Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/4BLZJi41_vWONfweoJM3zBb_vj0.roa
File: 4BLZJi41_vWONfweoJM3zBb_vj0.roa (raw, json)
Hash identifier: nmJ7Cwv3ZEqUXMRqyY034vsKxXf6IoPwGIioh41JaEI=
Subject key identifier: E0:12:D9:26:2E:35:FE:F5:8E:35:FC:1E:A0:93:37:CC:16:FF:BE:3D
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 194C
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/4BLZJi41_vWONfweoJM3zBb_vj0.roa
Signing time: Tue 10 Mar 2026 05:22:03 +0000
ROA not before: Tue 10 Mar 2026 05:22:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 154321
IP address blocks: 103.139.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6476 (0x194c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Mar 10 05:22:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E012D9262E35FEF58E35FC1EA09337CC16FFBE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:41:48:66:df:58:03:78:06:db:dc:7d:5f:
ff:6a:ee:ca:7d:67:97:13:59:5f:73:f5:12:f7:80:
88:ee:b9:25:30:14:fb:cd:79:d6:63:6f:10:23:c6:
55:d5:7e:7a:4d:3a:df:d7:ec:9d:4c:3e:b9:35:db:
4b:c3:34:97:c4:b6:6e:09:b9:41:e2:8b:0d:be:bd:
73:9a:ef:89:94:03:e5:19:5f:ef:d2:ca:d9:67:c9:
50:8a:5d:07:4d:04:f8:d8:fd:0c:53:33:6d:df:b6:
01:09:02:c2:09:e0:44:d9:87:47:f4:64:22:bc:6d:
37:21:8d:6a:a7:79:20:bf:85:7d:e5:dd:9b:65:c3:
38:f7:4e:49:1b:30:12:df:2d:a0:6b:6e:40:0c:28:
61:c2:e3:f1:61:4d:6a:c4:21:41:cd:70:64:4d:47:
88:9d:53:6d:f7:8c:0f:f3:6a:27:71:fc:64:6a:d5:
27:96:a7:8e:ee:9c:f3:5d:b9:03:65:f4:fa:72:cf:
3f:2d:78:44:b9:4f:e1:27:b5:ef:20:9f:72:ab:2f:
d1:af:2e:56:38:a5:25:c5:6d:54:a5:ac:60:48:1d:
a8:00:a1:e8:31:f5:5f:2f:e8:38:54:ce:04:75:22:
d4:47:be:11:d1:44:34:86:56:32:f9:c6:8e:73:ea:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:D9:26:2E:35:FE:F5:8E:35:FC:1E:A0:93:37:CC:16:FF:BE:3D
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/4BLZJi41_vWONfweoJM3zBb_vj0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:2d:0f:34:b8:07:0c:e4:18:9d:9f:90:18:aa:37:c8:28:69:
e8:ae:54:5a:fd:c6:89:64:cf:ed:47:25:9c:1b:12:2f:e8:a9:
79:64:fe:e7:0d:4a:0a:cc:30:1b:d1:83:18:20:27:68:02:f5:
eb:d7:13:6d:37:a2:22:18:60:a4:d2:8b:e9:39:8a:df:c6:d1:
47:30:c2:99:62:cb:1e:fe:6a:12:22:be:98:bb:bd:ba:44:35:
69:7f:66:3b:a8:6f:82:c0:d8:14:66:d0:1a:94:d6:7a:0a:0e:
40:b4:b6:b5:f5:2a:fa:6f:2b:9c:6e:b2:fc:cd:d9:58:51:93:
84:03:36:4f:e1:2a:50:39:3a:8a:4e:ee:3c:1a:11:97:7f:d8:
ab:5b:f2:50:dc:55:19:19:40:2d:9e:ab:d2:8d:08:de:6c:f4:
00:db:e3:78:51:be:62:b2:cc:75:1a:59:b0:47:7b:91:c9:34:
c1:8e:dc:61:3f:0e:ce:19:fc:0a:6e:55:48:d6:f7:b2:b4:7e:
b9:f6:a1:9a:b9:14:a3:b3:dc:5b:3f:11:be:ac:e4:8e:9c:51:
78:bd:86:b4:4a:d7:10:4b:b3:04:81:91:16:ca:ac:19:f3:b7:
3b:dd:59:8c:6d:42:45:5c:4c:52:b5:2b:70:ca:c6:ed:0c:f8:
db:7d:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:16 2026 by rpki-client