Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/2ChXnade0ZV5QZ3UzM0ntWbjmfU.roa
File: 2ChXnade0ZV5QZ3UzM0ntWbjmfU.roa (raw, json)
Hash identifier: MSukEcj6iFt/K2A/JJ35lPrfqVxDc0DKjXnHiF6t+6Y=
Subject key identifier: D8:28:57:9D:A7:5E:D1:95:79:41:9D:D4:CC:CD:27:B5:66:E3:99:F5
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F6
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2ChXnade0ZV5QZ3UzM0ntWbjmfU.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 52.131.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6646 (0x19f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D828579DA75ED19579419DD4CCCD27B566E399F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:01:f6:41:ed:39:1d:9a:14:e7:c1:0b:45:
21:9d:82:30:b2:b7:84:c9:94:13:53:9b:4a:39:ae:
b6:f3:a7:24:8b:e9:a2:7c:0d:4b:03:8e:9a:ae:d0:
4d:f2:14:e7:82:da:bf:22:d0:cc:27:26:dc:7a:ee:
49:19:2f:00:cb:a9:f4:68:24:b5:d0:76:11:34:4c:
a1:e9:ca:48:a5:1d:b8:e9:bd:20:69:d9:d8:fb:d0:
69:6c:77:f3:8f:d1:a7:52:43:d5:a6:53:ab:c1:05:
91:23:fe:14:c9:ac:38:1e:ec:2a:9b:37:da:1a:7f:
6f:31:0a:93:34:67:cd:fb:5e:d7:61:8f:69:5f:4a:
67:7d:07:11:cd:e4:93:77:0b:46:19:72:d4:14:3f:
9b:2b:46:17:1f:f4:80:92:6a:85:fb:8f:1e:7a:9b:
c5:b6:76:ea:95:ce:de:b1:ca:10:81:c1:c9:8e:19:
6a:12:c0:79:5b:98:90:0d:59:0d:81:0d:5b:97:54:
69:8c:3b:dd:20:08:d2:38:44:ee:8c:24:b3:df:f6:
4e:4e:5d:de:e0:dc:b6:98:35:5e:30:59:3d:82:2b:
74:dc:0b:1a:14:b9:f5:a6:34:80:6e:87:51:e0:f5:
54:60:12:28:bf:eb:85:76:69:14:16:3d:86:28:89:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:57:9D:A7:5E:D1:95:79:41:9D:D4:CC:CD:27:B5:66:E3:99:F5
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2ChXnade0ZV5QZ3UzM0ntWbjmfU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
52.131.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7f:37:00:a8:c8:14:c6:64:e3:35:60:4d:3c:22:b7:ad:92:35:
42:25:24:ee:9f:46:99:3c:83:b2:19:a6:88:38:c4:85:ba:58:
ee:f6:1c:11:82:86:de:da:db:72:bf:91:a0:11:95:a5:0c:42:
08:b2:7b:b5:58:2b:e1:91:97:8e:94:6b:cc:04:f9:88:0f:ea:
f3:54:f2:3d:7e:05:72:57:18:b1:ed:8d:1e:79:37:eb:a1:41:
01:1f:86:48:b0:0e:7f:ae:28:a5:0e:23:23:7c:10:f1:43:a7:
64:69:91:fb:29:02:7e:c2:1c:79:f7:8a:68:68:91:ba:a6:47:
d3:84:ff:03:a2:00:08:49:55:b0:fb:54:60:32:de:12:de:1b:
0e:38:12:fc:00:34:4f:91:41:e6:ca:72:31:5b:38:d9:28:74:
9c:f8:86:0e:83:0b:0a:f9:97:96:77:d3:1d:dc:65:49:ab:dc:
1b:82:fb:b2:c4:12:fa:33:8f:8b:6d:a4:20:26:c5:ee:57:d5:
cd:dd:d7:e4:aa:f8:35:47:3f:28:19:e0:c6:a7:35:59:eb:cd:
c2:ae:2f:48:74:05:15:1c:b4:f7:0f:71:e2:11:87:fb:35:1e:
69:a9:d9:5f:20:f6:8b:7e:da:fd:ed:bd:61:df:5a:c0:12:ad:
c0:89:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:10 2026 by rpki-client