Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/CmaDrcDhrSB4J3ocBZP1Rz3TGO8.roa
File: CmaDrcDhrSB4J3ocBZP1Rz3TGO8.roa (raw, json)
Hash identifier: xHq+8jMpJ3y0EVmPniKuArkPjjhaN/3UsYVDGdbXTmg=
Subject key identifier: 0A:66:83:AD:C0:E1:AD:20:78:27:7A:1C:05:93:F5:47:3D:D3:18:EF
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19E9
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/CmaDrcDhrSB4J3ocBZP1Rz3TGO8.roa
Signing time: Mon 26 Jan 2026 06:52:56 +0000
ROA not before: Mon 26 Jan 2026 06:52:56 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.125.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6633 (0x19e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:56 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0A6683ADC0E1AD2078277A1C0593F5473DD318EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:53:74:06:e2:fe:c6:8b:ba:01:79:fd:92:
69:16:e8:38:8b:26:b6:91:1e:d9:ed:b5:d2:66:b5:
35:32:c6:19:aa:b0:f4:db:3d:4b:7f:a9:8e:6f:6f:
1d:c9:9f:b3:fb:84:ef:28:8c:37:b6:50:28:f5:bb:
c7:2e:a5:2a:9b:79:1e:e0:2d:a8:2f:b0:43:8b:53:
2e:60:71:70:29:a4:63:e6:cd:08:8a:8b:e3:1a:d9:
5d:d7:ab:9c:10:5e:4f:8f:a0:be:3e:10:18:0e:df:
da:8d:58:b4:82:38:24:cb:ee:c1:27:2a:a5:e4:b5:
ba:12:da:67:a8:1c:de:71:ef:17:7f:eb:c2:a0:1a:
92:4b:99:b2:05:71:59:83:21:04:d1:2d:87:f3:10:
a8:3e:77:9d:8b:d0:d6:23:9b:7b:0b:8b:4a:f9:3a:
03:dd:35:e5:6b:dd:3f:07:45:84:1e:47:d1:ad:d5:
a9:55:2a:82:f2:13:29:67:03:fe:6b:f3:55:91:d2:
c3:87:f9:56:c6:71:4f:a0:4f:40:61:7a:37:7b:fb:
07:b4:6b:5b:05:98:91:24:f8:96:5a:cf:9f:9e:fd:
22:1a:e3:5a:47:0d:8d:ae:11:0d:9b:bd:7d:32:9f:
ba:0e:8d:fb:a5:07:14:38:2a:56:1c:a1:0d:d1:c3:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:83:AD:C0:E1:AD:20:78:27:7A:1C:05:93:F5:47:3D:D3:18:EF
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/CmaDrcDhrSB4J3ocBZP1Rz3TGO8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.125.128.0/17
Signature Algorithm: sha256WithRSAEncryption
af:99:93:23:a8:b6:ec:8c:5a:83:bf:a7:cc:cf:74:bc:08:dc:
65:f1:33:60:cc:e2:88:9c:92:0f:5f:0a:30:84:43:db:6b:0c:
b6:3e:fd:3d:68:ee:1c:db:7b:38:a7:64:de:61:04:ab:c0:08:
06:63:3e:32:60:2c:b2:8a:4e:ac:88:28:67:a2:90:fa:73:4c:
67:46:e5:61:c6:43:8d:57:cc:3b:f1:f6:29:19:67:81:cc:c0:
8a:81:db:41:b2:ef:e6:01:55:92:c5:89:50:6c:26:29:66:ba:
e8:ee:8d:72:fd:e1:04:33:5e:f7:6d:a9:0a:5d:7a:bf:24:9b:
4b:8f:3d:38:f5:71:0b:23:86:7b:74:f5:d6:e7:61:1e:3c:ec:
83:ae:69:c7:b5:b3:a8:6a:8a:3a:f3:cd:ac:95:9c:86:fe:11:
41:f7:94:b5:ec:81:95:88:b5:e1:01:93:d3:24:86:ec:be:24:
c2:62:5d:d7:3a:3e:f8:f3:36:63:97:a2:87:2c:7c:95:28:a2:
d4:43:c4:2f:8d:81:b2:78:b9:89:7d:a6:1d:12:81:07:40:bd:
69:b7:bb:f5:f0:c9:94:1e:5b:fd:79:4e:38:9e:94:d9:25:d2:
8c:0a:05:18:9b:5f:79:bd:45:26:0c:f8:2c:b0:97:fd:43:cf:
71:66:2d:9f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjFE
Qzg3NTk2NUMyQkE2MUQxREFDQkI0OERFRTE0MDU1NEFBNUFFRjAeFw0yNjAxMjYw
NjUyNTZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDBBNjY4M0FEQzBFMUFE
MjA3ODI3N0ExQzA1OTNGNTQ3M0REMzE4RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZPlN0BuL+xou6AXn9kmkW6DiLJraRHtnttdJmtTUyxhmqsPTb
PUt/qY5vbx3Jn7P7hO8ojDe2UCj1u8cupSqbeR7gLagvsEOLUy5gcXAppGPmzQiK
i+Ma2V3Xq5wQXk+PoL4+EBgO39qNWLSCOCTL7sEnKqXktboS2meoHN5x7xd/68Kg
GpJLmbIFcVmDIQTRLYfzEKg+d52L0NYjm3sLi0r5OgPdNeVr3T8HRYQeR9Gt1alV
KoLyEylnA/5r81WR0sOH+VbGcU+gT0Bhejd7+we0a1sFmJEk+JZaz5+e/SIa41pH
DY2uEQ2bvX0yn7oOjfulBxQ4KlYcoQ3Rw1OBAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCmaDrcDhrSB4J3ocBZP1Rz3TGO8wHwYDVR0jBBgwFoAUIdyHWWXCumHR2su0
je4UBVSqWu8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy
MC9JZHlIV1dYQ3VtSFIyc3UwamU0VUJWU3FXdTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0lkeUhXV1hDdW1IUjJzdTBqZTRVQlZTcVd1OC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvQ21hRHJjRGhyU0I0
SjNvY0JaUDFSejNUR084LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEByh9gDANBgkqhkiG9w0BAQsFAAOCAQEAr5mTI6i27Ixag7+nzM90vAjcZfEz
YMziiJySD18KMIRD22sMtj79PWjuHNt7OKdk3mEEq8AIBmM+MmAssopOrIgoZ6KQ
+nNMZ0blYcZDjVfMO/H2KRlngczAioHbQbLv5gFVksWJUGwmKWa66O6Ncv3hBDNe
922pCl16vySbS489OPVxCyOGe3T11udhHjzsg65px7WzqGqKOvPNrJWchv4RQfeU
teyBlYi14QGT0ySG7L4kwmJd1zo++PM2Y5eihyx8lSii1EPEL42Bsni5iX2mHRKB
B0C9abe79fDJlB5b/XlOOJ6U2SXSjAoFGJtfeb1FJgz4LLCX/UPPcWYtnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:18 2026 by rpki-client