Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/viASi-ReL3VamQ2MdrZLUglhOH4.roa
File: viASi-ReL3VamQ2MdrZLUglhOH4.roa (raw, json)
Hash identifier: G1YptP94beoqtRccjQ9qLIppa52RvHCb0NT49D9rzIM=
Subject key identifier: BE:20:12:8B:E4:5E:2F:75:5A:99:0D:8C:76:B6:4B:52:09:61:38:7E
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 25AE
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/viASi-ReL3VamQ2MdrZLUglhOH4.roa
Signing time: Mon 16 Mar 2026 11:16:30 +0000
ROA not before: Mon 16 Mar 2026 11:16:30 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 142002
IP address blocks: 101.237.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9646 (0x25ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Mar 16 11:16:30 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BE20128BE45E2F755A990D8C76B64B520961387E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:9e:23:3c:21:0d:b5:b7:19:1c:33:9e:96:
38:0b:ef:24:1f:a6:b8:c0:fc:9c:06:d5:d4:bd:b8:
c6:58:fb:5d:f0:33:93:e5:f7:84:95:ff:dd:3a:22:
7a:35:ea:23:7a:0c:e9:b7:41:39:57:48:ca:d9:9a:
63:4b:77:d4:1e:63:f2:fb:34:94:02:06:ca:84:78:
5c:f2:ff:2d:35:ff:7a:53:5d:90:50:9d:d4:ca:63:
8d:6f:19:62:c5:37:c3:36:cc:82:a0:65:71:35:e9:
c5:87:e3:d5:99:4f:5e:d0:9c:f1:41:a4:df:b0:a5:
d5:0f:ca:2a:f1:bd:c9:f8:be:e9:f8:3b:4d:bc:ce:
66:f9:f8:35:a3:43:b9:e4:01:88:03:18:4a:46:d3:
83:1f:32:f7:69:37:c5:24:88:9b:85:6c:88:39:14:
cc:5b:42:8f:85:7e:dd:58:16:d6:d7:fe:3c:1e:9c:
e1:6e:e0:20:0b:eb:4b:c0:73:a9:c5:88:77:da:84:
dd:e5:8f:00:a1:81:dc:0e:d2:47:2c:27:26:cb:68:
a5:f5:fb:d1:16:ce:ae:4f:73:8e:ef:69:c3:24:6c:
69:66:6f:7a:b5:db:1d:d4:23:76:72:a0:a5:5b:b0:
15:a3:96:bf:27:f9:e5:f1:80:35:9e:84:be:33:48:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:12:8B:E4:5E:2F:75:5A:99:0D:8C:76:B6:4B:52:09:61:38:7E
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/viASi-ReL3VamQ2MdrZLUglhOH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.237.245.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9d:56:51:ea:1b:5f:c5:e4:ba:14:a2:2e:08:99:b8:8d:b7:
73:36:b6:fd:a7:f0:ed:1b:64:4b:3f:7f:14:ea:d4:a1:cc:a1:
8e:cf:b1:e0:e7:46:58:06:94:6f:9a:4a:2f:bb:55:65:88:19:
aa:93:81:2f:1d:98:83:5e:c6:bb:44:1f:80:c4:b4:00:9a:a3:
ea:d7:b7:54:40:c9:ff:1b:55:55:5e:50:69:bd:a6:78:ee:c0:
a4:b7:2d:20:27:12:d0:d8:dc:79:ae:e6:9f:50:91:d4:d9:2d:
66:05:43:fb:de:06:a1:02:f2:de:83:79:7c:1e:91:ba:4f:3d:
a1:f3:77:2c:5b:dc:34:ac:59:18:97:33:87:86:21:cc:87:a1:
3b:d5:75:97:3d:bd:61:93:10:43:22:ae:69:fd:9e:e2:de:51:
87:2b:d4:bf:96:80:f6:36:57:26:e5:1f:6b:1d:3a:84:c4:d4:
65:cf:d0:19:89:f0:a6:23:5a:42:a1:92:c8:94:ab:ec:37:c4:
67:50:ae:93:10:3d:74:c2:a1:3c:cb:29:61:ee:82:ef:c7:66:
58:11:ee:1b:61:c4:60:1e:48:bf:0e:d9:2e:82:1d:ac:27:d4:
b3:61:f1:67:9f:a3:f3:83:3c:14:4f:30:20:cc:12:b4:a0:cd:
ae:78:b7:18
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICJa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNjAzMTYx
MTE2MzBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJFMjAxMjhCRTQ1RTJG
NzU1QTk5MEQ4Qzc2QjY0QjUyMDk2MTM4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOx54jPCENtbcZHDOeljgL7yQfprjA/JwG1dS9uMZY+13wM5Pl
94SV/906Ino16iN6DOm3QTlXSMrZmmNLd9QeY/L7NJQCBsqEeFzy/y01/3pTXZBQ
ndTKY41vGWLFN8M2zIKgZXE16cWH49WZT17QnPFBpN+wpdUPyirxvcn4vun4O028
zmb5+DWjQ7nkAYgDGEpG04MfMvdpN8UkiJuFbIg5FMxbQo+Fft1YFtbX/jwenOFu
4CAL60vAc6nFiHfahN3ljwChgdwO0kcsJybLaKX1+9EWzq5Pc47vacMkbGlmb3q1
2x3UI3ZyoKVbsBWjlr8n+eXxgDWehL4zSFolAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUviASi+ReL3VamQ2MdrZLUglhOH4wHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L3ZpQVNpLVJlTDNWYW1R
Mk1kclpMVWdsaE9INC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABl7fUwDQYJKoZIhvcNAQELBQADggEBAEmdVlHqG1/F5LoUoi4ImbiNt3M2tv2n
8O0bZEs/fxTq1KHMoY7PseDnRlgGlG+aSi+7VWWIGaqTgS8dmINexrtEH4DEtACa
o+rXt1RAyf8bVVVeUGm9pnjuwKS3LSAnEtDY3Hmu5p9QkdTZLWYFQ/veBqEC8t6D
eXwekbpPPaHzdyxb3DSsWRiXM4eGIcyHoTvVdZc9vWGTEEMirmn9nuLeUYcr1L+W
gPY2VyblH2sdOoTE1GXP0BmJ8KYjWkKhksiUq+w3xGdQrpMQPXTCoTzLKWHugu/H
ZlgR7hthxGAeSL8O2S6CHawn1LNh8Wefo/ODPBRPMCDMErSgza54txg=
-----END CERTIFICATE-----
Generated at Mon Jun 22 07:17:01 2026 by rpki-client