Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa
File: LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa (raw, json)
Hash identifier: tblbD2ZyIp2Q8bqb+1/afrHogCQsO4U8fqTKgNs9MC8=
Subject key identifier: 2D:23:A3:AD:32:0C:42:C6:ED:1C:3E:25:5C:A3:8A:3C:F9:0A:67:41
Certificate issuer: /CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Certificate serial: 15D4
Authority key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa
Signing time: Sat 13 Sep 2025 03:03:56 +0000
ROA not before: Sat 13 Sep 2025 03:03:56 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 137443
IP address blocks: 103.197.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5588 (0x15d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156
Validity
Not Before: Sep 13 03:03:56 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2D23A3AD320C42C6ED1C3E255CA38A3CF90A6741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:fe:7a:ee:f0:a7:98:54:60:07:f5:ed:69:
47:7d:16:bc:2c:45:3a:74:20:85:66:f4:b1:da:93:
0b:ad:37:bf:8c:6f:84:a3:23:6e:39:89:d2:59:b0:
09:5d:2f:7d:10:0e:bd:70:f6:f4:a4:54:78:7e:af:
e8:91:27:07:a0:64:a6:4a:9a:65:b7:e6:4b:a3:73:
db:e8:40:3e:ca:8e:65:62:5a:62:9a:74:c4:98:9d:
cf:b7:e4:fe:c7:ef:a8:e5:2e:62:ef:2c:31:58:40:
36:5a:ae:31:d6:5f:42:9f:62:2d:1e:eb:83:07:48:
59:86:28:ec:67:40:5c:88:25:bc:f7:dd:e7:e2:c5:
94:3e:c1:8d:6e:71:61:32:7a:e1:1c:55:ca:13:30:
a7:84:62:02:07:6e:05:85:56:a8:56:1d:eb:ea:27:
2b:2c:c0:28:0d:27:30:6f:f5:d0:20:c4:02:5c:7f:
22:42:89:e7:b2:f5:bd:ae:b8:86:47:20:19:94:20:
74:18:40:8f:7a:1a:d1:50:bb:f2:1a:2e:9d:95:ac:
e4:d3:d0:d4:83:28:01:dd:16:64:46:47:f1:7e:10:
04:17:0a:de:13:af:49:41:6d:c9:1e:f1:45:8b:fe:
90:95:f2:c0:1e:e8:7a:dc:79:ca:0b:25:37:43:9c:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:A3:AD:32:0C:42:C6:ED:1C:3E:25:5C:A3:8A:3C:F9:0A:67:41
X509v3 Authority Key Identifier:
keyid:02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/LSOjrTIMQsbtHD4lXKOKPPkKZ0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.181.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2c:b3:21:93:6e:2e:24:d3:a3:ff:dd:89:b4:57:45:19:55:
b8:0f:9d:ca:3b:d1:13:2a:d1:ce:c7:8d:ae:59:8f:3e:c9:82:
82:d6:bc:fa:3f:15:05:a9:8e:4f:6f:cb:f6:34:c2:a1:16:14:
10:16:93:63:3b:19:67:66:6b:bb:09:9c:0f:dc:bd:a9:19:fc:
30:c3:c9:93:65:5d:4e:7b:0a:59:52:6e:74:6d:2e:a6:fd:bf:
a3:68:bd:98:4f:46:20:1e:90:0c:07:3f:76:87:f6:07:05:a2:
00:4b:b5:d3:a8:b1:4c:6a:18:52:e2:b0:0d:07:4b:20:bf:f5:
40:f5:fb:f2:6b:70:f2:9b:f8:bb:75:15:67:15:3e:3b:43:c2:
83:75:53:b8:64:da:29:50:89:0d:24:d6:60:50:c6:f1:88:b4:
69:40:50:be:cd:6f:a6:68:f8:0f:04:28:4e:b0:33:9e:ed:95:
4d:58:a1:05:83:e2:b8:85:ce:44:d5:64:fb:e9:58:d2:cc:0d:
59:7f:cc:70:04:78:92:ac:2e:4d:53:b9:6a:22:6c:d0:b8:aa:
e9:64:9d:50:1f:03:08:87:51:9d:98:30:4c:27:a4:1c:a1:e2:
ef:9f:65:85:e4:66:47:60:36:86:d9:01:4a:f0:75:cd:a0:66:
77:98:94:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 01:35:41 2025 by rpki-client