Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Q31Q6e5O3hefG5z_F16DnunZ3V8.roa
File: Q31Q6e5O3hefG5z_F16DnunZ3V8.roa (raw, json)
Hash identifier: x56NN6TBpshLg/jJX/rabcRpAGH04kH66FqWSyUL5mA=
Subject key identifier: 43:7D:50:E9:EE:4E:DE:17:9F:1B:9C:FF:17:5E:83:9E:E9:D9:DD:5F
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F7
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Q31Q6e5O3hefG5z_F16DnunZ3V8.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 52.130.192.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6647 (0x19f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=437D50E9EE4EDE179F1B9CFF175E839EE9D9DD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:08:39:b5:b8:0b:e3:bd:d5:fa:b3:b7:5f:88:
e8:82:fb:9c:2d:b4:b7:1a:c7:91:f9:a4:47:23:42:
10:2d:f1:7c:84:30:3a:f4:72:d5:18:c9:e7:c7:a3:
eb:38:a0:d4:b0:ff:47:8c:2e:5b:38:80:96:f5:35:
af:97:b6:ab:c2:ec:a8:bc:a3:e0:db:25:f8:4f:95:
b5:09:b7:23:91:02:2d:55:dd:f4:62:5b:ae:06:61:
0f:5a:d2:b8:93:2b:2f:c4:1d:38:1f:5d:bf:6a:ea:
5d:73:b0:79:0f:44:81:50:7d:36:4d:01:50:11:23:
c6:8d:c2:ea:cd:ee:50:bf:91:79:e6:18:d6:80:0d:
36:13:e7:81:04:a4:40:37:19:f7:0f:15:5a:7e:68:
b4:78:81:d5:62:32:70:cf:02:0e:88:9c:ea:8c:58:
38:10:54:d3:0c:47:4f:1a:14:8a:19:47:3a:8d:04:
82:57:a8:3d:f4:6a:85:1d:71:4e:a9:13:15:95:12:
f4:fd:13:81:01:5f:a7:c3:d3:10:e0:ec:f0:41:e2:
c6:df:75:5a:81:d5:aa:cd:43:6b:74:38:bf:7c:f8:
f1:77:0d:32:2a:31:25:bd:b8:e7:da:0d:01:aa:b7:
9c:0e:44:74:7d:aa:29:ec:05:c7:1b:5c:f0:81:27:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:50:E9:EE:4E:DE:17:9F:1B:9C:FF:17:5E:83:9E:E9:D9:DD:5F
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Q31Q6e5O3hefG5z_F16DnunZ3V8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
52.130.192.0/18
Signature Algorithm: sha256WithRSAEncryption
31:86:fd:3f:02:67:71:ff:3e:8d:89:8e:39:5d:2b:1e:7e:78:
31:86:cb:e6:cf:7e:c5:10:86:2b:6d:a3:22:cf:1f:2b:ab:50:
3c:19:c4:b7:79:18:98:ec:e4:22:df:c6:c8:7e:76:d8:2e:0b:
84:9f:5a:ec:e3:88:79:d6:fd:43:f7:4e:b3:39:d1:fc:10:c1:
90:03:05:24:fb:fc:f4:6b:8b:5c:d1:80:30:1a:ed:2f:c9:a5:
2b:fb:b0:e8:ef:89:84:69:c3:d6:18:0d:9a:f9:4a:f7:85:4b:
1a:ce:4e:28:3e:76:41:e3:2c:cc:3c:37:48:a5:79:76:93:fe:
30:a4:c6:83:1a:41:13:6b:8a:e7:6b:f0:e0:7c:81:80:81:2c:
ff:d3:f0:19:7c:35:ec:4c:50:e9:09:d2:47:d6:e8:f8:c6:a6:
a7:f7:01:03:a0:8f:ac:67:8e:55:32:01:f1:ed:62:f6:96:e1:
89:0e:10:cd:a9:16:55:5e:f6:91:48:58:47:a7:be:6a:fe:68:
6f:9b:05:6c:1a:8a:1c:35:c0:9b:0b:12:85:5e:15:b4:b2:bc:
5d:85:b5:af:bc:ec:13:89:b3:8f:ca:f3:db:8e:a7:4a:6f:ab:
56:75:d9:1d:ed:15:1c:0a:73:5d:f0:40:ec:8f:af:16:1e:37:
f0:4f:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:25 2026 by rpki-client