Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/ygzuSAezTQVw9sGe5bHOCcS_A7Y.roa
File: ygzuSAezTQVw9sGe5bHOCcS_A7Y.roa (raw, json)
Hash identifier: NaClQTXt5j4ijeXmhVb8fyQ6bfKJeWWUM7gSABTcGQY=
Subject key identifier: CA:0C:EE:48:07:B3:4D:05:70:F6:C1:9E:E5:B1:CE:09:C4:BF:03:B6
Certificate issuer: /CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Certificate serial: 27D4
Authority key identifier: 26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ygzuSAezTQVw9sGe5bHOCcS_A7Y.roa
Signing time: Tue 10 Mar 2026 02:20:35 +0000
ROA not before: Tue 10 Mar 2026 02:20:35 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 151231
IP address blocks: 103.104.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10196 (0x27d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Validity
Not Before: Mar 10 02:20:35 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=CA0CEE4807B34D0570F6C19EE5B1CE09C4BF03B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:c4:c0:68:ab:63:a1:00:9b:e2:9f:47:4f:
93:e1:9c:9e:00:42:ad:7d:14:89:d4:d1:0e:2c:a9:
61:06:70:4b:31:a9:9e:56:ca:56:d8:14:07:68:fb:
93:87:50:71:83:0b:21:b6:d6:03:89:e5:7d:1f:46:
31:11:ab:23:4d:2c:1e:75:1c:5a:cf:6d:6e:73:03:
3f:da:4f:34:12:bf:3b:64:ec:f6:de:04:84:96:74:
b1:40:74:88:c6:8e:f0:fc:02:7d:d5:a1:4e:ec:b4:
57:95:82:8a:9e:5e:ea:47:d4:0e:08:d3:b3:13:3c:
29:27:04:a6:3a:ea:9a:f4:8b:c3:e4:1a:9f:62:32:
61:bd:ae:64:40:2c:d1:79:87:a7:82:6f:b9:e7:88:
87:ee:f6:b0:13:3b:13:80:9a:43:be:48:25:74:bb:
8c:bc:b9:9f:02:24:05:34:ad:eb:9c:75:4b:5c:23:
a3:f3:28:26:ad:1c:cc:38:61:61:cb:2a:0a:ba:95:
3b:51:34:1a:9d:30:d5:c2:fb:02:13:e1:2d:f7:d4:
70:81:b3:c3:17:d0:42:bd:75:b5:bf:54:b7:0c:16:
fa:87:73:7d:da:4a:07:28:52:b8:aa:6f:5c:8d:cc:
67:be:b9:33:ab:1f:4f:b5:78:76:02:b1:98:af:b6:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0C:EE:48:07:B3:4D:05:70:F6:C1:9E:E5:B1:CE:09:C4:BF:03:B6
X509v3 Authority Key Identifier:
keyid:26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/ygzuSAezTQVw9sGe5bHOCcS_A7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:6b:bd:1b:b2:dc:8b:ad:9a:6f:e7:df:02:fe:8e:c3:7d:d5:
b4:85:32:48:be:ca:c3:bc:09:64:84:9c:09:d1:76:9a:17:30:
ef:27:57:71:28:57:6e:27:54:63:76:8f:2d:e8:d0:a6:00:0a:
41:5f:86:9d:75:0d:ed:99:7f:ee:dc:94:5e:ea:b1:ec:c7:84:
81:8b:b0:37:9b:ea:07:67:62:b9:56:c0:3c:2f:c5:e4:b7:df:
31:67:9c:a4:a3:a2:9f:7a:81:ea:60:c8:4b:12:63:d8:3d:f1:
85:c8:2e:05:20:39:c4:30:0a:ef:07:da:7f:77:37:20:c9:68:
ad:b7:c3:4f:56:15:bb:3f:2a:ad:10:d2:a0:a6:66:e0:3a:be:
85:02:db:59:a5:bc:d8:e6:15:61:93:fd:af:e7:e9:b0:97:5e:
9b:95:dd:a7:24:dd:4f:6d:e6:58:1e:04:17:ca:93:7b:67:26:
33:45:52:c5:69:2e:5a:7a:35:07:6f:48:73:e9:7a:d4:82:03:
7b:c1:58:6c:ac:aa:92:ec:df:53:18:17:69:d8:df:90:9a:6d:
d9:37:a9:60:56:bd:97:6f:be:d3:2d:e8:19:4c:19:8d:7c:50:
27:4b:aa:28:37:de:26:d8:80:06:ae:f0:3c:78:e3:c5:fd:dc:
e9:6b:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:46:25 2026 by rpki-client