Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/DMIVqIjJ_jltTHfNxL6qirO1_zs.roa
File: DMIVqIjJ_jltTHfNxL6qirO1_zs.roa (raw, json)
Hash identifier: 6cpAi0dLew9Rg/JUkeoBYdEkKqFO57HbTeJVB1C5vBE=
Subject key identifier: 0C:C2:15:A8:88:C9:FE:39:6D:4C:77:CD:C4:BE:AA:8A:B3:B5:FF:3B
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F7
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/DMIVqIjJ_jltTHfNxL6qirO1_zs.roa
Signing time: Mon 26 Jan 2026 06:53:00 +0000
ROA not before: Mon 26 Jan 2026 06:53:00 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 42.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6647 (0x19f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:53:00 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=0CC215A888C9FE396D4C77CDC4BEAA8AB3B5FF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:1b:1a:82:a7:41:86:a1:68:a5:bc:90:6a:
a4:17:f6:fb:34:10:bd:59:78:12:e2:ee:dd:27:fd:
cc:58:af:76:0e:53:f3:0e:47:0a:74:c0:53:5a:f7:
0c:c9:f7:78:24:64:ad:3b:b2:ab:7e:a2:b0:60:bc:
99:26:f0:4a:c6:52:db:48:fb:8f:11:7e:98:24:2e:
9c:6a:2e:21:f6:e0:a6:b2:d3:95:d6:1a:b1:08:97:
de:b9:21:fd:7e:9e:d3:71:e7:5a:61:98:b0:21:e1:
3f:72:9f:2f:85:73:b4:02:9d:b1:e2:7b:c3:35:ae:
10:a3:b3:5c:9e:a4:2b:c0:93:d5:62:98:7d:cf:eb:
e0:5c:fb:0b:0e:cd:4c:0c:02:6c:85:1f:2a:76:db:
bf:ea:14:45:e6:33:87:29:e4:57:6a:62:b0:cf:94:
ab:1e:91:64:a1:1d:a3:10:8f:0b:58:30:9d:82:30:
7f:9b:63:80:b0:c9:13:7c:8c:60:e2:44:ac:2d:95:
72:86:16:7a:48:52:3a:9a:dc:ed:39:2a:1b:e2:31:
de:fc:80:de:96:28:6f:38:50:99:6b:7e:3b:92:a0:
8e:d6:50:e3:76:5d:39:f7:ab:a0:60:b1:03:d6:a0:
8b:ac:b0:a0:cf:1a:bb:32:bf:44:39:29:bc:af:ae:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:15:A8:88:C9:FE:39:6D:4C:77:CD:C4:BE:AA:8A:B3:B5:FF:3B
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/DMIVqIjJ_jltTHfNxL6qirO1_zs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:ab:f2:b2:32:c7:22:2d:da:58:bc:29:04:51:b4:5b:8f:07:
60:6f:0f:4a:09:f9:a4:1e:20:98:34:51:56:50:e9:56:f7:81:
ad:89:82:4d:d0:b4:db:f5:9d:52:07:d0:bd:3b:e8:02:26:e3:
7b:ce:cc:a4:be:03:50:e2:3a:1b:e1:51:7b:3c:c1:a8:8e:3a:
ed:f8:19:9d:3c:c3:da:f5:d9:b4:5d:68:db:d2:c1:ed:7b:b8:
71:9f:84:3f:3b:36:5f:f2:c8:78:d9:8e:0c:21:82:43:8e:ba:
94:c3:02:0f:3a:9d:82:0d:1d:08:57:02:d9:90:da:0b:54:bf:
a0:87:d9:37:ad:56:80:38:f9:3f:ac:ff:eb:c3:0c:1a:56:d2:
87:b8:ad:18:8e:43:aa:e2:cb:d2:9a:87:fb:47:3e:62:29:b3:
b6:33:5f:a8:8f:55:fd:de:1d:a3:4f:fb:79:de:2a:26:af:ef:
d4:40:92:bc:77:0d:b4:54:a4:b0:18:28:10:e9:00:70:62:32:
ee:34:29:f3:88:e5:d5:9c:7f:d2:10:04:dc:0f:a2:3c:55:95:
37:7f:2b:82:dc:33:8d:33:69:77:f6:9e:d9:83:e1:b6:e7:25:
71:05:d8:92:34:02:93:43:28:21:fe:80:0d:d4:f2:3a:8e:f6:
5a:40:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:30 2026 by rpki-client