Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/1Xks-WUm3pcNmeXHkBTFP82Tb5Y.roa
File: 1Xks-WUm3pcNmeXHkBTFP82Tb5Y.roa (raw, json)
Hash identifier: 6iugeGTnecaw3IRQJp1VDS8/5GfP0avVtWLU6Iq4zs8=
Subject key identifier: D5:79:2C:F9:65:26:DE:97:0D:99:E5:C7:90:14:C5:3F:CD:93:6F:96
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F5
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/1Xks-WUm3pcNmeXHkBTFP82Tb5Y.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 52.130.32.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6645 (0x19f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D5792CF96526DE970D99E5C79014C53FCD936F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:87:22:66:fb:62:40:48:64:5c:ba:54:7c:
61:8e:30:40:0d:79:11:94:75:68:7c:5b:de:e2:4a:
c8:c8:97:ad:5b:1c:e0:a3:48:27:6d:f3:e7:f4:9d:
06:e9:6d:ae:b7:cf:de:7d:84:6f:60:74:1f:f8:22:
fe:08:b4:5e:8b:d0:5e:0a:76:ae:c2:bc:a9:2f:46:
34:a4:61:2e:04:34:75:44:bc:5d:eb:36:9e:6b:d1:
79:00:6a:aa:02:a0:a3:e3:3a:ce:0b:92:68:33:51:
24:15:94:6a:ee:d0:b8:c1:23:38:2a:c5:28:63:29:
9c:ed:ed:59:01:13:35:b4:8c:8a:38:ad:f6:1c:24:
fd:b8:32:09:85:2f:0c:99:58:d6:05:3a:f4:e1:30:
d4:df:91:b6:0e:8a:92:15:23:04:a7:62:7b:a4:ed:
47:63:2b:af:79:d2:9b:db:cb:1d:74:44:b8:e0:e6:
aa:2c:ff:f7:16:86:1b:9d:8e:8a:91:31:6e:1f:0a:
b0:51:3f:35:3f:c3:31:2d:78:02:6a:e5:80:35:66:
b0:22:3c:bd:4f:e3:7e:bd:46:d7:45:2a:45:03:4c:
6d:48:a9:fc:8d:9a:b4:d7:47:58:ca:f3:fb:ba:16:
6e:49:87:99:c8:c7:f7:f0:35:45:a2:40:44:ac:00:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:2C:F9:65:26:DE:97:0D:99:E5:C7:90:14:C5:3F:CD:93:6F:96
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/1Xks-WUm3pcNmeXHkBTFP82Tb5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
52.130.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:06:cf:68:43:f4:94:cd:74:d2:53:fb:10:a7:5b:48:04:7f:
c6:b7:29:cb:79:fa:e7:f9:7c:a3:13:69:13:1e:b8:18:9f:20:
3c:64:0c:a6:6d:11:31:e5:26:a1:58:00:fa:ba:08:25:b3:9f:
90:0d:44:47:1a:ce:dd:33:ec:2c:24:ba:2a:07:ef:bf:de:bb:
aa:6c:8e:77:18:f9:8f:97:88:71:c4:ed:73:37:dd:80:1d:a0:
60:54:d3:f1:66:1a:2e:c4:43:66:44:0d:e6:01:50:c8:63:92:
22:43:b0:b2:a9:71:68:1b:ec:91:aa:85:53:30:67:ad:e9:54:
c9:e1:fa:41:af:81:ad:26:6c:12:b2:2d:ee:3d:80:ad:ff:03:
a0:2b:46:30:fe:c4:c9:a1:cf:7d:19:9a:bc:96:78:fa:14:4b:
73:54:79:16:17:73:b5:12:6a:b5:08:a6:8a:fb:4e:2c:02:38:
9f:84:df:ae:f3:1d:bf:f7:39:9a:a5:6e:b6:68:2e:40:10:92:
9a:c1:90:dc:31:1b:24:fd:d4:22:50:7f:2a:91:6d:f0:c6:9e:
92:b3:dc:55:f3:67:8d:ae:f6:85:4a:13:c0:7d:a1:c9:4a:9c:
6e:e8:72:c5:9e:fc:dc:aa:e5:0b:06:b5:0e:40:6a:e6:4a:ef:
0a:83:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:33 2026 by rpki-client