Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/2st-WRdkexySnyA8DN2_C7Bn5xI.roa
File: 2st-WRdkexySnyA8DN2_C7Bn5xI.roa (raw, json)
Hash identifier: 97fHMMwYgMi2oDnRiCMz8G6GO7TkdL1GAdnoyFzFh4k=
Subject key identifier: DA:CB:7E:59:17:64:7B:1C:92:9F:20:3C:0C:DD:BF:0B:B0:67:E7:12
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 1A01
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2st-WRdkexySnyA8DN2_C7Bn5xI.roa
Signing time: Mon 26 Jan 2026 06:53:02 +0000
ROA not before: Mon 26 Jan 2026 06:53:02 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.73.0.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6657 (0x1a01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DACB7E5917647B1C929F203C0CDDBF0BB067E712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:70:ad:89:60:c2:a4:37:08:67:4e:79:74:
b8:31:f9:1e:c8:69:fa:52:98:96:63:88:b4:0a:6b:
b6:5b:28:b2:c8:c8:3c:34:ac:9f:8f:cf:c8:32:7d:
c5:d2:60:de:95:4b:28:f2:f1:d8:7a:18:3a:04:d4:
ef:55:e0:42:4b:13:4c:92:39:bf:f3:55:b9:ef:a5:
8e:ec:a0:7f:72:d8:ee:09:21:97:91:ae:aa:98:c0:
59:fb:99:99:2b:0c:fc:2c:2c:8f:9c:bb:93:55:b8:
35:89:c6:e0:70:d0:56:91:4f:ff:d3:f2:a2:51:c9:
d2:9d:52:ad:15:c5:42:fa:8e:0c:c9:0e:5d:9a:9e:
e4:22:d3:77:ab:6f:19:1c:ea:6a:57:f1:54:38:bd:
57:54:e0:1a:26:87:0e:0c:90:cd:4f:8e:9b:b6:9c:
0d:7e:aa:fb:63:ed:58:e9:e2:33:4a:38:cc:9e:ca:
08:8b:de:42:c6:59:29:0c:0d:e9:7a:1c:e9:e4:74:
88:99:cd:a2:24:70:0d:89:30:1e:4a:00:ef:f1:7d:
61:ef:3e:ca:e1:b2:df:29:08:5c:e5:57:03:a9:14:
d9:e8:44:67:ac:a1:a9:e9:0a:a9:fd:22:93:b2:fd:
55:a4:f1:89:12:95:92:aa:83:69:80:f9:33:2f:98:
70:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CB:7E:59:17:64:7B:1C:92:9F:20:3C:0C:DD:BF:0B:B0:67:E7:12
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/2st-WRdkexySnyA8DN2_C7Bn5xI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.73.0.0/17
Signature Algorithm: sha256WithRSAEncryption
bb:b8:ae:fc:17:49:c7:25:76:27:4a:b3:0e:a3:ed:14:45:60:
e2:aa:95:12:94:78:21:d8:f7:9c:e1:26:a0:6b:ab:25:43:83:
6d:c6:81:de:1c:0a:00:e8:6c:8e:d4:07:f4:93:eb:bf:a1:26:
a8:a7:90:7d:74:4a:3c:d7:0a:73:a4:88:eb:60:f9:64:f4:e8:
b3:89:32:af:99:75:22:96:91:2a:a7:a2:77:37:da:47:7f:b8:
9d:2e:b2:04:d2:ed:37:74:31:da:e5:cb:bf:17:9e:5c:10:a2:
b9:a1:58:41:c7:62:00:56:fb:92:e6:79:4d:31:b7:6c:0c:7a:
40:d3:99:bf:a6:be:a6:91:14:ed:67:a8:0a:be:fd:2f:d1:72:
aa:fa:fc:b9:0c:c0:0c:4a:9f:16:77:76:19:ad:f8:8d:46:ad:
c5:35:16:ef:b3:42:e5:f1:b9:d0:27:cc:be:07:16:de:ff:75:
3c:19:1a:65:48:99:d5:8c:5d:c4:7e:90:e9:bf:5e:ef:a3:7a:
65:14:f1:58:9d:f5:c3:ac:3b:90:29:cf:f3:fc:22:df:a8:fe:
d9:87:a6:f6:ee:b8:9b:fd:60:81:41:8a:3d:e1:2e:c6:68:91:
c9:95:7e:69:e5:cb:9f:2a:f4:bf:cd:fa:a4:2a:7d:07:a2:a8:
19:a0:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:06 2026 by rpki-client