Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa
File: _K85EDzCVCt1pVVYSb2NSlH5sJs.roa (raw, json)
Hash identifier: eSDB40TI669OfppSy2WcGhDz0KocFI5RU5LpLB+t1Ng=
Subject key identifier: FC:AF:39:10:3C:C2:54:2B:75:A5:55:58:49:BD:8D:4A:51:F9:B0:9B
Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Certificate serial: 13B6
Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa
Signing time: Sat 06 Sep 2025 08:03:19 +0000
ROA not before: Sat 06 Sep 2025 08:03:19 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 9807
IP address blocks: 219.235.128.0/21 maxlen: 21
219.235.136.0/21 maxlen: 21
219.235.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5046 (0x13b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Validity
Not Before: Sep 6 08:03:19 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=FCAF39103CC2542B75A5555849BD8D4A51F9B09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:56:e7:ae:da:cb:5b:c8:98:24:b7:8e:04:
ee:da:a4:01:d0:53:85:1b:0c:db:10:6e:e8:f6:fa:
24:a3:e7:15:8a:80:e8:d4:68:91:5a:78:20:c5:4c:
d0:b7:44:a3:a5:2d:07:21:ad:90:05:0d:95:a8:3e:
f7:de:3e:df:5e:ef:f1:53:7f:82:80:45:a4:95:33:
9c:4f:af:71:95:36:1c:27:1a:fc:fd:a5:bf:11:3d:
ab:f5:01:30:15:43:0f:ba:26:c2:b6:d7:82:7e:f2:
34:8b:79:85:9e:52:f7:56:be:f4:7b:71:c5:bd:aa:
40:39:02:7a:64:97:e5:9c:b6:59:7a:3a:9d:30:42:
4e:a3:de:29:98:b6:82:51:5a:2c:af:54:74:81:f4:
5d:8c:b4:a2:a4:b8:ac:9e:67:03:9c:db:38:b3:2e:
05:2b:0d:94:14:08:ac:b7:57:cb:e2:eb:8d:8e:8a:
fb:e7:b0:77:77:47:de:db:6f:f4:45:77:80:a6:6d:
5b:f3:a3:34:03:ca:21:93:24:08:e9:52:1e:bd:fd:
a3:35:f7:6b:cf:0d:68:a1:66:53:bb:ff:d3:f3:90:
94:01:9f:56:95:d9:57:fc:f6:5f:07:43:ec:9a:a3:
59:8f:c1:4a:7d:91:f4:6c:a3:e5:73:42:2e:fb:d4:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:39:10:3C:C2:54:2B:75:A5:55:58:49:BD:8D:4A:51:F9:B0:9B
X509v3 Authority Key Identifier:
keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/_K85EDzCVCt1pVVYSb2NSlH5sJs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.235.128.0-219.235.151.255
Signature Algorithm: sha256WithRSAEncryption
06:4c:78:49:da:d6:0a:d1:f5:72:69:e5:2a:57:e0:cb:04:7d:
5a:df:c2:6c:d1:da:d1:fc:aa:da:11:46:b1:74:a3:32:78:70:
c5:02:1c:ab:4f:c6:a9:57:db:38:de:02:6a:90:33:67:14:49:
d8:2b:aa:16:2c:fc:98:57:25:68:68:2d:bc:3f:6a:d1:e6:0b:
82:38:12:2e:dd:38:b6:a3:a7:42:8e:72:26:d1:18:9d:c8:34:
ac:3f:fb:93:bc:be:88:70:08:0e:bf:ab:47:3e:d7:e8:bb:df:
dc:c3:50:35:99:d9:45:ef:b7:8b:e9:7c:a3:e3:3e:c1:94:b3:
44:b5:7b:11:59:6d:d0:4e:bf:2f:5d:5f:ba:07:46:20:cb:6a:
69:d6:af:81:cf:f9:c8:a1:cf:28:eb:ea:a0:a6:32:2d:7b:f5:
70:49:95:1e:80:1a:15:03:d6:14:cf:e3:87:4e:e0:c0:91:80:
66:d5:2f:4e:ed:1e:0c:45:89:74:a6:a8:a1:4f:f6:b4:c8:34:
f4:4c:1f:df:05:74:7e:60:9b:df:ef:47:38:3d:9b:49:35:f3:
77:ed:1b:ae:84:4a:bc:c4:75:f0:7f:74:44:f7:e0:12:6f:1e:
e2:e1:99:00:e5:6b:ff:0c:cc:57:d0:15:27:f7:2a:3a:08:95:
8d:bb:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:09:12 2025 by rpki-client