Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/L88njL-RSCT73Exz_J_pLjWlCH8.roa
File: L88njL-RSCT73Exz_J_pLjWlCH8.roa (raw, json)
Hash identifier: jsxgJ//CrUroJuIpDq3P/HmRXHvoGFTn36ayjffCqbI=
Subject key identifier: 2F:CF:27:8C:BF:91:48:24:FB:DC:4C:73:FC:9F:E9:2E:35:A5:08:7F
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F4
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/L88njL-RSCT73Exz_J_pLjWlCH8.roa
Signing time: Mon 26 Jan 2026 06:52:58 +0000
ROA not before: Mon 26 Jan 2026 06:52:58 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 42.159.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6644 (0x19f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:58 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=2FCF278CBF914824FBDC4C73FC9FE92E35A5087F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:b7:cc:32:7d:65:ea:e0:72:67:f0:b7:08:
f2:89:1e:67:8c:71:6f:e8:b5:92:b7:75:bc:6c:a6:
0b:24:77:a0:9e:11:04:89:27:07:47:21:78:8f:83:
b4:38:bd:c3:a0:0e:5f:a0:9a:05:be:fb:68:84:1d:
b8:31:01:da:36:df:19:c3:29:4b:ad:94:da:8f:d0:
47:8e:4e:b2:e8:34:4b:36:b4:06:2c:6e:4f:70:77:
97:06:a7:a5:0b:cb:33:7c:61:c7:41:c7:4a:2b:7b:
02:a4:3d:9c:ea:0f:dd:13:26:ce:1f:6f:fa:b8:b4:
a5:0f:33:a7:94:1b:27:32:b6:cb:7b:78:ff:75:34:
64:13:6a:d6:94:d6:cd:ae:83:b0:03:7f:cd:2e:f7:
98:75:7b:72:aa:e0:ad:ac:50:56:fb:d7:0b:2c:a7:
77:3b:68:5b:de:fc:bf:34:76:08:23:cd:e2:02:60:
8a:d6:8d:3a:43:d9:f4:09:7d:fc:7a:a6:9b:2d:3d:
5b:14:3f:0a:86:c4:02:6f:e8:c0:89:4f:c9:b0:94:
1e:0d:9d:5f:93:8b:7c:5c:b3:fd:ad:1e:a7:24:4f:
16:a7:16:10:d3:ce:81:ea:3c:d3:4b:69:20:63:fd:
db:6b:d9:ed:d9:e8:73:2c:bb:8c:8f:c1:58:d2:69:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CF:27:8C:BF:91:48:24:FB:DC:4C:73:FC:9F:E9:2E:35:A5:08:7F
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/L88njL-RSCT73Exz_J_pLjWlCH8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:38:d7:dc:a8:4f:58:91:8b:74:da:3c:ff:25:b2:05:da:ac:
8d:2c:20:e2:04:1d:70:81:46:43:e7:6b:df:7e:fe:39:87:68:
66:82:fd:ff:49:d2:72:a2:4f:7b:c9:b9:b4:c8:01:cd:7b:50:
da:07:90:84:b3:35:d9:1c:d1:b5:c9:6b:c1:77:b8:8a:83:ee:
51:8e:b4:7a:01:76:7c:31:8a:b9:f8:8d:fc:22:f1:15:20:48:
18:98:58:a0:f7:e7:62:e4:23:67:3f:8e:19:65:8a:f7:55:d0:
19:53:ba:dc:35:de:55:a9:47:bf:54:85:01:8b:69:f0:7a:bd:
c0:9a:bb:58:9e:12:33:22:70:88:de:72:ed:c4:f5:b7:10:14:
6b:3e:b2:b1:34:b7:a1:ad:25:03:24:c3:38:86:d8:07:78:ce:
63:3e:1f:7c:e7:1e:e0:9e:a4:07:67:6e:1e:cf:12:e1:b0:09:
7c:b6:59:9e:b3:0f:be:c9:21:2f:17:55:22:be:1b:44:51:c5:
83:aa:c4:ab:50:da:62:b2:4a:5b:5f:85:05:ed:2d:c6:ad:eb:
06:23:d2:ad:33:7a:53:d7:bb:4f:3f:11:bf:89:92:f3:56:ea:
8b:bb:42:ed:ed:d9:a6:37:f6:c9:33:5f:98:73:bf:53:d0:a8:
c1:8c:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:46 2026 by rpki-client