Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/-COzMx0tBZcIo3OOzmKm-gqTvW8.roa
File: -COzMx0tBZcIo3OOzmKm-gqTvW8.roa (raw, json)
Hash identifier: o1xtCITqix+5DvTTfJS2mHzLqBNGHcEBzLUOsO6EWHg=
Subject key identifier: F8:23:B3:33:1D:2D:05:97:08:A3:73:8E:CE:62:A6:FA:0A:93:BD:6F
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 1C7C
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/-COzMx0tBZcIo3OOzmKm-gqTvW8.roa
Signing time: Sat 07 Mar 2026 16:16:43 +0000
ROA not before: Sat 07 Mar 2026 16:16:43 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 146834
IP address blocks: 103.139.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7292 (0x1c7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Mar 7 16:16:43 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=F823B3331D2D059708A3738ECE62A6FA0A93BD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:ff:b9:cd:fc:c4:77:ca:16:ef:89:f8:a1:
09:70:33:04:c5:34:d0:9c:d9:76:02:17:1a:99:3b:
89:d0:ec:54:58:66:37:98:07:01:05:f4:c0:3a:2e:
b1:a6:c1:40:e6:cc:5a:a1:9e:00:a9:96:99:52:4a:
fc:ae:33:f5:3d:22:96:cc:dc:af:66:61:c4:92:1c:
fb:d4:a4:71:3b:45:fb:2e:ef:47:70:7e:cc:ed:15:
e0:8b:78:c7:8b:cb:65:23:92:63:81:6c:84:2c:99:
14:cb:1e:86:53:b4:c0:df:ad:f6:6c:78:38:1e:6f:
29:3b:9a:50:ba:0d:9a:b7:8c:f0:8e:fc:18:6e:99:
ba:1a:6c:b9:13:c5:35:e8:8d:ff:52:cc:a3:d1:2d:
49:91:81:3e:62:c6:a8:8b:3b:85:06:ea:0e:34:3c:
3b:18:f1:72:24:fa:13:d7:7a:23:bd:2b:e0:b6:11:
40:a3:ae:5b:d1:64:7d:fc:a0:19:74:de:5f:56:14:
d1:5e:ea:af:e5:f1:7a:66:59:c2:94:e9:56:82:77:
5f:cb:62:2a:20:2f:59:07:b0:77:11:05:be:79:23:
a7:b0:5a:27:49:ad:98:a3:69:8c:c7:13:74:85:a0:
66:54:dd:32:9c:2e:52:88:be:cb:7c:88:af:65:e5:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:B3:33:1D:2D:05:97:08:A3:73:8E:CE:62:A6:FA:0A:93:BD:6F
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/-COzMx0tBZcIo3OOzmKm-gqTvW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.136.0/24
Signature Algorithm: sha256WithRSAEncryption
63:31:84:89:b2:ea:32:d2:bc:0d:e1:94:c6:a1:41:46:de:3b:
85:07:1e:e2:17:9e:d3:5c:e4:49:e5:c5:1c:2d:33:32:24:ad:
72:a6:43:5d:a2:b0:4d:14:c7:13:ce:ce:20:91:14:2e:03:58:
d3:4a:3f:06:56:c5:3f:3c:8e:fd:d2:89:8d:c4:46:c7:43:0b:
9a:60:70:52:b2:fa:e2:d2:e4:f7:25:11:89:87:89:75:d0:90:
60:b4:47:19:03:98:6a:91:1f:f0:1f:01:4c:2d:0d:4e:55:fe:
e5:fb:6f:ae:8f:0d:a3:f5:cf:25:f4:8a:3c:13:14:61:ff:b4:
0f:e1:d8:c9:58:79:fe:f5:13:6e:f7:e7:8e:53:79:2c:c5:eb:
ac:a9:80:8f:1d:c0:cd:8d:04:f5:29:ad:91:f8:52:a4:88:e7:
89:ce:32:e3:e3:17:7f:3f:0e:ca:5a:04:71:4c:7c:29:3d:10:
e2:15:99:5b:19:96:33:31:1e:5f:74:cd:b1:0a:46:e5:b4:9f:
e1:c3:02:80:c1:88:e6:36:0d:9b:6b:dc:76:fd:8c:a5:df:f6:
9e:bc:d4:23:1e:38:2f:f2:61:3e:49:2e:cd:c9:7e:ac:e1:81:
e2:fe:1f:af:a0:a1:e3:f1:6a:7c:9d:45:78:1e:6b:93:e8:0c:
90:8a:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client