Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/51v1-7SFbAKyzOgP8m3zjCVF20k.roa
File: 51v1-7SFbAKyzOgP8m3zjCVF20k.roa (raw, json)
Hash identifier: YeaFYnUGhbnnXH3z+ewuydIgfUXImYLgVAeKpsebS5A=
Subject key identifier: E7:5B:F5:FB:B4:85:6C:02:B2:CC:E8:0F:F2:6D:F3:8C:25:45:DB:49
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F0
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/51v1-7SFbAKyzOgP8m3zjCVF20k.roa
Signing time: Mon 26 Jan 2026 06:52:57 +0000
ROA not before: Mon 26 Jan 2026 06:52:57 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 42.159.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6640 (0x19f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=E75BF5FBB4856C02B2CCE80FF26DF38C2545DB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:cf:af:15:7c:a1:7b:5b:41:06:ee:09:6a:
6e:f0:bd:e1:fc:b7:72:b2:fb:91:7c:cb:47:ed:49:
3e:3d:e1:f4:51:33:01:b7:27:2e:36:52:ff:9b:d8:
ba:12:33:c9:6e:d8:06:fc:9b:df:63:c8:c2:a9:0c:
b3:0d:57:fb:c0:59:52:7d:39:25:ab:ef:08:0f:34:
7b:db:cc:6c:95:ad:42:61:6f:9d:4b:6f:c7:3c:d1:
de:b6:ec:d0:f4:14:1b:a9:bb:06:ef:c1:fc:87:a0:
c8:0d:28:7d:3b:fa:74:0b:a6:c4:e9:06:22:f0:19:
0e:22:5b:4a:ce:b1:00:79:65:d3:4c:d2:07:30:be:
76:10:56:44:53:b7:a5:aa:a6:8d:e0:1b:79:8b:8a:
75:23:2e:86:12:f3:ee:bc:cb:94:fb:9f:1f:a3:f8:
cf:60:1a:ab:b6:cc:fa:61:95:b2:2e:bf:7a:13:98:
dc:12:f2:24:4a:3b:a9:fd:1f:bb:f2:35:d6:eb:44:
39:b9:ff:2f:51:c1:55:9e:f3:1b:4e:18:05:39:2b:
2b:02:15:46:56:54:7c:75:58:45:6a:28:9b:0a:0e:
ce:d3:9e:c1:92:2f:46:25:ef:96:c1:25:61:d5:02:
74:8c:0f:3d:5a:b4:09:cf:4f:a6:8a:a5:68:87:0c:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:F5:FB:B4:85:6C:02:B2:CC:E8:0F:F2:6D:F3:8C:25:45:DB:49
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/51v1-7SFbAKyzOgP8m3zjCVF20k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.192.0/18
Signature Algorithm: sha256WithRSAEncryption
da:b2:2f:f8:1f:e7:d1:99:a7:2e:de:76:cf:dd:71:40:18:62:
a3:59:bf:71:c2:0a:56:12:6e:54:20:4b:da:32:33:b0:e2:23:
6a:33:dc:f9:01:ec:98:8f:82:3c:b9:d6:cf:5b:f3:83:db:af:
10:f4:f3:0e:fb:de:94:03:24:da:e9:9c:4b:97:05:58:bd:49:
06:92:21:aa:66:42:48:d1:24:19:ff:72:45:f5:c2:d1:e8:31:
e6:59:9d:2b:5b:36:e8:07:f7:8e:4d:a8:6f:86:82:3a:41:3b:
23:e0:27:d4:88:f8:3c:83:a3:41:46:d6:ed:87:2b:40:69:91:
4f:aa:96:0f:f4:ee:42:77:73:30:83:77:46:c6:bb:71:76:38:
d5:e1:85:0e:16:27:0e:d4:d9:7f:60:6b:48:ba:a5:07:95:88:
57:ed:e1:b8:d0:a0:af:ab:0d:0f:8a:0b:61:a4:da:5e:57:7d:
f4:1c:44:a0:94:d3:72:e6:68:42:bb:0a:b6:25:b1:67:81:8b:
0c:90:72:78:44:31:7e:3e:6f:08:34:30:58:d5:d8:35:8e:97:
ac:cb:84:a7:4c:fd:c0:5e:62:bb:ec:7f:7e:09:f5:24:53:67:
36:2c:d6:01:6d:73:75:ee:b4:37:0e:26:6f:96:82:83:4b:74:
f0:c0:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:04 2026 by rpki-client