Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa
File: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (raw, json)
Hash identifier: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=
Subject key identifier: 64:F0:43:9F:FF:B6:54:7F:05:1B:2B:6A:C3:EE:5E:68:BE:E1:44:28
Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
Certificate serial: 2D
Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa
Signing time: Mon 18 Aug 2025 01:57:56 +0000
ROA not before: Mon 18 Aug 2025 01:57:56 +0000
ROA not after: Sun 16 Aug 2026 01:52:01 +0000
asID: 137690
IP address blocks: 202.189.16.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
Validity
Not Before: Aug 18 01:57:56 2025 GMT
Not After : Aug 16 01:52:01 2026 GMT
Subject: CN=64F0439FFFB6547F051B2B6AC3EE5E68BEE14428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:a0:2d:42:4b:31:15:5e:62:89:93:e4:51:
bf:8d:85:e8:f8:85:81:f9:58:e9:9a:6f:bc:c4:62:
7d:d6:a8:96:d5:d1:07:b3:b9:8d:23:57:f3:32:5f:
0b:34:62:95:f2:c1:18:e0:b9:46:6b:3c:6f:82:c0:
94:25:bb:b8:8b:31:71:ab:76:18:ba:67:0a:f4:7d:
34:30:b3:cf:05:21:17:e3:69:05:f7:51:51:15:6a:
23:d9:0d:3e:29:88:2d:3f:fe:84:95:1a:84:a4:d0:
d7:68:9b:41:5d:c2:ca:5c:2a:ce:22:5d:8a:3d:ca:
d0:32:df:ae:2e:d4:af:9b:97:6b:f8:5c:ad:0f:01:
df:6a:af:39:39:23:09:11:b5:f4:8c:3d:35:f7:67:
2f:cc:e5:92:ac:8c:ce:6f:a0:3d:d2:3a:80:f5:90:
fd:ea:4a:f8:c3:1a:ad:6c:47:d1:ab:7b:54:2d:c7:
79:e3:7e:9c:ee:6f:46:92:1e:38:50:f5:aa:a3:7b:
a6:a7:00:00:1a:cb:8c:6b:68:22:2d:dc:0a:c4:55:
5a:bd:c6:37:3f:82:76:fd:cc:fe:63:60:37:f9:d2:
4e:39:df:30:d2:6c:54:8d:f5:63:bd:52:ef:3d:29:
c7:e2:8f:02:71:fc:ae:ef:41:43:7f:18:29:2e:51:
bf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F0:43:9F:FF:B6:54:7F:05:1B:2B:6A:C3:EE:5E:68:BE:E1:44:28
X509v3 Authority Key Identifier:
keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.189.16.0/22
Signature Algorithm: sha256WithRSAEncryption
83:fc:8a:9d:b3:73:85:c3:45:2b:f6:23:9a:d2:a9:e3:6c:a3:
6d:e3:1c:10:7c:66:1f:ad:d2:a0:84:a4:ed:9b:fb:94:e5:e8:
a6:a6:5e:ce:03:28:82:21:9b:bc:41:27:a8:d1:8d:6b:a2:55:
0f:24:a0:bc:9d:f2:cf:71:d6:fb:63:e0:a4:7d:bb:c0:5e:47:
e1:f3:29:cc:95:1c:fd:2e:f4:dd:9c:18:4d:72:82:5f:09:31:
1e:e1:8b:eb:9f:eb:7e:29:10:f1:28:7f:a6:73:3d:1f:5c:60:
2a:ef:46:03:fd:89:c7:58:b3:c0:f9:c0:39:e5:1f:cc:d4:5f:
be:ec:b6:30:1d:9b:f5:62:eb:ca:27:bf:0e:9c:69:a9:61:76:
19:04:c9:d3:b5:1b:05:12:8a:ec:54:1d:95:41:e1:8c:f7:5d:
5c:91:80:23:58:0e:49:0b:ba:89:27:3e:21:d8:76:69:f7:88:
d2:5d:60:b7:34:48:11:9e:73:7f:54:91:52:4a:7d:38:2c:85:
dc:8e:45:9a:e0:5a:47:52:88:53:d7:5b:c8:35:8a:8e:f1:4d:
cf:91:e8:bf:90:27:f0:93:eb:ec:d4:4e:4d:d4:53:5a:e5:1c:
6d:2c:55:af:8b:82:c3:cb:d0:b9:7d:78:53:2d:c0:7a:93:b0:
d4:a1:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:08:53 2025 by rpki-client