Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa
File: r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa (raw, json)
Hash identifier: PM2P1MhouU6OeP4L+yxJmedYMEmSPCxVcGJ0McbUX18=
Subject key identifier: AF:80:23:A9:5C:24:0D:25:0D:A0:C8:31:C9:0B:66:21:59:28:40:C7
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 058E
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa
Signing time: Fri 01 Aug 2025 06:36:04 +0000
ROA not before: Fri 01 Aug 2025 06:36:04 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134768
IP address blocks: 103.236.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Aug 1 06:36:04 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=AF8023A95C240D250DA0C831C90B6621592840C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:ff:3c:59:bf:ee:d9:2b:43:b0:a2:89:91:
1d:7a:02:25:a9:1c:14:15:43:c4:e2:4d:20:20:4b:
d4:90:9e:a8:71:a4:bf:4f:74:5a:a0:65:ca:3c:96:
24:99:80:7c:bb:bb:cc:96:8e:1d:0d:b4:c6:60:d4:
84:76:ee:2b:bf:4b:f5:d1:bf:0d:f3:fb:d1:15:6e:
42:bd:e2:16:2a:eb:f6:de:00:cf:8a:5f:21:ef:83:
27:58:9a:7e:b4:4d:1c:dc:4b:41:07:95:73:d4:f9:
1b:10:93:21:0a:91:63:3f:72:d8:69:c1:e9:f2:3b:
c4:2e:08:e4:c6:be:c8:cd:fe:fb:c2:6f:31:60:69:
6a:1f:bf:40:48:08:80:a2:ce:2a:ae:ec:ce:f0:a2:
a1:ec:d1:34:1e:6e:02:25:95:b9:a6:c0:44:3d:a9:
e8:9a:e3:3f:29:5a:5e:95:34:f1:e7:a1:e7:a4:bd:
10:e6:b5:0a:bc:ca:d0:d8:7f:75:40:88:c6:d0:73:
cf:8d:65:c1:ef:46:db:2c:1c:0d:d0:ad:94:f2:18:
29:32:8b:97:05:3a:b2:5c:fd:19:c0:a6:2e:59:6c:
c0:85:f3:20:cd:7c:98:e0:89:f2:8c:97:d7:ff:55:
a3:41:30:84:39:39:ca:3b:3a:88:61:78:f8:04:a7:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:23:A9:5C:24:0D:25:0D:A0:C8:31:C9:0B:66:21:59:28:40:C7
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.94.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9b:ce:10:13:0d:46:60:f8:5c:02:e6:a3:a3:85:70:03:8c:
f3:48:d3:c6:ee:5c:d5:1e:dc:66:83:d2:c4:fd:87:9a:26:b8:
57:a9:05:d8:c3:36:6d:18:fb:b7:38:11:43:77:95:36:0c:7e:
3f:fc:e5:cc:db:db:45:ab:6c:a3:73:0e:6c:02:2b:09:42:c6:
f5:f1:30:bc:a0:36:40:8c:0c:4c:80:c5:4f:ef:d4:bf:23:75:
f7:0e:ca:5a:7f:99:13:0d:9a:fd:f2:7c:aa:65:b4:fa:ef:5e:
2e:a4:26:54:1d:46:e0:49:3e:25:5c:d2:5d:32:cb:d4:7d:00:
8d:0b:0b:ea:4b:7d:3f:74:75:50:98:4f:67:dd:bf:a7:9e:9a:
50:fb:07:11:8b:09:42:2f:24:b6:6e:20:68:0c:7e:fb:f4:3d:
47:d2:97:9c:dc:68:71:4f:7e:72:2c:3a:73:0a:4b:ce:93:28:
45:b2:a3:7d:1b:98:e2:4b:05:78:c5:e9:1a:57:77:88:09:33:
f8:2f:15:cc:81:ad:c1:fb:cf:6a:53:17:7c:11:2f:83:2e:4a:
d4:0e:58:56:88:07:6c:73:3c:f8:f4:32:15:3c:65:a9:17:bf:
3d:35:e0:d6:11:c7:77:82:a2:74:3a:35:ed:96:96:12:3b:80:
fc:35:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:37:33 2025 by rpki-client