Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/399/qX5cQ_scD2KsfTjXg6_DAZuGgjU.roa
File: qX5cQ_scD2KsfTjXg6_DAZuGgjU.roa (raw, json)
Hash identifier: JPCd0lAC1nVCp1iRe4HYcMffLrAXhU3q/4vz7zChxh0=
Subject key identifier: A9:7E:5C:43:FB:1C:0F:62:AC:7D:38:D7:83:AF:C3:01:9B:86:82:35
Certificate issuer: /CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Certificate serial: 4F73
Authority key identifier: 51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/qX5cQ_scD2KsfTjXg6_DAZuGgjU.roa
Signing time: Mon 26 Jan 2026 06:54:52 +0000
ROA not before: Mon 26 Jan 2026 06:54:52 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 132203
IP address blocks: 203.205.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20339 (0x4f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C4C1D52D2E3FE6BF3D9BF1B3D6924B49C5D4E5
Validity
Not Before: Jan 26 06:54:52 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=A97E5C43FB1C0F62AC7D38D783AFC3019B868235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:c3:a1:cf:b0:08:d6:61:bb:62:fa:eb:5f:
39:9b:1d:d3:17:98:53:f3:10:90:ba:a9:62:e4:e9:
d6:2b:4e:b5:7a:53:46:a1:8f:a0:24:27:49:b9:02:
fc:41:5d:da:ff:e4:c6:16:14:47:2d:06:01:90:8a:
71:2e:48:db:90:af:01:37:07:b8:f7:03:24:ae:ee:
1f:5a:e5:c3:2e:a6:b7:65:bf:14:3b:dd:c1:4f:97:
93:dc:2f:05:22:68:43:b8:32:2c:9a:28:64:35:75:
86:fc:c9:4d:70:e3:18:4d:cd:ce:f3:26:c9:93:5a:
6c:37:0b:5f:2a:78:d6:02:c5:12:b9:4c:8f:75:fa:
ee:13:94:f2:15:31:50:28:6d:27:58:40:94:a8:42:
97:16:8c:02:3b:cf:31:5e:5e:66:dd:55:d4:a0:b3:
85:20:57:ac:5b:d0:53:61:a3:1f:9b:d5:97:ba:88:
ff:e7:fe:cf:20:4d:8e:33:68:14:f9:fa:23:69:3c:
21:72:a0:81:dd:bd:e6:03:b9:eb:84:08:46:1c:34:
ee:af:9b:9f:8e:9b:43:14:85:b0:69:9e:d0:d6:e8:
29:73:3c:8a:6a:2a:14:01:60:98:a5:9e:db:88:ff:
37:5d:a4:e4:02:a0:c9:e2:ad:95:32:8b:e4:09:64:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:5C:43:FB:1C:0F:62:AC:7D:38:D7:83:AF:C3:01:9B:86:82:35
X509v3 Authority Key Identifier:
keyid:51:C4:C1:D5:2D:2E:3F:E6:BF:3D:9B:F1:B3:D6:92:4B:49:C5:D4:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/UcTB1S0uP-a_PZvxs9aSS0nF1OU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UcTB1S0uP-a_PZvxs9aSS0nF1OU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/399/qX5cQ_scD2KsfTjXg6_DAZuGgjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.205.136.0/24
Signature Algorithm: sha256WithRSAEncryption
42:32:ac:89:d9:09:a5:9a:4b:cf:27:bf:9f:45:6f:9e:9c:1e:
af:7f:4f:d6:bc:23:ea:f2:ec:e8:79:44:a9:98:2f:59:11:18:
4c:05:14:0a:d5:0e:d9:28:bb:7d:d4:da:35:7c:7a:eb:9d:05:
8b:bc:09:79:8a:1d:39:38:7b:b1:09:af:69:06:d9:08:e1:b6:
5b:c5:33:b6:c9:fd:fd:65:eb:a9:32:f8:d2:f7:a0:0c:51:16:
60:aa:cd:ce:43:38:3d:1e:95:80:54:32:43:b9:cb:05:71:92:
e7:2a:fb:b7:20:f1:d0:d5:ee:94:5d:ac:61:5f:ce:63:fe:34:
ab:1b:35:c2:5e:20:9b:93:b4:fd:99:dd:ad:d2:eb:95:fd:4b:
91:85:79:8b:2c:9b:b8:f5:96:54:79:3e:1e:2a:5c:ec:8c:7e:
3c:0e:dc:c0:96:1d:71:c1:83:82:d4:cb:89:0a:2f:8e:67:05:
85:41:39:98:09:78:f4:db:fc:dd:b0:e3:ee:9a:1f:80:23:2c:
f6:65:6a:25:c1:52:12:2b:6a:34:d8:75:75:41:a9:1e:48:20:
69:68:32:dd:3c:40:51:91:34:bf:6e:31:cd:1b:e5:5b:00:8c:
36:4c:76:45:11:fe:b0:76:ab:4a:53:ab:37:2f:ce:83:4a:3e:
8b:67:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:04 2026 by rpki-client