Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa
File: rovnomnuVFMNJzTNeyy5W6WRMe0.roa (raw, json)
Hash identifier: aVXERw9JByy2HpoXIifbCTO+OLw9MnI6ZPVD8/WtLto=
Subject key identifier: AE:8B:E7:A2:69:EE:54:53:0D:27:34:CD:7B:2C:B9:5B:A5:91:31:ED
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 1069
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa
Signing time: Tue 05 Aug 2025 13:49:07 +0000
ROA not before: Tue 05 Aug 2025 13:49:07 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 140224
IP address blocks: 103.116.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4201 (0x1069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Aug 5 13:49:07 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=AE8BE7A269EE54530D2734CD7B2CB95BA59131ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:f8:b1:93:21:14:a9:3c:94:e4:c9:c3:a2:
11:ff:44:de:6f:58:eb:05:a5:1d:fd:e3:01:56:81:
f9:f9:15:19:0c:ec:72:00:9c:8b:ad:9b:9c:0e:0b:
6f:9c:96:2e:dc:73:ad:dd:bb:4b:e1:a0:06:e4:4d:
19:0b:c9:9a:43:fa:b8:97:73:05:11:59:65:67:29:
57:d5:6e:c5:21:bc:47:fe:95:20:71:5e:d4:3e:d6:
b9:84:6e:12:7c:98:cf:7d:d2:15:ad:6c:c4:5d:09:
31:2d:ca:e0:86:b9:7f:73:56:88:ff:26:62:13:59:
8b:c7:4d:44:7c:ca:5b:2c:15:2a:8e:a3:70:b0:e1:
d0:62:79:d5:16:58:4a:34:41:99:dc:23:db:70:51:
b3:09:d3:53:12:9b:d8:a9:c5:5c:5a:ab:14:e2:57:
25:cd:0a:92:76:1d:b7:35:27:41:87:49:5d:23:1c:
b8:04:19:06:a5:c8:eb:96:df:a4:ab:1e:9c:a1:68:
0e:a8:04:4d:e8:ac:54:7a:cd:0f:3d:7a:a1:ac:7c:
d5:31:d9:26:f6:a9:d7:b2:d8:60:3e:ab:7f:f2:16:
52:e5:78:d8:0b:b1:3e:3e:c2:44:9f:27:06:2c:06:
a9:32:f2:40:04:c0:1c:37:87:cb:80:93:df:69:a1:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:E7:A2:69:EE:54:53:0D:27:34:CD:7B:2C:B9:5B:A5:91:31:ED
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/rovnomnuVFMNJzTNeyy5W6WRMe0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.150.0/24
Signature Algorithm: sha256WithRSAEncryption
29:60:ea:83:01:35:fb:89:d1:82:79:bf:98:ea:c5:ac:d1:b1:
8c:c4:44:43:9a:b2:77:21:e5:09:f1:0b:5a:82:83:6b:6c:33:
1d:e0:2b:9d:1f:36:b2:b2:03:7a:55:74:ed:b2:5d:a3:42:db:
85:cf:dd:fc:cc:5e:04:0a:45:57:a5:aa:8d:8b:db:bd:54:68:
13:84:a5:cc:72:28:7d:56:26:84:e7:cb:ec:79:e8:4f:d6:2f:
7f:92:8a:2b:09:34:a0:2d:09:57:fa:54:13:ba:b7:88:26:29:
68:06:2a:e4:54:1e:af:10:79:7f:fe:8b:34:c0:1c:f1:ae:0e:
cf:7f:94:70:57:13:a3:e2:2c:ad:ff:a9:50:19:c1:36:5e:04:
ca:6a:9f:46:36:f6:5a:1e:ec:d8:4c:21:b5:29:de:22:85:c1:
0e:b5:63:21:cd:21:9b:2a:c6:ed:35:1e:c0:9e:14:f1:36:5f:
25:57:d5:a9:33:a6:36:3a:29:26:b9:66:e9:6d:a5:a0:d5:07:
42:ca:c6:58:e3:a0:c1:fc:87:c5:89:50:d0:94:18:3a:63:47:
47:b6:83:50:5d:73:6f:5d:1e:9c:f4:fc:d6:d3:81:1e:8c:24:
dc:d2:94:bb:c8:01:1e:ec:1b:7c:a3:6c:7d:dc:9c:0c:25:e2:
3e:d6:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:36 2025 by rpki-client