Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/BEjawcARrAqv1IHHVMmsh1DIMqk.roa
File: BEjawcARrAqv1IHHVMmsh1DIMqk.roa (raw, json)
Hash identifier: l8njPsxDdT4LJubJ6uMq068HM4+a/sWkNXYsVh7586s=
Subject key identifier: 04:48:DA:C1:C0:11:AC:0A:AF:D4:81:C7:54:C9:AC:87:50:C8:32:A9
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F3
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/BEjawcARrAqv1IHHVMmsh1DIMqk.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.162.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6643 (0x19f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0448DAC1C011AC0AAFD481C754C9AC8750C832A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:c5:1d:75:78:9c:8c:a3:a6:df:bf:c9:73:
9f:6d:ff:b5:79:d8:bd:91:47:95:2b:b7:bc:25:f5:
87:11:8a:a6:f6:80:32:f7:ea:35:42:bf:a6:76:f9:
03:83:bb:97:ab:70:9f:8e:54:53:59:40:ea:32:3b:
38:fd:8b:03:65:15:71:ef:42:08:a1:03:89:34:0d:
a6:46:d1:10:34:e7:4d:a2:bc:69:46:71:e2:91:7f:
d5:e8:fe:54:55:dc:d9:3e:2f:e1:94:6e:aa:f6:ca:
bf:77:b3:b1:f0:5d:2d:d4:52:cd:78:85:24:6d:11:
cf:6c:43:6b:7b:a4:be:45:59:34:e6:52:db:d2:a4:
3f:b5:05:71:17:07:7a:75:80:76:13:46:1d:0e:fb:
6b:83:89:a9:a2:45:8a:d3:90:3d:b8:7b:35:20:35:
2d:b7:5c:cb:68:a8:fa:a4:1e:40:f9:bd:95:09:81:
ae:47:e1:51:0c:ea:a1:3d:b4:c6:a1:7d:e6:cd:7f:
b0:aa:f4:e1:60:17:38:d7:25:9a:8e:d5:04:e7:17:
2c:19:ff:c9:ff:54:a9:4e:d7:80:15:0c:7b:0d:f1:
57:d1:4d:5c:94:54:ea:3f:b9:97:2a:0b:08:c8:f6:
31:39:e6:ec:00:6f:80:8e:ab:50:dd:0f:11:d9:16:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:DA:C1:C0:11:AC:0A:AF:D4:81:C7:54:C9:AC:87:50:C8:32:A9
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/BEjawcARrAqv1IHHVMmsh1DIMqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:bd:e9:62:d5:7e:47:60:39:68:c0:be:55:40:b0:a1:3e:ab:
05:9a:46:05:58:28:f9:49:af:8f:6a:f6:ed:64:78:3f:a3:7e:
d2:bb:5b:79:a5:51:27:cf:9b:21:cf:f8:e3:28:f9:ba:41:4f:
66:36:8b:1c:1e:86:ef:59:97:0c:d2:32:c1:2b:3c:5f:21:58:
cf:ee:56:a2:1f:db:aa:63:85:4a:66:10:01:0a:e8:db:30:4d:
e2:7b:78:2f:c8:71:c5:fa:9f:fe:e7:92:8b:1a:76:92:e2:56:
01:a2:ea:0d:a3:56:2c:a4:31:3a:84:99:70:1c:00:a7:f9:18:
67:43:27:d0:ed:a3:b6:dd:40:7a:39:f0:b8:2b:67:ac:4b:b0:
58:4d:df:85:b6:5d:ab:59:4f:85:2f:f0:84:94:62:80:73:14:
af:1f:8e:72:b0:00:c1:df:1f:ca:b4:cd:72:f3:48:99:83:6c:
d9:39:84:91:ce:16:16:db:c6:eb:b9:b3:f4:b7:0c:91:4d:39:
57:42:37:2a:8c:93:38:20:15:85:a9:34:4e:da:8d:2f:5d:96:
ca:d6:60:93:d1:fd:cd:06:81:b0:a7:7e:8a:3a:25:c4:10:74:
c2:90:f4:d9:f1:e6:09:81:2c:e8:de:0f:d1:58:72:0f:2e:3e:
d4:b3:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:21 2026 by rpki-client