Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/IxfXHNiBwSEY3syFEveMg9rTGdc.roa
File: IxfXHNiBwSEY3syFEveMg9rTGdc.roa (raw, json)
Hash identifier: qTU9G9vLx/wbmANvRoLhDvI0zLzaMF2Lznqib2Xc41o=
Subject key identifier: 23:17:D7:1C:D8:81:C1:21:18:DE:CC:85:12:F7:8C:83:DA:D3:19:D7
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 194D
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/IxfXHNiBwSEY3syFEveMg9rTGdc.roa
Signing time: Tue 10 Mar 2026 05:22:03 +0000
ROA not before: Tue 10 Mar 2026 05:22:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 154321
IP address blocks: 103.218.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Mar 10 05:22:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2317D71CD881C12118DECC8512F78C83DAD319D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:c1:ed:5f:78:df:f0:3d:d5:1e:73:0a:34:
f7:e4:f4:de:59:e5:71:ea:de:da:00:e6:8e:cc:19:
7c:b1:fc:d6:d4:a4:35:74:40:f5:8c:e8:a7:bf:75:
2b:2f:d0:08:20:ce:1b:2e:f3:81:5c:53:8a:5e:ce:
d6:fa:57:a1:fc:26:26:d4:64:29:fc:98:20:4e:b1:
63:0f:77:e5:2f:11:52:8a:6b:81:e2:19:8a:d8:96:
e7:f5:e6:0d:6f:ef:95:2a:a1:3c:07:22:61:c0:f1:
12:ad:08:eb:9a:d2:9c:83:f6:32:a5:9e:22:c6:48:
a3:b8:3c:db:37:3d:90:fa:01:d5:b9:ae:b8:14:55:
28:63:30:0a:f7:63:fb:6d:f2:64:f8:ab:ca:d0:c8:
78:e2:9b:c8:4a:45:47:cd:b1:44:a1:db:91:13:98:
30:eb:15:f8:24:99:a6:d0:77:e3:06:95:37:0b:8a:
a4:30:4a:a1:aa:2f:66:97:13:80:47:6b:fe:2b:18:
ac:8d:be:61:e9:bb:63:d5:c0:15:d9:5e:3d:fa:ec:
01:93:94:90:63:b6:26:88:a1:d4:e0:3e:f5:46:13:
92:a9:d2:c9:3a:98:8e:24:62:40:12:15:86:20:c5:
b5:28:6b:14:93:99:32:16:60:6a:af:69:cc:14:c1:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:D7:1C:D8:81:C1:21:18:DE:CC:85:12:F7:8C:83:DA:D3:19:D7
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/IxfXHNiBwSEY3syFEveMg9rTGdc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.92.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e2:78:0a:44:8d:a8:a6:c2:54:5c:ea:20:dd:6c:ba:0c:7b:
12:40:95:33:f2:07:a3:dd:72:7f:76:dd:f8:88:e5:05:16:8d:
32:95:61:67:79:d6:a6:13:cd:b5:c2:15:73:19:6a:3b:b7:50:
0e:13:cc:55:03:88:1a:80:b0:4f:43:af:8c:1b:05:c9:3d:3c:
97:1d:0d:af:99:b0:c8:c3:7d:7e:60:9d:23:4f:57:da:f4:fb:
95:31:14:5c:50:6f:a5:a2:f4:35:c7:72:64:81:32:9d:fa:2d:
3c:19:21:e3:e8:c2:9f:a3:ff:77:ea:35:e6:cc:0d:67:3c:27:
0e:32:33:3f:f6:14:dd:cf:e6:32:15:e4:4b:a5:a9:62:8e:61:
f9:b2:35:d3:c5:ef:bb:77:28:65:f8:a4:f9:ff:39:58:65:94:
45:0b:6c:f5:c1:ad:04:d6:79:16:21:22:2f:d8:76:47:c1:d5:
11:1b:8b:0f:43:d7:df:82:5d:ee:17:17:37:6e:96:95:8e:5e:
92:b2:ed:61:b4:af:be:c4:bb:7e:e2:bd:40:16:ad:42:95:05:
24:34:ae:29:36:dd:7b:d3:3e:72:b8:a2:d0:13:aa:01:5d:d0:
3a:1b:98:ff:8b:63:14:87:a6:88:73:dd:1a:1e:0d:22:f3:7c:
f0:74:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client