Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/2d6rF1UDQxIllkatRJ-mr7m8oMU.roa
File: 2d6rF1UDQxIllkatRJ-mr7m8oMU.roa (raw, json)
Hash identifier: TcwupRd15YY2YBpxfUhRaB1v/FIyFEIC/0XkNL/OqVs=
Subject key identifier: D9:DE:AB:17:55:03:43:12:25:96:46:AD:44:9F:A6:AF:B9:BC:A0:C5
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19FC
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2d6rF1UDQxIllkatRJ-mr7m8oMU.roa
Signing time: Mon 26 Jan 2026 06:53:03 +0000
ROA not before: Mon 26 Jan 2026 06:53:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 2406:e500:1::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6652 (0x19fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:53:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D9DEAB1755034312259646AD449FA6AFB9BCA0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:42:3f:78:cc:25:74:70:da:7f:98:20:3a:
2a:11:b5:ff:92:ce:58:af:cc:0d:eb:54:3a:ec:85:
d2:83:6f:6f:68:86:ad:e0:ef:c2:36:8e:12:8b:da:
32:f1:a0:a3:cc:f4:38:d9:83:34:0f:d6:0b:5d:a1:
4b:e4:81:09:a7:96:5a:76:ff:ce:76:2c:ad:72:14:
d5:98:b2:7e:34:41:99:68:fd:cc:65:0a:47:2b:b4:
57:f5:3a:a6:8e:ce:21:5c:74:27:c4:b3:3c:b1:22:
14:89:79:a8:36:d8:12:73:c5:e9:9c:99:e9:d4:98:
d0:a6:b5:11:5e:41:09:d6:10:c2:e7:3b:da:2c:f2:
b6:ad:8f:b5:03:a3:00:fc:9e:9b:2e:91:6b:e4:55:
29:a9:40:56:1a:71:64:d1:30:4c:9b:60:7d:71:32:
c9:82:57:c3:04:14:9c:b1:9b:51:d0:eb:a9:18:07:
72:21:7f:9c:9a:58:bd:04:29:9f:8a:67:0f:b5:b1:
62:1c:f2:11:f3:37:5b:6b:4b:36:46:e5:48:75:aa:
8d:8b:0b:73:c4:6f:f2:47:db:21:e7:c4:88:92:de:
14:08:c0:76:69:c1:40:b1:19:0d:e2:cc:3b:5b:d8:
fb:f0:fa:59:83:f0:2b:c0:78:ec:9e:fa:f7:41:e4:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:AB:17:55:03:43:12:25:96:46:AD:44:9F:A6:AF:B9:BC:A0:C5
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2d6rF1UDQxIllkatRJ-mr7m8oMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:e500:1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:3f:09:aa:0c:e6:4d:93:ed:66:a3:5f:7d:3a:b6:0c:40:ae:
be:98:1f:dc:38:cd:73:d4:07:7a:be:f8:df:21:a0:1d:54:38:
f5:9a:28:3e:a5:be:1d:00:fe:c5:4a:24:d6:3c:02:0a:0e:97:
10:d5:20:7f:13:71:ad:d0:e8:9f:2c:e3:68:e3:d5:56:64:69:
73:72:2f:08:44:a6:3b:a7:01:d0:df:af:c5:33:69:92:90:3f:
83:58:2b:a1:7d:c6:ee:c2:90:bd:35:2e:7e:68:38:10:1d:2c:
b2:9e:37:9c:4a:ba:55:47:32:f5:96:af:85:99:4c:d2:6e:dc:
63:29:5f:18:c0:43:56:4e:20:cf:0a:e6:54:9d:2d:63:e5:1c:
cc:93:e6:16:25:de:f1:6b:be:87:c0:cf:39:8e:c7:41:77:b6:
43:df:15:1d:55:2c:5b:3d:dd:a2:17:fd:df:13:a8:39:3e:29:
db:f6:d2:8d:22:d7:27:98:8c:6c:a5:b9:c8:92:d8:06:59:2a:
66:be:ce:7b:67:cd:49:1a:04:02:9c:d6:98:9c:82:d1:7e:7c:
09:54:08:77:08:11:85:4b:34:63:ff:a5:04:c3:e0:54:4d:ba:
5b:20:23:0d:b3:fd:07:03:41:03:fd:55:f0:7f:d5:eb:f1:92:
3f:73:de:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:30 2026 by rpki-client