Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3377/tw3GmUPozK61MSCAj3C44lnNpbg.roa
File: tw3GmUPozK61MSCAj3C44lnNpbg.roa (raw, json)
Hash identifier: DWRnHy2RXVELP2YDEL0Yq4/mjoKf1N+AjPHdIO4Vtcs=
Subject key identifier: B7:0D:C6:99:43:E8:CC:AE:B5:31:20:80:8F:70:B8:E2:59:CD:A5:B8
Certificate issuer: /CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Certificate serial: 03
Authority key identifier: 50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/tw3GmUPozK61MSCAj3C44lnNpbg.roa
Signing time: Fri 06 Mar 2026 05:19:24 +0000
ROA not before: Fri 06 Mar 2026 05:19:24 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 133948
IP address blocks: 45.124.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5052DEE92823C58F2927F22DFA6936291D1B9037
Validity
Not Before: Mar 6 05:19:24 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=B70DC69943E8CCAEB53120808F70B8E259CDA5B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:72:00:4d:a1:49:34:ee:d5:57:8f:a8:dd:
04:f6:78:46:fa:ba:0a:49:f3:8e:0a:5b:24:f2:04:
6b:e7:b1:b5:fe:57:b0:50:ed:ca:30:5c:62:c3:7f:
54:fe:6d:a8:24:5f:97:28:ed:79:e2:b3:f2:fc:25:
18:33:ec:ad:3b:df:de:c9:5a:49:be:77:89:05:43:
5c:2f:69:c3:d5:8b:c7:7c:52:be:27:4d:58:3e:a8:
e6:05:95:16:48:7a:46:0b:24:fa:16:90:e5:d4:53:
bd:71:e1:b7:a7:66:3f:aa:08:d8:26:b0:a1:07:e6:
59:2c:35:af:78:70:da:37:20:fe:63:ec:3d:43:00:
7d:c0:7b:30:53:82:21:e6:35:13:92:14:12:73:71:
ce:2d:75:a1:9a:07:90:35:b3:08:af:66:cb:2c:0c:
0a:f5:3b:41:a2:41:9b:e4:c7:f5:c8:00:37:18:5f:
f8:91:a7:4d:d8:4b:50:8d:5d:c4:38:f0:93:cf:0c:
ec:47:71:22:46:19:68:ed:f6:fc:a2:df:dc:3f:64:
6e:1e:6f:ae:9f:8b:04:0e:07:6f:82:fc:47:19:64:
86:06:a6:17:3c:a5:5b:d7:96:0b:bc:05:d9:78:4c:
5a:91:a7:bf:f7:94:c3:e9:44:a7:00:fb:46:ad:ac:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:C6:99:43:E8:CC:AE:B5:31:20:80:8F:70:B8:E2:59:CD:A5:B8
X509v3 Authority Key Identifier:
keyid:50:52:DE:E9:28:23:C5:8F:29:27:F2:2D:FA:69:36:29:1D:1B:90:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/UFLe6SgjxY8pJ_It-mk2KR0bkDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UFLe6SgjxY8pJ_It-mk2KR0bkDc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3377/tw3GmUPozK61MSCAj3C44lnNpbg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:43:c8:f7:34:a1:c0:b6:9a:6e:dc:81:2a:59:8c:62:9f:04:
92:d0:d6:4d:3a:a7:b5:32:f0:00:66:b3:7d:91:ce:a0:f2:b6:
75:b6:11:e2:f6:e9:ef:e7:5e:38:77:8b:93:cc:5f:52:63:41:
2e:9c:c9:c7:52:06:19:e4:0d:c5:54:9f:35:fd:dc:ef:7b:bb:
03:15:dc:1e:bd:cd:1c:e0:1b:1f:86:04:52:1b:c3:27:b9:f4:
0e:0a:af:17:d1:6f:12:fb:12:94:7b:03:79:45:6c:5d:ce:f1:
41:c6:70:60:1c:5b:3a:85:dd:5b:f1:ab:e2:1e:5f:f3:dc:51:
42:99:92:e8:f0:fb:67:be:dd:e7:4e:c4:bc:a1:76:b5:f7:4c:
6a:85:e6:1c:56:40:08:86:c3:64:55:ca:a8:98:af:14:bc:29:
29:78:f0:64:65:86:6f:e7:07:fa:cc:0a:16:77:98:dc:d6:62:
d4:f7:54:87:67:e0:de:96:3a:8b:5c:d7:c0:6c:2b:c2:25:fa:
98:70:1e:ca:1b:68:0d:de:16:7b:05:4d:54:53:2b:55:e5:85:
83:c4:62:af:6a:58:da:28:85:bb:ff:96:06:db:3f:55:0f:e1:
10:ab:e0:51:d2:9a:3b:38:e4:31:5a:12:f9:51:75:c5:1e:cc:
2b:05:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:27:23 2026 by rpki-client