Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/IlPO1AmLglxYNr-pATX8xLR6erQ.roa
File: IlPO1AmLglxYNr-pATX8xLR6erQ.roa (raw, json)
Hash identifier: 4O3c5Dg3YlKercskTjYS1XxG5j6Q/Z2Tc9EoPANpsVc=
Subject key identifier: 22:53:CE:D4:09:8B:82:5C:58:36:BF:A9:01:35:FC:C4:B4:7A:7A:B4
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 194B
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/IlPO1AmLglxYNr-pATX8xLR6erQ.roa
Signing time: Tue 10 Mar 2026 05:22:03 +0000
ROA not before: Tue 10 Mar 2026 05:22:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 154321
IP address blocks: 103.197.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6475 (0x194b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Mar 10 05:22:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2253CED4098B825C5836BFA90135FCC4B47A7AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:3f:60:ec:a5:0d:bc:6b:9b:ca:cb:97:be:
1a:df:11:ae:b8:e6:32:d6:e4:a5:4d:32:a5:64:27:
6f:1e:ae:b4:c9:e2:50:7f:52:ec:20:c5:3c:33:24:
d8:fe:0f:9e:3f:38:a8:59:39:e7:5f:c9:63:23:f9:
d1:1f:d9:63:51:44:a8:97:17:ac:74:02:2f:19:1d:
0c:e3:a7:fc:6b:10:a4:26:24:e9:7b:5b:80:51:6b:
bc:a9:06:c5:6c:24:1a:5f:98:ce:c9:b8:db:49:c9:
f9:13:f0:5b:81:bf:b7:db:66:c9:58:a9:79:91:8f:
e1:37:08:86:43:0b:28:c1:49:0f:2f:8c:7d:6b:e5:
f4:6f:59:54:3d:60:a8:3f:c8:7a:5b:d6:40:1e:71:
76:da:2d:59:73:0b:80:01:f6:6e:f2:d8:88:50:89:
95:78:d9:64:99:36:43:7d:0d:6f:41:f6:66:a8:38:
67:94:75:c1:e8:7f:81:10:f0:32:6b:0c:6a:b9:3b:
06:ab:d0:55:37:a5:3c:27:02:f4:23:63:16:cc:2b:
38:74:ef:a7:8f:c0:3d:88:17:61:64:a4:4b:0a:6c:
5c:7a:dc:fa:79:c5:a5:94:de:ba:fd:4f:67:01:02:
e5:87:35:95:7a:c7:7d:eb:4f:bc:84:a1:b0:c3:10:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:53:CE:D4:09:8B:82:5C:58:36:BF:A9:01:35:FC:C4:B4:7A:7A:B4
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/IlPO1AmLglxYNr-pATX8xLR6erQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.180.0/22
Signature Algorithm: sha256WithRSAEncryption
61:bc:fc:82:48:37:89:fb:03:51:01:d0:2f:a4:98:8e:b8:39:
f6:e4:a2:4d:e3:18:16:3e:63:39:4f:a6:ff:0d:32:e7:71:fc:
22:db:17:4e:a9:96:fb:73:0b:74:4a:49:8b:d6:6e:29:ee:d0:
78:d8:c8:0a:c8:e7:c5:6d:17:0b:9b:e9:a6:fa:69:f7:fe:e4:
1f:00:25:2a:b0:9d:3f:ce:bc:e1:d5:0d:92:02:92:4e:66:9c:
0e:db:80:59:a2:36:26:99:bf:35:a1:df:66:16:83:b1:dc:ec:
8e:de:e2:c3:78:3c:b0:7f:eb:b3:9e:01:9d:6a:1d:c5:8e:0e:
7b:20:9b:1d:fa:e8:91:3c:94:0f:2b:7c:cd:06:19:eb:e9:8f:
94:37:27:30:6c:8b:9d:5f:0f:b7:6c:ac:1f:9e:13:97:3c:f5:
8d:b1:58:a4:94:37:34:0f:9b:9f:c4:44:f8:74:52:67:68:cb:
ea:49:2e:ce:7c:aa:7d:bc:d7:5c:59:ae:e3:a2:07:8d:3c:36:
0f:34:84:95:e9:20:bf:33:4d:ff:a4:78:3d:c9:77:8b:47:b6:
74:a2:26:1c:79:68:fa:19:3c:13:c4:98:67:41:c9:23:54:ce:
eb:f9:26:a2:a8:77:c2:43:04:58:46:dc:c8:9c:48:b6:24:c2:
e1:3f:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client