Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/KmYHeNNU5gg60PkGlsLpsNFJao4.roa
File: KmYHeNNU5gg60PkGlsLpsNFJao4.roa (raw, json)
Hash identifier: IgpL3Rm3dSWatmUXKrIk22DdVsVKY8DIhcoqFsh1gnE=
Subject key identifier: 2A:66:07:78:D3:54:E6:08:3A:D0:F9:06:96:C2:E9:B0:D1:49:6A:8E
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 0627
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/KmYHeNNU5gg60PkGlsLpsNFJao4.roa
Signing time: Mon 26 Jan 2026 06:38:00 +0000
ROA not before: Mon 26 Jan 2026 06:38:00 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 134140
IP address blocks: 103.118.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Jan 26 06:38:00 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2A660778D354E6083AD0F90696C2E9B0D1496A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:5b:3b:64:13:c5:d9:98:9b:5f:00:d8:d4:
21:35:2c:8f:49:17:82:a6:4c:d1:6e:8a:cc:b5:5a:
04:10:cc:59:0a:c2:a1:37:43:4a:52:51:94:98:d0:
54:0f:30:ea:08:7c:3f:70:dd:2a:8c:5c:6c:19:27:
d5:93:19:87:9a:74:d2:d6:a9:cd:5a:25:21:9b:f6:
40:ba:98:73:81:d2:a8:6f:f1:fd:53:8c:b6:b7:b7:
eb:84:c7:74:b1:eb:21:3f:73:90:54:2a:fb:e9:c9:
a8:70:37:4c:e6:08:85:1d:e5:cd:2c:de:d8:8a:1f:
2a:2e:50:64:5f:33:3c:29:82:91:ec:7e:5b:20:b1:
e6:98:a9:42:d3:49:0a:26:53:42:cd:53:1f:15:1d:
d2:ba:b5:ae:40:90:65:6e:c1:d0:27:85:6b:5a:a3:
fc:db:24:d3:a8:6d:b4:94:68:42:ed:1a:82:2f:4a:
d9:58:0f:af:38:b3:2b:f4:1a:21:f4:a9:ee:cb:6b:
6f:0f:f3:84:52:49:ed:bd:cb:3f:fd:aa:b1:34:90:
f1:e4:91:e4:c9:13:56:c2:3b:c2:78:17:b4:99:46:
7c:97:37:ae:01:c8:38:a1:6c:3e:c5:af:9b:88:8b:
9c:9d:b3:3d:0a:a2:32:c9:ce:e3:94:11:74:45:d2:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:66:07:78:D3:54:E6:08:3A:D0:F9:06:96:C2:E9:B0:D1:49:6A:8E
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/KmYHeNNU5gg60PkGlsLpsNFJao4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
02:9f:4d:ef:c8:2e:d3:ac:54:69:f4:34:81:cf:ce:10:59:87:
0f:b2:fb:6d:20:7a:5e:b3:d2:d2:b8:f1:fe:b9:42:d3:a4:37:
ae:2f:6e:6d:1f:5a:fc:df:6f:12:1b:cb:fe:3a:e3:df:20:b2:
f7:3f:09:10:f2:fb:42:79:98:56:99:0a:6b:f0:fb:7b:fa:0e:
96:37:58:84:70:c2:d4:68:ac:77:f2:af:c5:13:b5:ac:5f:74:
85:b1:50:86:3f:8d:1a:97:d3:dd:c9:64:eb:d9:f4:7a:2a:4e:
18:be:b4:9c:68:14:e6:a9:e3:55:2f:e5:de:24:3f:15:5e:64:
f8:02:ab:67:39:7a:c9:7d:22:8d:61:8b:88:e0:74:30:6f:27:
11:4c:2f:10:5a:70:37:0c:d7:8b:53:a3:f1:de:af:cc:41:70:
2c:b5:f8:70:fd:3c:13:16:09:b3:1e:6c:2d:75:fe:5c:17:67:
21:8e:ad:94:f8:da:6f:77:fc:cf:0b:cc:1f:a0:65:e9:cd:b9:
be:fe:c3:77:9d:4b:27:ae:f4:2b:6f:fd:d4:e6:6b:55:f8:70:
80:5a:d4:b8:fa:e4:d5:7c:3c:e0:5b:1c:c8:53:8e:e9:15:f6:
a6:07:ed:e9:bc:ca:fe:27:5c:ac:79:d0:9a:df:90:f9:e3:f5:
5f:88:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:13 2026 by rpki-client