Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/190/mHioxaoNlR4rQkTXc19lcJw6Lec.roa
File: mHioxaoNlR4rQkTXc19lcJw6Lec.roa (raw, json)
Hash identifier: PLOJpyanF+nIlJcassXGyNX33blBNLIGT9wBL2ZAaI4=
Subject key identifier: 98:78:A8:C5:AA:0D:95:1E:2B:42:44:D7:73:5F:65:70:9C:3A:2D:E7
Certificate issuer: /CN=E48FED76038496AD2AB1972D13468F4D3D403164
Certificate serial: 196D
Authority key identifier: E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/mHioxaoNlR4rQkTXc19lcJw6Lec.roa
Signing time: Mon 26 Jan 2026 06:55:02 +0000
ROA not before: Mon 26 Jan 2026 06:55:02 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 24427
IP address blocks: 202.170.222.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6509 (0x196d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48FED76038496AD2AB1972D13468F4D3D403164
Validity
Not Before: Jan 26 06:55:02 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=9878A8C5AA0D951E2B4244D7735F65709C3A2DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:19:7b:29:3c:9b:77:39:57:b6:f3:1f:1a:
d9:ad:e4:56:e9:ab:8b:f8:9e:d4:7b:56:d3:23:9d:
3c:c2:9e:2e:e6:d0:07:15:d6:43:80:67:49:59:88:
69:ae:b6:e3:8b:8b:99:2a:e8:5b:ae:ae:90:82:57:
82:36:6d:e4:2e:06:d8:7c:96:ad:71:c2:44:6d:c8:
7f:94:1d:5d:b2:e0:40:7e:80:e3:40:10:fb:2b:ed:
bb:89:46:88:38:b3:54:72:55:09:8e:20:d4:3e:5d:
ff:48:dd:79:31:a1:de:c0:85:7d:8c:72:c8:98:e0:
67:e2:eb:55:dc:7d:0b:ac:67:c0:be:f3:3b:11:79:
b2:80:bf:18:e8:ce:50:33:8c:1f:13:2c:65:3e:80:
08:70:56:d1:3a:7c:a7:15:a2:30:f7:16:cb:e2:67:
8d:4d:4e:9f:5b:4d:8f:45:ce:72:f4:47:85:dc:4a:
a7:b1:14:2d:0b:a1:72:a1:21:26:70:5a:b1:0f:8e:
bc:2b:5d:dd:b3:ca:cc:e9:58:df:44:77:7c:84:04:
cd:e4:c0:6b:ef:32:58:44:7f:f0:f0:a0:08:a4:3f:
a7:ea:9b:0e:28:cc:62:2b:77:da:51:2e:59:58:d8:
36:89:64:91:e5:16:c3:cb:a7:1b:52:01:a9:2b:9a:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:A8:C5:AA:0D:95:1E:2B:42:44:D7:73:5F:65:70:9C:3A:2D:E7
X509v3 Authority Key Identifier:
keyid:E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/mHioxaoNlR4rQkTXc19lcJw6Lec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.170.222.0/24
Signature Algorithm: sha256WithRSAEncryption
57:be:97:ff:fe:02:9f:06:04:e8:43:b2:c8:37:8d:5f:ed:4b:
69:7d:75:8a:ad:dc:60:b5:15:2c:8f:2f:2c:4b:fc:0b:69:ed:
c8:22:e1:e8:3a:88:90:a3:8d:4d:6f:9e:4c:eb:53:5e:3f:46:
8f:5e:cd:e3:61:db:cf:7a:6a:45:26:48:f6:54:7d:07:30:7f:
81:51:0a:f9:3b:81:74:53:22:68:49:f4:7f:c1:02:c8:e1:bc:
82:9e:de:d2:00:c4:7f:17:df:3c:53:01:43:c9:6a:1b:52:11:
6a:77:13:a0:53:ef:d1:f3:f0:61:a0:26:18:c0:2e:dd:cf:ed:
ff:50:12:ad:55:89:b1:dd:e1:a0:c5:f5:37:e9:6e:06:84:ef:
b1:94:f0:72:21:fb:03:2c:4c:a5:fe:b9:a8:90:cf:a8:b3:48:
f6:64:1d:6d:0e:9e:f5:37:b9:3f:8e:5d:d1:74:73:4f:91:9f:
af:5b:03:af:41:99:27:de:d2:b7:24:3f:49:9c:28:9e:be:83:
38:93:1e:34:e2:94:39:aa:ba:03:ab:e2:fe:91:81:20:a7:38:
2d:64:40:ef:ad:7e:0c:ed:18:1e:02:93:14:47:c8:7a:d4:ef:
a9:11:ad:34:a3:10:3b:b2:04:c7:c5:b0:94:15:b9:e9:5e:df:
4d:b2:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:32 2026 by rpki-client