Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/I5OjS6LxUMkhwr68x-5t9j2PKqU.roa
File: I5OjS6LxUMkhwr68x-5t9j2PKqU.roa (raw, json)
Hash identifier: 9ka2g4BJfnhZ8xVi/4xh0mdL0rXVetmLoCyPGx4fU2M=
Subject key identifier: 23:93:A3:4B:A2:F1:50:C9:21:C2:BE:BC:C7:EE:6D:F6:3D:8F:2A:A5
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 1A04
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/I5OjS6LxUMkhwr68x-5t9j2PKqU.roa
Signing time: Mon 26 Jan 2026 06:53:03 +0000
ROA not before: Mon 26 Jan 2026 06:53:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 52.130.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6660 (0x1a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2393A34BA2F150C921C2BEBCC7EE6DF63D8F2AA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:d5:f4:28:54:8b:27:b6:78:5c:ae:20:4e:
c7:31:7c:43:cf:59:73:b7:d9:05:54:25:42:91:72:
29:29:e6:13:38:72:e0:5f:36:0f:90:e2:17:6c:f6:
f1:21:f3:3c:c2:95:dc:17:da:8c:d7:7f:92:dd:4c:
ec:e0:f7:f3:66:da:66:5e:95:df:fe:f6:73:67:0f:
7e:34:b9:e3:28:d3:69:85:d5:0e:38:64:a8:e5:77:
69:be:68:06:42:29:23:77:7b:78:6b:06:70:ff:fe:
0a:85:1f:0b:19:d4:5d:e7:26:40:e0:76:f9:e6:39:
d7:a3:7c:ce:7c:d1:97:cc:b4:6c:0e:5a:62:17:78:
e2:83:1f:5f:1f:75:d9:e0:ef:ad:27:a4:f5:ab:f6:
1a:11:54:0e:e3:96:8a:fb:0f:ed:19:d9:50:e6:78:
81:9a:d4:3c:e5:6c:5f:88:41:12:63:a5:1f:44:b6:
06:77:79:29:08:e9:0c:b4:35:06:40:3b:43:47:5e:
fb:bc:93:89:ba:59:ab:33:1e:6f:65:e7:03:c7:5e:
49:8c:40:33:e9:99:43:27:9e:24:64:77:ac:eb:f7:
c6:9f:fb:68:26:a2:62:2f:25:95:b9:17:13:ca:f7:
7a:15:07:ef:5e:36:08:92:b8:c1:86:ed:f3:8a:ef:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:A3:4B:A2:F1:50:C9:21:C2:BE:BC:C7:EE:6D:F6:3D:8F:2A:A5
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/I5OjS6LxUMkhwr68x-5t9j2PKqU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
52.130.16.0/20
Signature Algorithm: sha256WithRSAEncryption
36:25:d7:49:b5:a6:50:8f:34:72:f9:90:a8:fd:20:f7:ff:46:
31:7f:ba:dc:03:4a:2a:5d:1c:cd:53:23:5f:9f:59:2d:af:88:
b9:dc:11:ac:d1:86:70:44:f9:b3:a4:dd:ba:8d:ea:f3:a0:c1:
a9:cf:58:8e:83:37:98:19:6c:dc:0d:8b:88:d9:a1:94:34:6c:
e9:ee:c5:8a:1d:b1:78:c4:fb:05:a8:79:12:88:f3:86:07:99:
2e:ef:89:6d:51:9a:7e:e6:b5:ea:48:f1:1f:9b:09:11:ca:95:
40:a4:11:a9:e0:c7:01:fb:89:53:5b:19:6e:53:e9:bc:1a:16:
ed:65:96:af:00:7d:a9:c9:ed:73:c5:2b:f5:4c:0b:09:78:d8:
e3:72:1f:6d:5c:5b:a4:e7:f2:25:0a:1e:f5:5b:a0:5e:4c:6b:
71:c8:91:0e:a8:69:ef:54:8b:c3:1c:5c:bc:3b:f1:09:9e:4f:
32:37:6c:fc:23:93:61:c2:9d:73:d3:26:06:2a:13:f5:4e:ed:
d0:06:83:fd:d2:dc:c2:5a:60:1f:d8:02:b3:b0:e1:b6:3f:cc:
ba:cd:35:97:8b:4a:ca:74:20:b9:90:e5:4b:54:ae:a7:f6:49:
b1:08:01:e1:d9:76:2d:c6:19:9e:2c:54:a5:1f:08:a9:45:99:
51:08:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:56:44 2026 by rpki-client