Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/rNcU7LCcDWDNxk--oG4hRJw9Reg.roa
File: rNcU7LCcDWDNxk--oG4hRJw9Reg.roa (raw, json)
Hash identifier: t8tt5Ejpw2ED1WlcxX3rKIJGNnCb26GZm3BP0SVncDY=
Subject key identifier: AC:D7:14:EC:B0:9C:0D:60:CD:C6:4F:BE:A0:6E:21:44:9C:3D:45:E8
Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075
Certificate serial: 0FC1
Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/rNcU7LCcDWDNxk--oG4hRJw9Reg.roa
Signing time: Tue 10 Mar 2026 05:22:29 +0000
ROA not before: Tue 10 Mar 2026 05:22:29 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 154321
IP address blocks: 103.97.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4033 (0xfc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075
Validity
Not Before: Mar 10 05:22:29 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=ACD714ECB09C0D60CDC64FBEA06E21449C3D45E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:fb:64:05:91:d3:f9:cf:c3:00:5d:45:60:
2c:14:67:ee:9c:1a:53:98:03:1f:5c:e4:40:90:6c:
22:f9:58:34:2d:04:1a:e7:92:c3:2f:11:23:dc:6d:
da:be:7b:9a:a7:cf:2f:4c:3e:b4:85:ae:33:87:1c:
a7:7e:8e:d4:3f:45:39:f0:57:59:56:cb:11:76:af:
a9:45:67:f1:e2:92:a8:80:6b:69:e8:29:c4:51:0d:
a7:09:41:33:e2:0c:59:bc:e8:64:fa:b6:b1:fc:b4:
f1:1e:0e:01:02:d6:60:bc:1d:a5:c9:0b:97:33:50:
55:96:61:0e:3a:04:e5:0b:0c:16:38:c8:61:88:82:
fa:ce:16:9f:a0:14:d1:72:d7:78:31:f5:71:d2:e5:
49:12:46:68:b3:44:f0:8e:5f:a0:97:a3:66:a2:05:
a6:1e:13:50:bd:9c:37:7d:77:48:a7:27:05:e1:6a:
3e:e8:41:37:2f:0a:ef:09:0e:24:e0:f2:57:e0:b3:
32:20:64:3b:91:ab:3d:a3:db:00:83:f9:56:49:e0:
47:be:5f:8e:10:c7:0e:d1:de:93:7e:82:20:0f:e4:
26:fc:b2:19:67:7c:5d:50:c4:da:12:c6:95:32:d6:
d6:a6:64:f4:55:48:a5:91:17:d0:c0:61:80:b8:fd:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:14:EC:B0:9C:0D:60:CD:C6:4F:BE:A0:6E:21:44:9C:3D:45:E8
X509v3 Authority Key Identifier:
keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/rNcU7LCcDWDNxk--oG4hRJw9Reg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
86:c7:2e:85:77:d3:f8:39:cf:8e:5a:ba:46:e9:d2:cc:35:0c:
e5:04:36:15:19:84:94:ca:03:4b:05:0c:13:74:ef:6b:e6:ef:
68:40:34:d2:79:61:90:1d:9f:bd:a1:3a:16:b6:4b:f4:ca:54:
11:1b:8e:22:f7:d2:c6:c5:76:55:00:cd:25:80:b8:86:ba:4f:
dc:a3:51:70:97:58:88:25:fd:34:cf:0b:ad:91:b6:95:a6:3c:
6b:9f:0d:08:e7:33:ab:31:36:76:c5:e0:f0:81:7b:ec:77:7b:
89:fc:9f:08:b0:78:96:b2:7c:d7:51:f5:a6:63:ff:ec:f8:44:
a7:60:d4:34:cb:0d:af:e1:40:c0:89:ac:d0:fe:1f:c4:cb:a3:
5a:18:1d:e1:fe:92:05:a7:1a:b4:df:58:b8:d7:c0:d0:36:42:
0f:3a:eb:f4:16:5d:99:ff:2c:44:93:3c:42:5a:7c:e8:63:f0:
3c:06:df:5e:ac:21:f3:f1:6a:9b:17:04:88:26:9c:4c:5f:50:
6c:6f:9c:a4:bd:61:4e:ba:2d:e9:7f:4b:5c:ce:83:26:2e:59:
63:82:5f:de:27:dc:d2:3f:c8:a3:7d:d8:3e:13:5e:1a:8b:bc:
79:1f:f0:8f:98:ed:41:7c:00:4a:74:47:b0:b1:73:77:2c:b4:
eb:39:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:27:22 2026 by rpki-client