Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/DZtC8hAIOWoi3LtmkiLiGJj8h3Q.roa
File: DZtC8hAIOWoi3LtmkiLiGJj8h3Q.roa (raw, json)
Hash identifier: lVO37iTuEP5UIFxo0nMryLFo+iKZVcuMzU9hwEeKZI4=
Subject key identifier: 0D:9B:42:F2:10:08:39:6A:22:DC:BB:66:92:22:E2:18:98:FC:87:74
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 25AD
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/DZtC8hAIOWoi3LtmkiLiGJj8h3Q.roa
Signing time: Mon 16 Mar 2026 11:16:30 +0000
ROA not before: Mon 16 Mar 2026 11:16:30 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 135377
IP address blocks: 101.237.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9645 (0x25ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 16 11:16:30 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0D9B42F21008396A22DCBB669222E21898FC8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:af:3e:b5:b5:e1:fa:d0:2f:0a:28:b4:d3:
50:4a:d0:29:92:cd:be:33:36:38:bf:8a:be:f8:b4:
69:2a:95:0a:4c:18:b9:09:fb:4b:98:9c:a4:cd:0c:
fb:71:b0:31:6b:c4:cd:b6:ac:31:be:d8:9a:10:34:
cb:0f:45:1d:4e:a4:18:73:9b:85:67:e8:7e:7a:88:
d1:13:45:39:8c:76:92:13:f0:bc:47:c4:3c:dc:11:
ad:77:ac:e6:bc:60:48:2e:dd:ba:25:24:87:3e:7d:
ba:7a:92:a3:ed:ed:63:2a:5e:b3:c3:6f:05:6b:68:
6f:64:9d:d6:b4:df:3a:11:58:f8:09:53:ce:c3:b5:
3e:0b:d9:02:aa:64:36:f8:1e:43:c8:6b:b5:f0:c9:
2a:70:ab:9f:62:16:8d:1c:35:ef:a1:4f:bf:b3:4c:
d8:48:09:32:f2:e5:1a:79:63:6c:58:70:fd:e5:f5:
52:cd:a3:c2:bb:98:a7:3a:63:d4:ce:82:29:d4:28:
1e:4e:9e:f8:ec:a0:89:f3:0d:f9:cf:49:88:0f:bb:
df:46:ea:44:d7:9e:1f:79:0e:17:06:81:64:c0:8b:
a2:73:80:23:ee:a5:21:07:7b:04:b4:ea:fb:38:99:
4b:43:35:59:9e:f0:26:6a:c6:85:7b:d2:c2:b9:a7:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:42:F2:10:08:39:6A:22:DC:BB:66:92:22:E2:18:98:FC:87:74
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/DZtC8hAIOWoi3LtmkiLiGJj8h3Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.237.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:fd:1b:66:aa:f1:f8:3a:93:61:4a:82:2e:71:b8:47:be:
03:0d:39:d4:a2:2c:72:29:d2:55:9d:d8:11:5d:b8:67:3f:eb:
8b:74:01:7c:3f:ed:72:b7:e9:81:49:2a:e2:8a:e7:f9:99:2d:
ef:db:35:3d:0e:99:33:17:34:ce:73:f3:7f:a3:15:88:e0:6d:
86:cf:81:2a:3c:76:74:fc:a9:39:19:3b:cc:d1:b0:d3:1c:dc:
d1:22:d7:6e:a9:db:57:e1:57:0b:d0:44:22:c0:e3:96:26:b4:
23:54:a4:8f:42:80:95:0c:82:e6:94:91:f2:98:29:69:cc:66:
ed:71:4e:95:5e:15:02:d2:1e:87:10:a8:4d:ce:9b:07:86:83:
39:b0:35:28:1e:8b:bb:cc:b2:fa:d9:bc:a0:46:ce:02:4b:d8:
c6:8a:6c:39:c9:4f:53:bd:db:70:f3:53:bc:84:3b:fa:a1:fe:
f5:7b:33:bc:18:12:2e:35:05:b3:64:e0:10:56:47:84:4e:19:
7c:64:30:42:0a:03:f9:8a:3c:f2:3d:4f:67:b6:85:1e:9b:4b:
9d:b9:c7:68:e5:93:a3:b5:45:46:27:27:0a:c2:e3:61:bd:22:
21:4e:e4:bd:85:c1:b5:bb:91:d0:cc:11:a1:5f:69:ec:5b:62:
06:bb:fe:f4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICJa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNjAzMTYx
MTE2MzBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBEOUI0MkYyMTAwODM5
NkEyMkRDQkI2NjkyMjJFMjE4OThGQzg3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCW0K8+tbXh+tAvCii001BK0CmSzb4zNji/ir74tGkqlQpMGLkJ
+0uYnKTNDPtxsDFrxM22rDG+2JoQNMsPRR1OpBhzm4Vn6H56iNETRTmMdpIT8LxH
xDzcEa13rOa8YEgu3bolJIc+fbp6kqPt7WMqXrPDbwVraG9knda03zoRWPgJU87D
tT4L2QKqZDb4HkPIa7XwySpwq59iFo0cNe+hT7+zTNhICTLy5Rp5Y2xYcP3l9VLN
o8K7mKc6Y9TOginUKB5OnvjsoInzDfnPSYgPu99G6kTXnh95DhcGgWTAi6JzgCPu
pSEHewS06vs4mUtDNVme8CZqxoV70sK5pyERAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUDZtC8hAIOWoi3LtmkiLiGJj8h3QwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0RadEM4aEFJT1dvaTNM
dG1raUxpR0pqOGgzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABl7fYwDQYJKoZIhvcNAQELBQADggEBAApW/RtmqvH4OpNhSoIucbhHvgMNOdSi
LHIp0lWd2BFduGc/64t0AXw/7XK36YFJKuKK5/mZLe/bNT0OmTMXNM5z83+jFYjg
bYbPgSo8dnT8qTkZO8zRsNMc3NEi126p21fhVwvQRCLA45YmtCNUpI9CgJUMguaU
kfKYKWnMZu1xTpVeFQLSHocQqE3OmweGgzmwNSgei7vMsvrZvKBGzgJL2MaKbDnJ
T1O923DzU7yEO/qh/vV7M7wYEi41BbNk4BBWR4ROGXxkMEIKA/mKPPI9T2e2hR6b
S525x2jlk6O1RUYnJwrC42G9IiFO5L2FwbW7kdDMEaFfaexbYga7/vQ=
-----END CERTIFICATE-----
Generated at Mon Jun 22 07:17:01 2026 by rpki-client