Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa
File: EA8sm7PzBaXuOYCraL71UF0R5XU.roa (raw, json)
Hash identifier: vjzXDi6KFY88S9l7oJU5rOi44DWy5kPljwK3csb8lAI=
Subject key identifier: 10:0F:2C:9B:B3:F3:05:A5:EE:39:80:AB:68:BE:F5:50:5D:11:E5:75
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 164F
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa
Signing time: Mon 08 Sep 2025 09:24:02 +0000
ROA not before: Mon 08 Sep 2025 09:24:02 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 13335
IP address blocks: 103.219.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5711 (0x164f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Sep 8 09:24:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=100F2C9BB3F305A5EE3980AB68BEF5505D11E575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:46:09:46:a9:52:6d:24:ba:05:10:01:e0:
a5:7c:a7:35:d1:a2:72:b8:4f:5c:f2:ec:4f:e1:6a:
d0:cd:f9:6e:ba:10:6d:12:85:db:1f:3e:23:d7:8d:
f1:0f:11:3e:45:03:5b:9e:e6:0e:3f:04:e7:3f:24:
46:7f:28:99:1f:53:9a:6a:6c:8d:ad:96:e9:9f:45:
74:c2:0f:62:09:7c:d9:cf:e2:18:cd:4f:c1:dd:72:
98:2c:7e:4f:27:6e:f4:2d:87:da:b6:97:fb:78:0e:
e1:4f:83:a7:12:96:a6:10:03:d6:c8:64:f5:84:4a:
77:5d:5c:22:a3:25:30:d9:df:28:69:a4:65:5e:06:
59:ac:ef:53:9a:5c:a1:42:0c:1b:d0:60:d8:1f:71:
58:d9:89:e4:6f:fc:66:84:18:18:78:5f:07:d1:4d:
58:c6:ff:cc:d3:a3:73:64:54:c8:d1:76:5b:fd:16:
13:20:d3:8c:1b:64:c7:69:67:8c:5c:9a:b9:b4:a5:
fd:e1:9a:af:a3:95:93:a7:d9:c6:27:26:b0:78:31:
cc:38:8f:f6:ad:e2:d3:13:71:18:59:0c:1a:a2:e4:
95:90:ad:24:22:63:3a:98:4e:c4:0a:f1:a4:7b:e9:
ab:40:4b:0d:51:cb:29:f1:4e:45:a8:84:21:db:7f:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:2C:9B:B3:F3:05:A5:EE:39:80:AB:68:BE:F5:50:5D:11:E5:75
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/EA8sm7PzBaXuOYCraL71UF0R5XU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:87:06:b5:ff:c8:d4:74:6e:94:ef:5a:60:74:55:00:42:7b:
a7:3c:eb:a1:83:64:b3:82:3c:5c:e7:db:f2:85:4b:25:14:44:
47:aa:7d:b3:49:74:eb:0d:59:0d:8d:3a:89:be:01:18:f7:bf:
5c:94:da:a9:e6:ae:1b:7a:01:14:ed:65:64:26:5f:d4:cd:82:
9a:bc:e3:8a:ee:91:fe:97:a0:59:d6:7d:e5:37:b5:7d:af:57:
26:a0:df:f3:13:1c:47:18:a6:f7:d3:6b:de:56:73:7f:0d:7b:
42:03:b5:68:ae:b9:e6:39:c8:5c:c7:3b:17:f6:58:a6:b4:f4:
6c:31:b5:2b:97:fb:23:5f:60:65:7e:09:39:c2:04:b0:77:28:
82:54:12:66:96:75:e5:98:a9:45:c2:0a:4c:ec:0e:c0:3f:72:
74:1d:1c:9e:fb:17:50:36:18:f3:28:31:50:5d:4c:57:23:2f:
4f:5e:5c:e9:b6:44:b6:be:bd:ca:9c:86:e5:9a:19:a5:92:5c:
fc:69:e1:be:80:47:91:ba:bc:47:5b:dd:e9:7a:e9:0d:40:ca:
59:3e:9b:83:a2:ab:55:93:f5:f6:ab:21:48:2c:59:19:a3:a6:
69:03:64:14:b1:fb:de:5c:87:54:b5:81:20:bb:eb:f0:fd:8b:
82:92:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:29 2025 by rpki-client