Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/03jlFIcxvAmA3C5U7_9B0v9GibA.roa
File: 03jlFIcxvAmA3C5U7_9B0v9GibA.roa (raw, json)
Hash identifier: CSLt773YUcSOyOct/CyvyTY2UDmDv8gybELr2Ag5fSk=
Subject key identifier: D3:78:E5:14:87:31:BC:09:80:DC:2E:54:EF:FF:41:D2:FF:46:89:B0
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F8
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/03jlFIcxvAmA3C5U7_9B0v9GibA.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 139.217.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6648 (0x19f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D378E5148731BC0980DC2E54EFFF41D2FF4689B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:a9:58:15:45:fd:c9:85:bd:47:b9:31:a4:
da:d2:52:09:08:67:13:52:2b:40:be:9b:eb:cb:b3:
a9:0c:bb:b1:26:0e:44:40:ec:75:02:a6:f5:bf:d7:
41:54:3f:4f:17:aa:35:ee:e1:1b:f2:50:96:38:b6:
68:b3:53:4c:bc:fb:cc:52:79:df:00:61:86:87:ca:
1e:c1:e8:e1:2d:30:f7:cf:2f:77:05:cd:68:8c:86:
44:67:18:ef:83:35:9b:c8:d2:b2:48:55:2a:3a:40:
9c:2f:42:f2:39:c4:ad:c8:ce:7f:d7:0b:13:bf:a9:
62:84:42:47:0b:55:63:bc:0f:52:2c:ce:d7:44:1c:
ac:31:0e:7b:37:1c:73:e9:8d:97:92:f6:dc:46:2a:
30:62:a5:40:1a:3e:11:9b:4c:ed:e8:7a:dc:de:82:
df:e5:73:bf:69:f2:3f:77:21:d0:26:c6:89:22:53:
0a:b5:47:88:bd:24:56:75:af:93:67:2e:eb:83:2e:
19:51:51:6d:3c:39:e0:7e:77:92:08:4a:94:a6:f5:
4a:30:a8:30:7c:5a:53:2a:f8:17:44:2f:b1:28:98:
f0:b0:b2:d8:42:5a:52:bd:77:cc:20:c6:28:3b:fe:
45:51:67:63:21:4e:6d:24:43:a7:c5:07:32:7b:57:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:78:E5:14:87:31:BC:09:80:DC:2E:54:EF:FF:41:D2:FF:46:89:B0
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/03jlFIcxvAmA3C5U7_9B0v9GibA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.217.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:bf:fe:3b:70:c9:1a:33:d9:e8:af:5d:f6:78:b2:9b:73:3e:
f0:bc:aa:40:13:4a:a1:c8:9a:ec:8a:c0:7c:7f:68:e6:a5:b8:
92:34:6b:cc:c6:47:e0:6c:2c:77:ec:89:2c:41:1a:96:76:7d:
48:15:b4:28:fe:7a:57:df:39:9b:6c:0b:ed:b9:89:b4:ee:8a:
17:bd:6a:6e:8c:44:ae:df:bf:19:a2:23:41:b2:60:35:b7:55:
45:f9:3e:1a:63:70:90:72:6b:78:02:7b:c2:a2:97:9a:fb:2e:
6a:e4:47:cf:10:67:ca:36:51:02:0e:c3:06:b5:02:65:dd:e2:
d4:c1:a5:d6:2e:b5:f5:fe:0e:5e:d0:38:ba:8a:4c:76:ed:3e:
7b:f3:84:a6:ad:9d:45:f8:6a:e1:b0:ce:89:c5:4d:bd:82:51:
81:bf:b8:e5:17:e5:8f:ec:c8:63:ca:c5:64:57:91:75:94:f7:
05:ca:64:2a:69:d8:7a:6b:58:19:a7:e5:cd:65:11:bf:5e:b0:
fa:c6:aa:66:ae:f1:22:26:c9:3b:cd:4c:5e:92:70:19:5a:84:
45:b8:f4:f9:b7:fb:cb:fa:8e:ab:13:ac:da:0d:44:d7:3a:f0:
5b:d7:7b:81:f8:02:8f:52:a4:82:1b:5a:7c:65:af:47:b4:90:
4b:78:6a:29
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjFE
Qzg3NTk2NUMyQkE2MUQxREFDQkI0OERFRTE0MDU1NEFBNUFFRjAeFw0yNjAxMjYw
NjUyNTlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQzNzhFNTE0ODczMUJD
MDk4MERDMkU1NEVGRkY0MUQyRkY0Njg5QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf2KlYFUX9yYW9R7kxpNrSUgkIZxNSK0C+m+vLs6kMu7EmDkRA
7HUCpvW/10FUP08XqjXu4RvyUJY4tmizU0y8+8xSed8AYYaHyh7B6OEtMPfPL3cF
zWiMhkRnGO+DNZvI0rJIVSo6QJwvQvI5xK3Izn/XCxO/qWKEQkcLVWO8D1IsztdE
HKwxDns3HHPpjZeS9txGKjBipUAaPhGbTO3oetzegt/lc79p8j93IdAmxokiUwq1
R4i9JFZ1r5NnLuuDLhlRUW08OeB+d5IISpSm9UowqDB8WlMq+BdEL7EomPCwsthC
WlK9d8wgxig7/kVRZ2MhTm0kQ6fFBzJ7V/A7AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU03jlFIcxvAmA3C5U7/9B0v9GibAwHwYDVR0jBBgwFoAUIdyHWWXCumHR2su0
je4UBVSqWu8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy
MC9JZHlIV1dYQ3VtSFIyc3UwamU0VUJWU3FXdTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0lkeUhXV1hDdW1IUjJzdTBqZTRVQlZTcVd1OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvMDNqbEZJY3h2QW1B
M0M1VTdfOUIwdjlHaWJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB4vZgDANBgkqhkiG9w0BAQsFAAOCAQEAm7/+O3DJGjPZ6K9d9niym3M+8Lyq
QBNKocia7IrAfH9o5qW4kjRrzMZH4Gwsd+yJLEEalnZ9SBW0KP56V985m2wL7bmJ
tO6KF71qboxErt+/GaIjQbJgNbdVRfk+GmNwkHJreAJ7wqKXmvsuauRHzxBnyjZR
Ag7DBrUCZd3i1MGl1i619f4OXtA4uopMdu0+e/OEpq2dRfhq4bDOicVNvYJRgb+4
5Rflj+zIY8rFZFeRdZT3BcpkKmnYemtYGaflzWURv16w+saqZq7xIibJO81MXpJw
GVqERbj0+bf7y/qOqxOs2g1E1zrwW9d7gfgCj1KkghtafGWvR7SQS3hqKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:51 2026 by rpki-client