Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/jvMSmVTUb2buHeUA9SfLy7hqNyw.roa
File: jvMSmVTUb2buHeUA9SfLy7hqNyw.roa (raw, json)
Hash identifier: /acNPSvaXnOowShGBXGV8JWqb6RFZAMpsGglNuyoRtM=
Subject key identifier: 8E:F3:12:99:54:D4:6F:66:EE:1D:E5:00:F5:27:CB:CB:B8:6A:37:2C
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19F1
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/jvMSmVTUb2buHeUA9SfLy7hqNyw.roa
Signing time: Mon 26 Jan 2026 06:52:57 +0000
ROA not before: Mon 26 Jan 2026 06:52:57 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 2406:e500::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6641 (0x19f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=8EF3129954D46F66EE1DE500F527CBCBB86A372C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:db:d9:2f:c4:38:1c:46:0b:2d:e6:a7:be:
77:69:ec:07:b5:b3:58:ee:a0:67:a7:91:6d:e8:45:
be:07:52:85:40:bc:25:af:12:d2:0c:4d:71:89:a5:
29:3a:51:80:71:d7:28:fd:39:7c:9c:c6:47:dd:08:
a0:66:82:79:ff:17:d5:4d:75:7c:d9:3c:cb:e8:fb:
5f:da:6b:d8:f3:d4:c0:24:fe:89:0b:71:5b:ac:10:
1e:6a:00:05:06:4a:ae:2c:eb:f7:b6:d8:9c:94:cc:
47:53:bd:b9:9b:3b:95:e0:fa:d7:50:ff:86:e6:cf:
8b:e5:63:a3:65:fa:83:2a:52:bd:ed:80:91:7c:44:
10:0c:a3:87:c6:58:b5:ea:ba:89:91:81:0f:08:32:
eb:35:03:2b:c2:30:ef:01:59:26:ea:5c:1f:75:ee:
3f:22:aa:13:07:c1:1c:e0:84:62:89:cc:e7:8d:27:
2a:dd:ed:fe:ed:aa:b8:3d:df:42:db:a1:dc:30:4a:
c9:2c:44:85:00:a8:50:12:1d:b9:aa:3e:af:2e:4b:
c0:c0:eb:f6:22:ea:38:9c:13:0b:85:6e:08:40:3b:
b7:41:0d:f9:e9:a0:a5:e2:66:c1:2c:ee:69:82:0f:
23:38:ca:f3:c5:09:a2:5d:af:f2:33:77:0c:c0:83:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:12:99:54:D4:6F:66:EE:1D:E5:00:F5:27:CB:CB:B8:6A:37:2C
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/jvMSmVTUb2buHeUA9SfLy7hqNyw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:e500::/48
Signature Algorithm: sha256WithRSAEncryption
34:94:c5:ec:3c:22:89:be:32:a6:e4:d4:dc:a3:8a:61:58:2e:
78:cf:82:20:6b:e7:65:6b:b3:7f:e5:7b:06:a5:e9:ef:85:3b:
62:e3:ec:71:7e:97:98:6f:06:b2:a2:17:12:07:8f:88:c4:3d:
90:6e:4f:6b:36:e2:b7:80:1d:e5:d3:55:6a:8f:c4:06:59:54:
51:2c:b0:ab:16:97:1e:d1:53:76:fb:2b:af:5f:c0:bd:5b:ac:
2f:75:33:92:5d:6d:a1:46:42:9d:68:6f:d4:c7:4f:09:75:fc:
a7:3e:4a:a5:d4:95:40:18:85:4f:2d:13:3f:a7:88:1a:52:31:
43:b9:3a:7b:91:b1:9e:a0:ac:c1:eb:de:73:02:63:51:67:e2:
da:85:d2:98:6e:70:b1:fc:e7:1e:c3:6c:d3:95:f0:e5:a1:92:
65:fe:33:69:ba:05:58:19:53:4d:ec:7a:f7:b8:54:bc:30:a9:
02:c5:7f:8c:c2:2c:e1:fc:28:32:09:35:f4:d4:17:ea:8b:2f:
c8:8f:4f:1e:04:76:0d:1a:00:da:fa:d1:13:5b:8a:0e:bc:a6:
19:4c:42:a8:45:ac:e7:43:2e:e2:5b:45:a8:7e:8e:d6:4f:2a:
de:de:33:bf:16:b0:93:37:c3:44:e4:62:be:68:a4:57:bf:cc:
b2:e1:ac:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:20 2026 by rpki-client