Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/QXJKevQfrqPMxBIoXUOGIaQyJw0.roa
File: QXJKevQfrqPMxBIoXUOGIaQyJw0.roa (raw, json)
Hash identifier: EKuUrtSKos5Un0/ZBGTI+LP+1XdLGLhPB/Og5RcgVc8=
Subject key identifier: 41:72:4A:7A:F4:1F:AE:A3:CC:C4:12:28:5D:43:86:21:A4:32:27:0D
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19EB
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/QXJKevQfrqPMxBIoXUOGIaQyJw0.roa
Signing time: Mon 26 Jan 2026 06:52:57 +0000
ROA not before: Mon 26 Jan 2026 06:52:57 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.72.254.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6635 (0x19eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=41724A7AF41FAEA3CCC412285D438621A432270D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:26:d8:97:90:94:1f:a1:0f:89:31:da:f8:
8f:0a:69:9d:62:e7:d3:23:16:bd:3d:83:8b:47:f9:
e6:0e:2b:f1:6d:56:ee:e1:19:45:5a:25:31:33:22:
a7:41:fe:ab:c9:2d:f3:cf:6c:2b:24:1f:2b:da:7e:
4b:3e:82:94:4c:6e:de:50:c9:24:13:b4:46:08:70:
64:30:be:08:16:99:0d:64:05:84:14:1c:12:e7:a3:
9b:d9:f7:6e:e8:b4:bc:dc:38:b3:51:ff:9e:31:48:
a7:fc:6f:e6:7c:54:4e:56:53:75:f8:f8:55:e4:68:
8c:6e:8f:ba:b6:25:4a:50:4d:f6:3e:85:cc:fa:1b:
a9:ab:6e:43:1d:80:f6:77:55:8c:aa:68:0e:e0:64:
cc:86:a3:dd:00:fd:ef:6f:cf:1c:dd:04:b8:dc:fe:
50:06:f5:c4:ea:bc:83:e5:8d:28:e7:e7:e5:57:72:
ff:83:60:33:77:c4:5f:17:44:2e:3b:c3:ba:34:5c:
ac:1c:26:e0:66:36:1d:cb:df:85:6c:bf:a3:3b:63:
96:86:63:42:77:f7:d3:39:73:6e:3d:7b:e8:eb:43:
bc:7f:8c:67:ce:62:1c:d7:46:fb:97:cd:37:57:c4:
1c:46:91:d9:81:d4:1f:d5:31:0c:0f:62:a7:cb:2f:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:4A:7A:F4:1F:AE:A3:CC:C4:12:28:5D:43:86:21:A4:32:27:0D
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/QXJKevQfrqPMxBIoXUOGIaQyJw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.254.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5a:bd:64:e4:ce:c8:1a:4b:89:11:25:64:bd:ab:a1:cb:9b:
5a:9d:3b:e7:28:13:f5:80:f2:f1:ba:13:16:4a:48:f1:ec:f2:
a2:c1:c1:e8:dd:9a:6e:32:41:27:f0:84:a7:cd:a9:49:dd:6b:
f8:50:13:a8:d3:dd:e9:e4:97:e8:0a:97:c7:7c:be:8d:1d:a0:
43:ce:13:1e:d9:5a:c6:0f:81:06:70:50:55:ad:0e:01:f2:55:
af:84:d8:e3:99:b9:6f:e1:16:27:70:b2:4b:0e:12:05:80:cd:
4d:15:06:ad:c3:06:04:e4:a3:c2:88:71:18:c1:9c:24:f0:05:
9c:9f:59:9a:5e:7e:85:7c:6e:e5:3f:19:37:ec:cf:65:a5:3c:
6f:dc:09:e9:02:5f:01:92:df:90:6c:ba:e7:84:ee:ff:e4:75:
22:ac:e4:e3:87:c3:0a:b6:26:cd:e8:77:92:c7:d1:22:00:99:
f1:82:3e:3a:6f:40:88:e9:a8:62:f5:a4:a6:ec:44:62:6c:70:
bd:56:58:d7:8c:19:f1:a2:0a:42:37:8f:e4:17:43:97:81:71:
b0:88:57:cb:d0:7a:17:2f:f6:2f:6a:cb:43:66:a1:30:e4:93:
b6:3e:0f:e2:2f:00:16:7a:e4:a9:b5:a5:5b:e9:ba:3f:1f:51:
41:2c:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:57:12 2026 by rpki-client