Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa
File: yNqVshGXli1u3opJ5fDOPZQ225g.roa (raw, json)
Hash identifier: oadm03aEFC5zsx2yDKoF5Znsnmhqk50He7/z+0c/ruU=
Subject key identifier: C8:DA:95:B2:11:97:96:2D:6E:DE:8A:49:E5:F0:CE:3D:94:36:DB:98
Certificate issuer: /CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Certificate serial: 0553
Authority key identifier: 2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa
Signing time: Sun 24 Aug 2025 14:15:45 +0000
ROA not before: Sun 24 Aug 2025 14:15:45 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4816
IP address blocks: 103.236.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EC2CCB83DDFBF43332266B76A6221362143E365
Validity
Not Before: Aug 24 14:15:45 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C8DA95B21197962D6EDE8A49E5F0CE3D9436DB98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:bc:eb:89:91:ab:aa:e4:82:05:14:1b:2f:
24:6b:70:69:07:2f:35:17:3f:3d:86:e3:07:17:18:
ce:30:d3:9d:e0:01:a4:89:48:c9:81:4b:ad:32:90:
9a:54:01:22:fb:7b:a9:83:68:1a:ee:f9:f7:b2:94:
bd:27:d1:30:b4:b3:84:a7:11:6f:91:33:30:2e:2b:
ae:b9:10:cd:bc:58:7d:3c:96:70:b0:88:ce:5b:57:
4c:db:18:1c:1b:1d:29:b9:a2:f7:e3:25:9a:3b:e6:
c3:47:a1:b3:0b:fe:ba:99:35:88:9b:ab:2d:51:4a:
e6:4c:d7:e4:a1:e4:cf:ea:2d:37:04:08:a6:4f:a7:
06:1f:a2:60:78:ac:25:16:c1:56:21:5b:56:e0:41:
4b:64:4d:f4:8f:36:05:7a:86:bd:72:54:3c:0a:e6:
81:ea:88:af:42:8a:88:8d:35:49:a7:dd:9a:ce:f7:
18:2c:4b:bf:c6:e8:e8:27:69:8c:f5:29:25:27:81:
cd:9b:17:fc:56:e9:a3:43:58:71:aa:24:b4:b8:5d:
e5:c4:a6:95:63:ab:1c:9d:19:58:44:47:79:11:a7:
ff:2d:8d:d6:1e:84:4a:37:aa:03:d9:8a:dc:7d:26:
0e:57:73:c1:91:6b:a8:b5:99:d7:fa:c4:f6:77:a8:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:95:B2:11:97:96:2D:6E:DE:8A:49:E5:F0:CE:3D:94:36:DB:98
X509v3 Authority Key Identifier:
keyid:2E:C2:CC:B8:3D:DF:BF:43:33:22:66:B7:6A:62:21:36:21:43:E3:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/LsLMuD3fv0MzIma3amIhNiFD42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LsLMuD3fv0MzIma3amIhNiFD42U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3331/yNqVshGXli1u3opJ5fDOPZQ225g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.60.0/22
Signature Algorithm: sha256WithRSAEncryption
38:24:b9:44:49:dc:bf:6d:d5:20:e7:8c:2a:a2:25:e4:99:96:
64:2d:0c:9e:a6:14:9a:c3:62:34:c1:08:48:dd:b0:2c:cf:f4:
34:39:8d:af:66:b6:24:5d:fe:e1:08:40:b1:e7:a9:43:8f:df:
0f:76:c7:f1:78:66:1a:7c:43:8d:b3:80:90:d8:4a:36:f9:42:
fd:90:79:79:6c:92:13:99:91:6e:30:74:28:98:84:62:bc:8b:
2c:f2:49:5c:55:4e:b1:fc:12:3c:16:d0:80:43:63:de:af:f4:
77:11:9e:8b:05:ff:36:c2:d1:db:f1:1f:c5:13:64:a0:d9:4a:
de:c9:76:37:fd:3b:2b:0f:c6:3c:85:b6:3e:43:b5:e6:7f:4c:
40:ba:91:e7:a3:f6:5d:c9:bf:41:9b:f3:1c:bf:32:1c:eb:7b:
03:aa:7f:3a:30:34:91:1b:90:ce:ba:5e:d4:4f:36:6c:cf:74:
99:ef:f4:da:b1:46:06:57:b0:e1:c7:7b:7b:0a:62:e8:c5:2f:
8b:1d:16:ff:6f:6a:29:54:0c:01:18:fe:92:80:08:ae:8f:4a:
d7:e9:a7:b5:e0:3d:68:57:87:d1:7d:65:ea:21:18:b2:b8:3e:
b5:6a:f8:10:d2:a8:b8:fa:41:e6:1a:77:66:07:0a:00:74:05:
11:97:6e:4c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkVD
MkNDQjgzRERGQkY0MzMzMjI2NkI3NkE2MjIxMzYyMTQzRTM2NTAeFw0yNTA4MjQx
NDE1NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM4REE5NUIyMTE5Nzk2
MkQ2RURFOEE0OUU1RjBDRTNEOTQzNkRCOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvq7zriZGrquSCBRQbLyRrcGkHLzUXPz2G4wcXGM4w053gAaSJ
SMmBS60ykJpUASL7e6mDaBru+feylL0n0TC0s4SnEW+RMzAuK665EM28WH08lnCw
iM5bV0zbGBwbHSm5ovfjJZo75sNHobML/rqZNYibqy1RSuZM1+Sh5M/qLTcECKZP
pwYfomB4rCUWwVYhW1bgQUtkTfSPNgV6hr1yVDwK5oHqiK9CioiNNUmn3ZrO9xgs
S7/G6OgnaYz1KSUngc2bF/xW6aNDWHGqJLS4XeXEppVjqxydGVhER3kRp/8tjdYe
hEo3qgPZitx9Jg5Xc8GRa6i1mdf6xPZ3qLnrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUyNqVshGXli1u3opJ5fDOPZQ225gwHwYDVR0jBBgwFoAULsLMuD3fv0MzIma3
amIhNiFD42UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz
MS9Mc0xNdUQzZnYwTXpJbWEzYW1JaE5pRkQ0MlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xzTE11RDNmdjBNekltYTNhbUloTmlGRDQyVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzEveU5xVnNoR1hsaTF1
M29wSjVmRE9QWlEyMjVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfsPDANBgkqhkiG9w0BAQsFAAOCAQEAOCS5REncv23VIOeMKqIl5JmWZC0M
nqYUmsNiNMEISN2wLM/0NDmNr2a2JF3+4QhAseepQ4/fD3bH8XhmGnxDjbOAkNhK
NvlC/ZB5eWySE5mRbjB0KJiEYryLLPJJXFVOsfwSPBbQgENj3q/0dxGeiwX/NsLR
2/EfxRNkoNlK3sl2N/07Kw/GPIW2PkO15n9MQLqR56P2Xcm/QZvzHL8yHOt7A6p/
OjA0kRuQzrpe1E82bM90me/02rFGBlew4cd7ewpi6MUvix0W/29qKVQMARj+koAI
ro9K1+mnteA9aFeH0X1l6iEYsrg+tWr4ENKouPpB5hp3ZgcKAHQFEZduTA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:57:39 2025 by rpki-client