Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Vf0EWqoh1S1KtWYiE0tHaauPgNk.roa
File: Vf0EWqoh1S1KtWYiE0tHaauPgNk.roa (raw, json)
Hash identifier: iw67ex3KMhM78BshYX0X8TAC88quRI6+LqFhC+AbZzc=
Subject key identifier: 55:FD:04:5A:AA:21:D5:2D:4A:B5:66:22:13:4B:47:69:AB:8F:80:D9
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19EF
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Vf0EWqoh1S1KtWYiE0tHaauPgNk.roa
Signing time: Mon 26 Jan 2026 06:52:57 +0000
ROA not before: Mon 26 Jan 2026 06:52:57 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 52.130.96.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6639 (0x19ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=55FD045AAA21D52D4AB56622134B4769AB8F80D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:50:93:41:d2:44:64:0e:14:1c:81:12:17:
84:e6:62:01:af:ba:6d:e4:85:33:bc:55:f5:c4:a4:
b8:ac:42:47:ff:cd:86:11:61:df:8c:54:5e:01:df:
32:1d:6a:d5:4c:57:27:9d:f6:10:3d:a0:57:f6:f6:
40:67:3c:d7:3c:52:55:ee:08:73:62:46:bc:c7:2d:
81:7c:f7:1c:b3:dd:d0:da:ad:1b:04:16:9b:a4:72:
a3:34:2e:af:86:a1:b9:95:86:30:42:c0:6c:dd:9c:
d7:c9:3b:ed:71:99:f0:ae:f5:fe:ff:79:52:49:88:
41:4d:13:6d:d6:a7:7f:82:4b:97:13:7d:7f:5d:2d:
77:11:ba:7f:a3:7c:af:18:ef:90:ca:ef:20:0d:14:
d7:e9:cc:4e:08:b4:17:9e:31:c9:79:d3:36:18:ef:
94:95:6c:b4:ee:8b:b2:eb:25:f7:06:81:ec:27:60:
26:5a:a4:13:ef:bf:2a:fa:24:71:cc:bc:1d:d4:f2:
14:9f:15:5e:81:72:5e:46:d9:d6:82:5b:07:33:2c:
23:80:aa:78:ea:d1:11:c0:34:04:53:59:be:fa:80:
e3:40:4d:fa:ac:ea:b5:98:0a:8b:5f:e5:86:f5:e2:
54:11:10:46:25:49:45:b0:03:34:dd:84:7d:fb:c1:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:04:5A:AA:21:D5:2D:4A:B5:66:22:13:4B:47:69:AB:8F:80:D9
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Vf0EWqoh1S1KtWYiE0tHaauPgNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
52.130.96.0/20
Signature Algorithm: sha256WithRSAEncryption
72:dd:62:b1:43:b6:96:4b:fe:da:32:b7:4f:53:af:ba:33:b8:
cb:67:eb:1c:73:5a:00:5e:e7:12:d1:4c:12:31:19:98:16:08:
33:b4:58:83:2d:97:63:19:06:70:e9:de:fc:9a:50:88:9b:4b:
b6:e4:c5:42:8d:c4:b5:0a:ff:50:83:40:c3:a2:7f:3e:9a:29:
14:51:c3:02:4b:ec:46:a9:6e:fc:2f:e0:1a:81:b5:05:76:24:
29:13:c6:52:90:3c:ae:77:9b:75:95:46:9c:23:e0:45:0c:9b:
1e:5b:52:f7:ea:3a:ee:88:3d:6a:4c:69:ea:9a:f9:5f:b1:7c:
ff:44:bf:34:0a:62:f1:49:5d:46:da:11:96:75:1b:97:1e:94:
9b:d3:f0:c3:c2:07:e9:17:28:59:62:ee:59:9a:0c:e8:c8:78:
cb:a4:06:97:7f:77:99:45:2c:ba:26:ba:c6:58:3d:7e:a7:95:
8e:9f:1f:37:43:19:84:c7:91:73:55:c7:79:56:08:84:e4:cb:
81:2f:8d:12:2c:77:14:02:d2:8b:57:b4:5d:8e:3c:24:8c:cf:
68:7c:f2:79:47:bf:fd:62:e8:15:38:62:9f:9f:e8:b1:56:c7:
8b:68:73:a5:20:ea:21:5c:2b:07:90:9a:35:36:dd:53:f1:70:
47:b8:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:56:46 2026 by rpki-client