Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/QT4sAk4QcweiTGVccZkIdWmBzkM.roa
File: QT4sAk4QcweiTGVccZkIdWmBzkM.roa (raw, json)
Hash identifier: 4Hk4GIzLEHx9JWt8HUKAT3oGW5XFrXP1LZvem88fXp0=
Subject key identifier: 41:3E:2C:02:4E:10:73:07:A2:4C:65:5C:71:99:08:75:69:81:CE:43
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 1A03
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/QT4sAk4QcweiTGVccZkIdWmBzkM.roa
Signing time: Mon 26 Jan 2026 06:53:03 +0000
ROA not before: Mon 26 Jan 2026 06:53:03 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 159.27.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6659 (0x1a03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:03 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=413E2C024E107307A24C655C719908756981CE43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:62:34:4b:dc:7e:61:d1:f2:d8:72:9e:23:
f6:14:02:4a:ae:74:95:98:fc:51:bf:3b:65:1f:73:
9d:8d:63:1a:98:93:22:6b:a8:9d:65:8d:a3:23:bd:
ac:1a:84:28:2c:19:c7:7e:14:87:c4:f7:0c:16:79:
68:07:cf:d5:9d:4e:89:92:ee:ec:e0:94:f0:c1:dc:
c4:34:c5:70:bf:e6:dd:6b:df:9e:f9:1e:7e:71:cb:
cf:42:8d:3f:d2:29:8f:46:8c:43:25:b8:06:1e:c0:
86:6e:98:bb:7a:51:1d:36:4d:2b:fa:65:79:52:00:
4f:09:f9:4b:c4:9e:5b:5a:d7:1c:e1:03:97:71:e5:
1f:0f:a0:37:e7:95:cd:0c:63:a9:c2:07:69:68:b0:
50:d9:62:2d:6f:fd:5b:4f:98:f7:9e:85:66:2c:a2:
cf:c3:eb:1c:f7:34:00:68:da:b1:58:6d:aa:63:37:
69:32:0a:d9:3d:a2:75:d0:0f:2e:a7:9c:cc:0d:5e:
25:21:f8:b4:8c:79:41:6c:bf:d7:36:b8:e8:02:e5:
ce:ca:86:47:89:fe:eb:87:03:fe:5e:1e:ed:3a:f9:
3b:3a:53:f6:a0:9d:4c:27:64:8a:a0:8a:76:73:54:
04:c5:54:8f:97:bc:df:1e:8e:45:e3:75:fe:b9:d9:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3E:2C:02:4E:10:73:07:A2:4C:65:5C:71:99:08:75:69:81:CE:43
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/QT4sAk4QcweiTGVccZkIdWmBzkM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:dc:ae:53:f6:90:7b:3a:fc:1f:8d:b8:d9:49:3d:31:46:ca:
34:c2:44:e1:d7:f5:34:cf:7c:e9:7a:7b:15:83:93:ec:89:da:
9e:d4:97:04:03:ee:7d:78:fa:72:f6:b7:18:73:fc:bd:2b:8d:
d7:c5:e3:24:2d:13:2e:e8:a7:7f:a9:17:69:48:f8:c2:e3:df:
e5:9c:2e:3e:90:62:af:e7:96:6b:e1:2c:df:df:8d:0d:d2:22:
d3:ba:b5:3b:c0:3a:53:fd:12:6e:84:32:f6:c1:ce:15:58:c4:
f5:77:66:4f:6f:55:6b:bd:78:e1:63:b3:ab:bb:19:05:cb:bc:
a4:47:06:cb:df:bc:bd:58:94:9c:91:ff:27:7d:be:77:95:62:
d6:8a:54:01:8d:d8:1d:5f:91:08:f0:df:29:f1:bb:1d:88:af:
42:71:94:58:46:06:2a:5f:72:a2:70:14:96:3f:0c:72:37:40:
14:d5:20:48:16:82:20:a4:3d:f6:fd:06:4b:6f:6d:d5:7d:f3:
85:51:63:ca:93:1c:da:c4:4f:a9:23:90:b4:7b:34:dd:8a:86:
06:c3:e6:00:7a:3e:54:a0:f8:36:b8:fb:90:91:98:c4:0b:4b:
19:78:84:55:87:9d:65:73:c2:e5:20:ea:88:31:0c:bf:53:ad:
4a:45:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:26 2026 by rpki-client