Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa
File: Ch_uvgOlyJqiV-yefalmn6WVTYs.roa (raw, json)
Hash identifier: VBrzBhBwXiP2oCqtSETCfcBKX+9TGPU/nx7Y/1DEDTI=
Subject key identifier: 0A:1F:EE:BE:03:A5:C8:9A:A2:57:EC:9E:7D:A9:66:9F:A5:95:4D:8B
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 15D9
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa
Signing time: Sat 13 Sep 2025 03:03:57 +0000
ROA not before: Sat 13 Sep 2025 03:03:57 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 137443
IP address blocks: 103.197.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5593 (0x15d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Sep 13 03:03:57 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0A1FEEBE03A5C89AA257EC9E7DA9669FA5954D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:fd:d6:7c:86:44:25:ab:58:bc:95:a1:d1:
ad:b6:f6:17:fc:ea:a6:bd:99:61:64:8f:3c:9f:5b:
67:1b:12:e8:a1:63:3c:0b:8f:66:6c:b3:db:16:ab:
99:fa:57:dc:55:a9:75:97:14:ab:e3:c8:69:d0:b1:
a0:0c:16:2e:92:50:10:25:e3:fa:2b:dd:26:6d:ff:
2e:01:88:a7:7f:c6:74:f7:71:c2:6c:d6:7d:0e:66:
f3:c6:a9:15:0c:54:2b:67:d4:40:4e:b0:51:4b:e1:
15:1b:ee:50:11:38:7e:ed:01:77:27:bc:8d:c2:f9:
d0:85:9c:45:bc:c8:f8:bb:e8:32:7e:a9:27:4b:4d:
85:7b:d3:05:24:91:ce:5a:46:d0:bd:85:b8:87:c2:
b6:dc:65:d4:3a:a9:e4:fe:95:f8:d8:b8:48:41:5c:
df:54:4e:7d:64:4f:35:89:b0:ff:9e:73:6d:6b:e8:
2d:48:14:b1:2e:ad:d4:09:b7:c2:68:ee:9e:14:02:
8b:69:2c:bc:3a:81:59:27:db:bb:2a:54:e3:cc:0d:
b2:d2:bf:94:1b:d1:e1:15:ad:8e:81:92:b5:20:66:
ce:06:e7:2c:44:3a:0d:e0:77:8e:6a:38:14:3b:64:
b2:4c:ad:f0:d2:b6:48:dd:52:8f:bf:1c:d9:fa:d5:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:EE:BE:03:A5:C8:9A:A2:57:EC:9E:7D:A9:66:9F:A5:95:4D:8B
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/Ch_uvgOlyJqiV-yefalmn6WVTYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:61:e2:b0:0c:8e:05:ab:27:2d:52:6b:bd:29:d0:ee:15:d8:
fe:55:25:b5:cc:bd:6c:54:ac:10:75:5e:1a:70:59:ba:b5:a1:
a0:b7:3e:03:42:a1:cc:bc:9c:df:0f:d2:f8:3e:e6:45:5a:a3:
db:3d:54:38:a9:c6:1c:c3:f0:de:57:96:28:18:83:b3:e0:cf:
21:2c:3d:24:ea:7d:8f:59:63:fd:39:5b:5c:36:a8:65:b0:1d:
ae:69:28:e1:02:bd:fe:c6:e2:65:5d:25:db:f7:07:a6:97:a8:
20:43:ce:7e:1c:7b:d1:08:61:96:22:32:7a:20:41:cb:6e:cb:
7c:80:b2:00:52:be:fb:f2:3c:75:8a:b4:b9:15:fc:a5:48:9a:
3c:2f:4d:b2:dd:39:89:ab:3b:59:f2:33:50:30:69:42:6a:72:
49:2b:0b:c9:0e:db:ce:22:51:f4:90:77:16:5c:8b:24:dd:ba:
f4:e9:0e:df:84:4d:8b:2d:35:34:1f:07:ae:fb:5a:30:18:a8:
4b:54:6c:7b:e3:2c:dc:d3:a4:65:9f:8b:29:5c:4f:2b:62:f3:
01:7a:77:0c:6b:35:bb:a6:f2:b0:ea:a5:e9:5e:7e:7a:4b:47:
d1:98:b2:84:e7:08:be:99:30:3d:01:b9:9b:0a:7b:03:01:63:
aa:01:38:eb
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDJG
QjA1REUzQzU0NEE5RjFDMzQ0QTYzRUI1RjZDRkREMzQ4MTE1NjAeFw0yNTA5MTMw
MzAzNTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDBBMUZFRUJFMDNBNUM4
OUFBMjU3RUM5RTdEQTk2NjlGQTU5NTREOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK+P3WfIZEJatYvJWh0a229hf86qa9mWFkjzyfW2cbEuihYzwL
j2Zss9sWq5n6V9xVqXWXFKvjyGnQsaAMFi6SUBAl4/or3SZt/y4BiKd/xnT3ccJs
1n0OZvPGqRUMVCtn1EBOsFFL4RUb7lAROH7tAXcnvI3C+dCFnEW8yPi76DJ+qSdL
TYV70wUkkc5aRtC9hbiHwrbcZdQ6qeT+lfjYuEhBXN9UTn1kTzWJsP+ec21r6C1I
FLEurdQJt8Jo7p4UAotpLLw6gVkn27sqVOPMDbLSv5Qb0eEVrY6BkrUgZs4G5yxE
Og3gd45qOBQ7ZLJMrfDStkjdUo+/HNn61WNrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCh/uvgOlyJqiV+yefalmn6WVTYswHwYDVR0jBBgwFoAUAvsF3jxUSp8cNEpj
619s/dNIEVYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE3
MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0F2c0YzanhVU3A4Y05FcGo2MTlzX2ROSUVWWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNzEvQ2hfdXZnT2x5SnFp
Vi15ZWZhbG1uNldWVFlzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfFtjANBgkqhkiG9w0BAQsFAAOCAQEAq2HisAyOBasnLVJrvSnQ7hXY/lUl
tcy9bFSsEHVeGnBZurWhoLc+A0KhzLyc3w/S+D7mRVqj2z1UOKnGHMPw3leWKBiD
s+DPISw9JOp9j1lj/TlbXDaoZbAdrmko4QK9/sbiZV0l2/cHppeoIEPOfhx70Qhh
liIyeiBBy27LfICyAFK++/I8dYq0uRX8pUiaPC9Nst05ias7WfIzUDBpQmpySSsL
yQ7bziJR9JB3FlyLJN269OkO34RNiy01NB8HrvtaMBioS1Rse+Ms3NOkZZ+LKVxP
K2LzAXp3DGs1u6bysOql6V5+ektH0ZiyhOcIvpkwPQG5mwp7AwFjqgE46w==
-----END CERTIFICATE-----
Generated at Tue Sep 16 01:35:40 2025 by rpki-client