Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Fo78m_53sv2UreqpK1C1g0cP4YU.roa
File: Fo78m_53sv2UreqpK1C1g0cP4YU.roa (raw, json)
Hash identifier: jN6lOwJe/qvq++j5f3RSMMZUWBXlZkPNVyPuX1dD11M=
Subject key identifier: 16:8E:FC:9B:FE:77:B2:FD:94:AD:EA:A9:2B:50:B5:83:47:0F:E1:85
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F2
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Fo78m_53sv2UreqpK1C1g0cP4YU.roa
Signing time: Mon 26 Jan 2026 06:52:58 +0000
ROA not before: Mon 26 Jan 2026 06:52:58 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 103.9.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6642 (0x19f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:58 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=168EFC9BFE77B2FD94ADEAA92B50B583470FE185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:6c:85:8b:12:18:c9:41:f1:08:21:9b:4d:
22:5a:05:b7:78:6b:6c:0f:37:e1:64:75:51:3a:65:
55:c9:9c:b4:2b:6b:3d:cd:d0:c4:11:07:77:ee:cd:
9b:16:1e:59:04:34:50:5b:64:a0:6d:81:e9:17:8a:
cc:75:a1:fb:82:cb:4a:8a:67:a5:d2:ee:27:31:c7:
61:84:a9:9e:a5:89:b6:c0:05:39:c0:5f:5e:53:ac:
07:30:7e:df:80:1a:af:b9:c1:8d:ae:6b:fe:b8:7e:
98:24:60:02:06:c4:96:21:eb:42:60:1f:8c:ea:c3:
ef:69:be:48:f8:d3:2f:ff:95:44:af:cf:fb:a0:aa:
bc:2d:04:bb:f1:fc:52:9a:c3:dd:55:1d:04:2b:1e:
b5:23:5c:96:dd:f3:bc:77:0e:e4:db:06:a4:17:b8:
96:e4:3b:b3:5f:4a:5b:63:62:cd:4d:60:24:55:81:
82:15:2e:64:ff:5f:0b:0b:0c:1f:00:e3:84:e5:f6:
5d:a1:c4:ee:d5:4c:ac:f1:d5:33:00:a3:19:35:39:
31:dc:3c:17:2c:b6:dd:9c:63:72:64:cf:d4:db:ba:
62:8f:c4:91:f9:de:79:ac:aa:fc:6e:c2:1b:01:6e:
15:64:64:37:6f:89:04:9d:f0:39:af:1c:a9:c0:50:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:FC:9B:FE:77:B2:FD:94:AD:EA:A9:2B:50:B5:83:47:0F:E1:85
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Fo78m_53sv2UreqpK1C1g0cP4YU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.8.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b9:8b:da:36:1a:18:c7:75:2e:83:ee:16:16:e4:a4:af:f1:
9b:8e:aa:cb:48:56:bf:65:d9:87:33:e0:33:6e:dd:e3:ae:16:
f9:9c:0e:e4:c3:f3:a4:22:f3:0e:ae:4d:28:cb:8d:4c:7e:66:
ac:22:4b:52:5a:54:35:b4:36:ea:15:46:8e:09:b8:fc:42:6d:
18:a2:52:1b:f1:53:5c:07:66:df:a5:17:21:b5:1b:78:97:e8:
f8:28:91:66:ed:c5:65:0e:b7:22:f9:2e:2c:94:58:80:9b:88:
67:87:c2:1c:46:9a:41:98:e8:57:60:97:c3:36:39:3c:a3:1a:
b1:17:cf:7c:e4:b9:bd:50:0d:66:89:ab:a6:23:17:13:b1:ca:
9e:57:fb:f7:8b:d6:b2:8c:cd:b4:03:89:34:a3:24:bc:88:8a:
dd:5f:4c:24:ee:01:4a:03:31:98:07:c9:b0:0d:35:9b:58:11:
61:f3:9f:82:30:0e:47:ae:50:45:4c:23:bb:24:5a:5d:75:b3:
98:f5:74:c9:f5:3f:c3:49:0e:8c:39:c3:35:b9:50:71:06:f1:
ea:c2:be:01:29:bd:ad:78:fa:90:06:9b:d7:ee:a0:52:37:d3:
42:01:9e:46:25:fe:05:31:a2:0a:e0:96:3d:5e:b3:a9:a4:c2:
6b:d6:2a:59
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF
RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNjAxMjYw
NjUyNThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDE2OEVGQzlCRkU3N0Iy
RkQ5NEFERUFBOTJCNTBCNTgzNDcwRkUxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyWGyFixIYyUHxCCGbTSJaBbd4a2wPN+FkdVE6ZVXJnLQraz3N
0MQRB3fuzZsWHlkENFBbZKBtgekXisx1ofuCy0qKZ6XS7icxx2GEqZ6libbABTnA
X15TrAcwft+AGq+5wY2ua/64fpgkYAIGxJYh60JgH4zqw+9pvkj40y//lUSvz/ug
qrwtBLvx/FKaw91VHQQrHrUjXJbd87x3DuTbBqQXuJbkO7NfSltjYs1NYCRVgYIV
LmT/XwsLDB8A44Tl9l2hxO7VTKzx1TMAoxk1OTHcPBcstt2cY3Jkz9TbumKPxJH5
3nmsqvxuwhsBbhVkZDdviQSd8DmvHKnAUG3BAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUFo78m/53sv2UreqpK1C1g0cP4YUwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN
OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy
MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvRm83OG1fNTNzdjJV
cmVxcEsxQzFnMGNQNFlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcJCDANBgkqhkiG9w0BAQsFAAOCAQEAd7mL2jYaGMd1LoPuFhbkpK/xm46q
y0hWv2XZhzPgM27d464W+ZwO5MPzpCLzDq5NKMuNTH5mrCJLUlpUNbQ26hVGjgm4
/EJtGKJSG/FTXAdm36UXIbUbeJfo+CiRZu3FZQ63IvkuLJRYgJuIZ4fCHEaaQZjo
V2CXwzY5PKMasRfPfOS5vVANZomrpiMXE7HKnlf794vWsozNtAOJNKMkvIiK3V9M
JO4BSgMxmAfJsA01m1gRYfOfgjAOR65QRUwjuyRaXXWzmPV0yfU/w0kOjDnDNblQ
cQbx6sK+ASm9rXj6kAab1+6gUjfTQgGeRiX+BTGiCuCWPV6zqaTCa9YqWQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:17 2026 by rpki-client