Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa
File: dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa (raw, json)
Hash identifier: fe0R0O/tDcwRGtS8LBxBn0ubT/H+sW0PL+PcZP5HPRE=
Subject key identifier: 77:32:51:48:E0:77:CF:E2:06:96:8E:03:CE:B4:A4:36:A4:E7:32:23
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 0573
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa
Signing time: Fri 01 Aug 2025 06:34:43 +0000
ROA not before: Fri 01 Aug 2025 06:34:43 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134768
IP address blocks: 103.236.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Aug 1 06:34:43 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=77325148E077CFE206968E03CEB4A436A4E73223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:3d:c0:80:d7:91:72:10:f6:30:a4:3c:fc:
18:74:15:bc:a7:b7:5f:a8:c2:43:ac:46:99:7c:0d:
12:be:30:ba:3c:fa:56:79:f1:f5:74:70:b4:23:8d:
6e:ba:be:bd:99:d7:bd:8c:fd:02:56:62:a3:7b:6c:
63:cd:50:31:25:72:54:4e:13:cd:f1:c3:9f:e3:67:
6e:38:bd:82:c9:81:f9:6c:26:eb:b6:c4:2d:d4:3f:
26:4d:f3:9c:c8:c2:ec:8b:5c:63:41:53:2a:5d:8f:
ec:2a:82:99:c8:c4:08:ea:f6:13:66:25:bf:0c:48:
ce:2a:fe:96:7c:af:b8:0d:9c:ef:f9:60:dc:88:87:
86:69:a5:40:50:ea:cb:83:96:56:d7:e2:13:f4:6e:
ba:01:47:c0:bc:41:57:09:ad:55:97:94:67:b7:2e:
3a:05:4b:82:69:3f:62:ae:76:83:5d:e1:af:b8:e6:
1d:b6:01:b7:45:f4:ff:b7:99:e0:a9:79:78:03:db:
82:c1:61:ba:09:90:52:f2:56:c5:c9:b5:3f:48:ab:
92:eb:e9:73:9e:9a:1a:a7:25:b3:96:69:fd:4a:c2:
74:e4:f7:ec:ab:b7:19:73:78:0e:3e:f2:59:e8:72:
5d:db:9f:ae:3d:74:f9:b1:78:d1:d7:3a:11:29:a4:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:51:48:E0:77:CF:E2:06:96:8E:03:CE:B4:A4:36:A4:E7:32:23
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
65:67:96:f1:87:d3:15:77:71:d0:9e:0a:1f:61:d0:ff:eb:c7:
8e:d2:8d:6b:2d:5b:6a:61:c7:a1:89:2f:76:59:50:af:24:90:
16:e7:2e:44:5a:a1:78:00:6d:53:c1:f9:61:67:ec:63:c2:20:
2a:59:ae:a4:7a:d4:e3:16:64:b5:6f:9e:39:e9:9b:a0:a3:88:
33:3d:ea:ed:f6:10:1b:6b:e6:96:7b:ec:60:c8:4e:e9:4d:47:
58:d5:6e:17:ac:ec:40:dc:75:be:33:aa:c3:ac:5a:36:b7:8e:
c8:70:04:3b:30:0b:55:13:61:a5:4b:97:7d:06:cc:03:a0:fd:
b3:e2:5b:81:cf:4a:7c:48:47:cb:cf:5f:28:cf:6d:ef:bc:92:
8e:4d:4e:97:8f:6f:d3:5c:58:78:ed:cf:34:99:5d:8b:ba:61:
23:a3:4d:67:be:39:79:0a:7c:9f:09:d9:f4:ca:32:40:86:33:
2c:5a:be:52:62:7f:92:c8:2f:c2:55:29:16:6a:5c:f0:07:51:
d2:27:f0:fc:24:1b:de:18:01:17:a3:7e:df:8d:3b:84:4e:e8:
51:9c:33:56:15:6b:61:23:57:03:b3:8f:72:da:58:d2:24:99:
25:2f:c7:3e:14:58:d8:7e:57:e7:08:ae:1c:5c:e0:73:40:5c:
b7:c5:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:36:22 2025 by rpki-client