Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/hTYglcTaggz46zo2uGojdNR6CiA.roa
File: hTYglcTaggz46zo2uGojdNR6CiA.roa (raw, json)
Hash identifier: oxjLkgxJ/ScFrDTY2HsVJ3eQj12roDmJFBgsJUYTwQE=
Subject key identifier: 85:36:20:95:C4:DA:82:0C:F8:EB:3A:36:B8:6A:23:74:D4:7A:0A:20
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 0178
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/hTYglcTaggz46zo2uGojdNR6CiA.roa
Signing time: Tue 22 Jul 2025 09:06:20 +0000
ROA not before: Tue 22 Jul 2025 09:06:20 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 133033
IP address blocks: 103.60.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: Jul 22 09:06:20 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=85362095C4DA820CF8EB3A36B86A2374D47A0A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:28:d2:14:ea:f7:d9:2d:52:d2:db:3d:2c:
5c:3b:0b:40:54:53:34:dd:01:28:41:03:54:2c:c2:
fb:30:66:96:37:ec:2a:48:b8:5f:fb:de:59:49:5f:
f5:af:54:9d:fe:1f:42:3a:3a:81:17:c5:e8:de:69:
73:79:3f:08:df:a9:04:16:67:02:97:1b:3a:46:17:
1d:e1:58:53:d3:35:82:4e:f7:07:8a:a7:4c:2d:1a:
9b:d6:e7:c7:f0:59:be:69:58:3a:4d:33:7f:a2:b1:
1e:6b:8e:84:fd:c0:e3:f5:31:1d:ab:48:8a:e3:7e:
01:3d:c0:c9:1b:74:dd:d2:2c:3f:ad:c6:74:1b:58:
ab:21:a6:39:48:5c:0c:fd:3d:fe:3c:46:90:c5:2a:
91:6e:07:9d:f9:a1:e5:bb:e4:4e:5a:30:44:93:ee:
5e:05:01:89:6b:1d:e4:77:61:42:38:e3:d6:3d:a0:
93:a3:e7:be:8d:0d:d8:8d:26:3a:75:b0:86:cd:86:
e0:b1:ba:fe:7c:32:f2:b3:40:a4:5d:71:74:46:78:
5f:0c:cb:ba:93:c1:70:da:16:10:75:76:5d:6c:7c:
03:92:59:cc:5f:fe:f0:6e:14:be:86:ee:52:08:b0:
ef:9f:ea:34:93:33:3f:f4:3d:7e:91:28:ec:30:d0:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:20:95:C4:DA:82:0C:F8:EB:3A:36:B8:6A:23:74:D4:7A:0A:20
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/hTYglcTaggz46zo2uGojdNR6CiA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:40:f9:f7:78:a7:95:28:8b:79:5a:ff:12:03:24:7a:cf:37:
e1:54:70:7e:f1:5e:b1:b5:4a:44:43:0d:21:89:6a:55:86:fb:
87:43:94:5e:52:12:24:e8:26:3e:25:72:ec:c1:a1:0d:cc:61:
9e:db:3a:58:85:14:09:d1:5d:a9:2a:18:b7:cd:66:e7:1e:1b:
50:7e:54:ef:c3:ea:af:3a:14:04:db:23:81:0b:17:0e:36:0c:
12:f1:ed:4e:c0:67:5d:44:ad:a8:dc:69:8a:0e:b8:b1:5b:ca:
70:05:88:a2:8d:4c:a8:53:a9:56:f4:e4:3a:3a:79:1c:e6:f0:
44:b8:12:de:06:46:84:55:8c:da:5e:13:da:0d:49:3a:ce:cf:
03:b6:d9:3a:b9:0c:00:f5:dd:9a:5d:2c:6a:a8:ed:78:43:b1:
c4:74:f8:fa:c4:f9:96:5e:cd:af:1b:8f:63:6c:52:8f:b5:40:
fa:51:2b:8e:0b:a4:a3:52:5e:c5:db:c0:f2:94:fc:90:d1:17:
2a:5a:1d:f5:17:75:68:8a:fd:e8:29:70:d6:68:69:c8:aa:fb:
f7:03:23:be:fd:83:50:fb:2d:44:eb:6b:d0:5a:67:f5:01:24:
25:f7:79:45:b8:41:fe:72:ed:2a:3c:a3:20:06:02:f3:10:aa:
4e:e1:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:26:31 2025 by rpki-client