5a:f9:15:23:53:4f:
fe:ab:f0:99:55:e7:f7:b3:fa:af:9e:c2:b9:86:7b:
df:98:85:4d:9c:7f:df:f2:53:e0:a5:db:17:58:f9:
c2:e2:09:a4:5f:1c:0c:c5:0f:bd:85:07:49:8a:6c:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:C4:C0:A1:0E:E7:7B:A7:B3:A1:79:6C:F6:6D:A1:2E:DB:AC:37
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/w4HEwKEO53uns6F5bPZtoS7brDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.116.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c0:e1:a4:5b:b8:46:39:90:5f:e2:55:c3:84:37:f5:0d:67:
54:f8:c1:bf:2c:ca:6c:e7:43:22:a9:ca:56:4b:4d:ad:22:b5:
70:39:98:e1:5b:cf:fc:98:61:38:b9:87:fb:6a:a2:aa:86:e2:
1e:10:2c:88:9f:14:ff:55:4c:ee:02:af:6b:31:3f:e2:39:dd:
fa:a7:df:16:c5:66:8e:34:0d:db:e4:20:f4:45:31:11:dc:05:
ee:da:c1:c5:e4:1e:ec:b0:ff:69:f7:22:0f:b3:49:66:82:ba:
93:89:d1:26:ee:e2:61:9e:f7:9d:26:1c:f6:00:5a:5d:a0:bc:
c0:e9:61:e4:d7:4e:5a:9c:b4:3b:c1:f0:f7:04:df:8a:95:9f:
31:d5:10:cb:2a:19:14:d1:cc:bc:fa:48:86:49:ab:47:5f:05:
57:87:dd:59:c4:21:af:f8:c8:2a:03:4c:41:93:96:63:25:22:
9a:ee:75:55:42:f9:05:84:2e:7d:a9:93:73:49:46:e3:5e:7e:
42:a8:2b:95:ab:2b:72:dc:eb:7d:97:23:5d:93:47:8f:cd:10:
ae:8b:35:3e:8c:ab:26:b3:d0:de:ca:62:36:f3:16:f9:ee:ef:
05:75:24:84:5c:77:b4:fd:f4:91:5c:e9:bb:d4:b1:df:e2:a5:
54:ad:fe:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:30 2025 by rpki-client