Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Xao8lV89CRRujaNr2axAr2UyyIU.roa
File: Xao8lV89CRRujaNr2axAr2UyyIU.roa (raw, json)
Hash identifier: EET3Z91LH1uCFtvF0vTuHKfXCUx1vZzSPBZBl1olXks=
Subject key identifier: 5D:AA:3C:95:5F:3D:09:14:6E:8D:A3:6B:D9:AC:40:AF:65:32:C8:85
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19FB
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Xao8lV89CRRujaNr2axAr2UyyIU.roa
Signing time: Mon 26 Jan 2026 06:53:03 +0000
ROA not before: Mon 26 Jan 2026 06:53:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 103.9.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6651 (0x19fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:53:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=5DAA3C955F3D09146E8DA36BD9AC40AF6532C885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:51:97:c1:d7:ed:c8:dd:90:71:02:1c:e8:
ea:d1:55:fb:8e:f1:89:9b:f1:7e:95:c2:83:ed:60:
25:eb:55:67:dc:c4:48:5b:8c:f7:a6:3f:56:a6:49:
0d:13:e3:87:bc:9d:63:33:d0:95:5d:c4:a6:98:49:
3d:b1:1d:07:dc:db:e0:29:12:bf:0c:00:0b:c1:55:
70:1b:0c:36:ae:d9:fb:9d:f9:ea:86:46:44:6d:04:
a5:d2:0f:fb:0c:d1:5e:54:18:a7:6d:e2:30:a0:b8:
8d:78:b1:9b:98:81:2d:5c:44:fe:d2:67:8a:58:95:
0e:21:e7:ac:14:54:ca:ad:10:14:86:b7:67:c7:69:
6a:1f:6e:6e:65:a7:85:1c:38:ee:c7:89:ec:08:50:
97:ef:07:8c:ec:2a:da:54:c4:3a:a3:27:63:64:0c:
a0:f4:94:c7:ee:37:a5:1e:f0:cb:09:f4:57:db:88:
5b:d2:3f:d2:68:c6:0a:88:40:bf:2d:d5:0c:bf:1a:
fd:82:93:0c:af:01:09:b5:5d:7d:8a:a5:6a:ba:9d:
50:ce:11:e3:11:4f:03:d2:e8:07:1f:9f:77:47:94:
28:a9:95:68:58:1e:85:4b:1d:8f:81:fe:05:84:6b:
0f:20:33:56:f1:c9:2e:3d:c5:e0:c2:87:f2:54:c6:
33:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:3C:95:5F:3D:09:14:6E:8D:A3:6B:D9:AC:40:AF:65:32:C8:85
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Xao8lV89CRRujaNr2axAr2UyyIU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:8d:3f:a8:6b:b4:db:27:07:3d:b8:08:88:02:77:6c:c5:e4:
e5:5a:00:72:b9:8e:d4:23:cd:c8:1d:2f:a2:9a:16:8e:64:fc:
ba:fc:26:1f:01:65:81:df:61:f6:26:16:65:0e:20:0b:67:48:
fe:9f:e1:42:e2:c3:49:0d:f0:5e:b1:a5:e4:9f:2e:59:9a:cf:
9e:de:a3:90:bb:a0:70:56:31:59:10:32:59:03:7b:10:6e:4e:
13:3f:18:58:df:cb:65:ec:c5:47:e7:e7:88:1d:8f:91:9e:96:
5f:be:ce:46:69:01:6a:4e:36:c8:ae:af:65:e1:9d:e1:15:2b:
ef:9a:3b:0b:7f:31:25:d2:0e:9b:47:a2:06:2c:d6:6d:9f:9b:
b5:e9:13:64:cb:b3:67:c1:2c:16:74:a8:1b:8f:f1:6a:f0:35:
dc:03:60:e2:6f:e7:1a:80:c7:ba:57:1a:68:5a:26:08:69:25:
7c:72:49:fb:02:57:b1:1f:1a:8f:79:d5:47:d0:b3:44:2e:09:
47:f5:41:04:44:c9:b2:79:ce:1e:bf:14:7d:8d:5f:0a:04:00:
41:79:b0:07:56:5f:5d:11:b3:b9:18:47:f1:27:d3:cc:e9:3a:
e0:75:03:d6:8d:7b:e9:8c:30:1f:a8:a9:b1:4d:e8:d6:14:ea:
34:fe:06:b4
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF
RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNjAxMjYw
NjUzMDNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDVEQUEzQzk1NUYzRDA5
MTQ2RThEQTM2QkQ5QUM0MEFGNjUzMkM4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0+lGXwdftyN2QcQIc6OrRVfuO8Ymb8X6VwoPtYCXrVWfcxEhb
jPemP1amSQ0T44e8nWMz0JVdxKaYST2xHQfc2+ApEr8MAAvBVXAbDDau2fud+eqG
RkRtBKXSD/sM0V5UGKdt4jCguI14sZuYgS1cRP7SZ4pYlQ4h56wUVMqtEBSGt2fH
aWofbm5lp4UcOO7HiewIUJfvB4zsKtpUxDqjJ2NkDKD0lMfuN6Ue8MsJ9FfbiFvS
P9JoxgqIQL8t1Qy/Gv2CkwyvAQm1XX2KpWq6nVDOEeMRTwPS6Acfn3dHlCiplWhY
HoVLHY+B/gWEaw8gM1bxyS49xeDCh/JUxjNlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUXao8lV89CRRujaNr2axAr2UyyIUwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN
OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy
MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvWGFvOGxWODlDUlJ1
amFOcjJheEFyMlV5eUlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcJCDANBgkqhkiG9w0BAQsFAAOCAQEAC40/qGu02ycHPbgIiAJ3bMXk5VoA
crmO1CPNyB0vopoWjmT8uvwmHwFlgd9h9iYWZQ4gC2dI/p/hQuLDSQ3wXrGl5J8u
WZrPnt6jkLugcFYxWRAyWQN7EG5OEz8YWN/LZezFR+fniB2PkZ6WX77ORmkBak42
yK6vZeGd4RUr75o7C38xJdIOm0eiBizWbZ+btekTZMuzZ8EsFnSoG4/xavA13ANg
4m/nGoDHulcaaFomCGklfHJJ+wJXsR8aj3nVR9CzRC4JR/VBBETJsnnOHr8UfY1f
CgQAQXmwB1ZfXRGzuRhH8SfTzOk64HUD1o176YwwH6ipsU3o1hTqNP4GtA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:47 2026 by rpki-client