Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/tlp2HUUJoI724WS_Ode64_P3E_A.roa
File: tlp2HUUJoI724WS_Ode64_P3E_A.roa (raw, json)
Hash identifier: LmhfGm6SiRVSi+vo4yMPXWogFAx5P2LYQsHA7fjHmp4=
Subject key identifier: B6:5A:76:1D:45:09:A0:8E:F6:E1:64:BF:39:D7:BA:E3:F3:F7:13:F0
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 18E0
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/tlp2HUUJoI724WS_Ode64_P3E_A.roa
Signing time: Mon 26 Jan 2026 06:56:15 +0000
ROA not before: Mon 26 Jan 2026 06:56:15 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 149628
IP address blocks: 103.56.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6368 (0x18e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Jan 26 06:56:15 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=B65A761D4509A08EF6E164BF39D7BAE3F3F713F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:a1:21:0f:f1:1a:f0:0f:22:8b:22:c9:87:
78:21:14:08:1b:1f:22:bf:4e:a4:d7:8a:82:e5:81:
15:66:10:61:db:69:e3:e7:19:80:55:bd:82:2f:48:
f7:c1:98:28:77:7e:48:da:7d:72:38:4c:14:a0:53:
ca:a5:75:66:8e:47:68:0b:7d:5b:11:07:16:01:4d:
89:30:c2:bb:f4:ed:3a:c4:9f:ba:bf:28:19:a6:f8:
0b:46:41:7c:e0:9e:80:94:17:d7:2c:d2:cc:a3:97:
f5:e1:3f:a6:f4:7c:25:3e:6e:19:f5:82:dc:f1:8a:
6c:c4:55:35:9b:fe:ef:6c:10:7b:6b:51:5a:c7:0e:
a8:f1:c5:b5:77:ad:93:92:73:2f:91:62:bd:4b:38:
25:d1:73:6f:1a:e4:fd:c9:7b:a7:17:6a:77:48:b0:
df:b8:1a:8e:0f:f7:5c:b1:bf:df:ed:c1:ab:28:a4:
37:d9:ad:07:5a:46:e8:ad:1f:ea:c1:5c:3a:ff:93:
d8:92:e3:55:92:3a:13:4f:43:82:72:89:34:16:db:
4b:43:78:26:3d:c8:b0:44:3b:ee:c1:9e:24:aa:f7:
99:36:8c:25:15:65:75:14:b0:28:a9:8b:04:37:1a:
29:cb:54:fe:8f:7d:0d:ec:0d:d2:45:a8:23:eb:75:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5A:76:1D:45:09:A0:8E:F6:E1:64:BF:39:D7:BA:E3:F3:F7:13:F0
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/tlp2HUUJoI724WS_Ode64_P3E_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:60:43:56:b5:ad:4a:0b:19:8a:94:47:77:a3:1d:21:0c:63:
c1:42:d4:6f:fa:9d:50:4e:f8:7e:04:2c:eb:ad:a9:c9:69:d0:
32:73:fa:c3:79:26:83:25:29:04:48:7e:b9:94:83:28:8a:62:
c3:50:4a:e7:4b:0c:25:51:56:74:dc:08:61:14:a9:22:69:75:
76:93:04:dc:25:cf:71:e8:aa:24:5b:09:8d:21:bb:77:22:e8:
08:a9:ff:60:23:3a:4c:6b:fa:99:0d:dd:15:f3:db:b1:85:e5:
96:a9:6d:c2:0b:e0:b9:8f:4e:0e:bb:71:7d:a8:d2:d3:94:16:
d7:fb:45:18:32:33:48:92:11:49:04:7e:ca:67:ed:45:b2:85:
cb:97:2f:ef:ab:93:43:aa:47:82:57:3f:a8:30:2c:23:4f:c3:
2e:ff:8d:7b:a7:b7:88:2b:4c:0e:1f:84:a0:da:62:2b:51:75:
d2:94:83:dc:f8:bf:f4:aa:02:9d:9f:c6:81:b7:45:fd:5c:a9:
cf:2c:50:ca:42:04:70:fb:df:ec:b4:04:d1:85:d0:df:43:d4:
bb:09:a9:c3:7c:3c:e2:58:7b:1c:c7:1f:07:3d:f6:59:6f:a8:
09:9e:2a:6f:78:e0:d3:de:a8:15:c1:0c:bf:4f:14:13:4b:37:
e2:a2:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:20 2026 by rpki-client