Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ZS3e5nvnMySPCInafYFN5aUd56U.roa
File: ZS3e5nvnMySPCInafYFN5aUd56U.roa (raw, json)
Hash identifier: BYFyyo++yIGa6yY1hX4q9CXztJ0lmx5qwWcDMefzmpg=
Subject key identifier: 65:2D:DE:E6:7B:E7:33:24:8F:08:89:DA:7D:81:4D:E5:A5:1D:E7:A5
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F5
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ZS3e5nvnMySPCInafYFN5aUd56U.roa
Signing time: Mon 26 Jan 2026 06:52:59 +0000
ROA not before: Mon 26 Jan 2026 06:52:59 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 42.159.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6645 (0x19f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:59 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=652DDEE67BE733248F0889DA7D814DE5A51DE7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:a8:72:6a:42:f4:64:87:8c:1a:fc:d9:c0:
6b:e0:4b:81:da:01:95:74:07:03:0d:60:6c:11:8d:
1e:f8:00:46:f7:4f:5d:8b:34:48:c9:86:84:c1:4b:
ab:c1:bb:7e:b3:28:b5:1f:25:c0:b9:e6:d4:8c:0a:
ff:7e:02:6b:50:89:17:54:8b:27:e7:2a:df:67:1c:
95:5c:d8:fd:0f:74:81:2c:7f:36:f7:39:17:f9:bf:
d7:2c:05:70:30:38:18:99:53:e1:ae:bc:fc:c9:45:
9d:2b:2c:6e:60:ca:fa:50:0b:03:92:a5:5b:18:a1:
6b:67:e3:22:3e:e7:12:9b:cf:0e:3e:08:f5:f1:7c:
2f:df:8c:06:e6:bb:e9:d6:dc:c5:8a:4e:e7:68:37:
5d:78:0f:cd:cf:e5:5d:ff:3e:86:eb:d5:3e:12:78:
4d:cd:9d:63:ab:e6:ac:c7:93:3c:02:b8:ee:66:34:
9d:84:80:76:8d:e1:89:88:de:8d:d6:df:12:2d:55:
67:86:de:f5:a5:43:25:af:4a:af:f8:33:fc:a5:00:
08:8c:c1:f8:61:d0:14:89:2b:3d:2a:bd:78:d1:17:
62:37:b5:bd:89:5f:99:84:b9:a9:e8:0d:dc:84:8d:
d7:1f:34:49:04:be:2c:97:29:a3:a7:9e:a9:87:15:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:DE:E6:7B:E7:33:24:8F:08:89:DA:7D:81:4D:E5:A5:1D:E7:A5
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ZS3e5nvnMySPCInafYFN5aUd56U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ca:d2:cc:32:76:1f:bf:fb:11:20:fc:da:42:82:78:a4:cc:b0:
2a:31:f5:2f:38:46:47:1a:b3:07:d9:2f:83:fd:54:35:ff:f7:
d0:e7:69:68:35:4f:b6:6e:99:35:4a:f6:70:22:db:1b:43:ea:
4d:8a:a7:14:fc:66:2b:03:2b:b6:05:30:59:43:b9:31:ad:65:
ec:3d:33:49:a5:43:53:d1:21:36:3e:6e:66:29:bd:87:f4:42:
38:fb:f0:16:b4:2f:31:0c:e3:02:b6:6a:ea:76:49:69:3c:66:
22:e3:cc:2a:c0:2c:f5:8b:f4:de:63:1a:83:2d:5f:af:b2:5d:
e1:c4:b1:00:bc:d1:a0:31:ea:df:59:fc:66:9d:55:24:d8:aa:
f4:de:56:83:9e:56:f1:b9:54:e0:71:05:aa:d5:eb:76:39:9d:
95:3a:47:6c:10:77:9b:bd:03:46:4b:29:62:91:26:10:e4:ad:
3e:73:e3:19:ac:70:88:bc:93:68:55:05:6f:59:e3:6d:5d:3c:
6a:3c:9a:7b:55:d9:1c:04:b1:16:f8:5f:85:1b:3a:aa:dc:f1:
4f:1d:53:35:a7:68:48:18:cf:50:32:05:0a:03:b2:5d:47:15:
bd:54:bd:66:97:72:51:ab:8b:e3:b2:ca:ac:16:8d:7e:98:0c:
f7:af:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:23 2026 by rpki-client