Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/nPySr4YUqcjT2Vau-79AwhEOv8w.roa
File: nPySr4YUqcjT2Vau-79AwhEOv8w.roa (raw, json)
Hash identifier: SkIKGfMA4XgJ3CotbHdXw07DfT2hbxWkBgIruCrvUlQ=
Subject key identifier: 9C:FC:92:AF:86:14:A9:C8:D3:D9:56:AE:FB:BF:40:C2:11:0E:BF:CC
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 19EF
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/nPySr4YUqcjT2Vau-79AwhEOv8w.roa
Signing time: Mon 26 Jan 2026 06:52:56 +0000
ROA not before: Mon 26 Jan 2026 06:52:56 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 42.159.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6639 (0x19ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 26 06:52:56 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=9CFC92AF8614A9C8D3D956AEFBBF40C2110EBFCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:45:c0:1c:00:97:2d:14:f7:fa:0b:ee:c6:
6c:33:94:cf:0e:70:60:7c:d8:c3:11:d2:13:0c:f9:
c5:fd:f8:42:60:8e:74:08:39:3a:77:82:60:dc:9e:
83:77:4a:66:ce:a9:49:cf:03:43:3d:05:dd:5d:c3:
46:fe:9c:a3:e0:56:dd:18:b6:d4:e2:97:1c:82:19:
64:ff:5a:80:93:97:ea:5f:3a:04:ae:92:a2:ab:e0:
d7:9e:ff:0a:cc:c6:88:6e:c4:41:5a:33:38:21:b6:
bb:82:08:ae:fa:ba:37:18:bd:fa:6e:2a:a9:76:a0:
c7:0e:bd:a7:b4:dc:db:15:75:37:df:a2:dd:a7:8c:
27:75:e6:c6:11:f4:61:b0:66:36:a4:c1:7b:d7:44:
1a:d6:1d:48:dd:03:5d:2d:b6:c3:df:9f:38:bb:39:
d7:25:31:4f:0b:aa:44:a3:11:5e:03:b1:60:86:85:
2b:a1:c9:04:e4:b4:88:47:c8:eb:5d:05:1a:62:f5:
c8:ca:25:d3:56:a5:c6:8f:0a:97:ba:8f:4f:eb:52:
f1:24:37:e6:45:c6:e7:75:b6:48:9d:35:93:26:93:
d5:3d:1e:8f:22:75:74:28:0d:00:e3:3c:96:3d:8e:
d8:e4:55:6a:eb:28:1a:5d:54:14:b4:c6:c6:fc:88:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:92:AF:86:14:A9:C8:D3:D9:56:AE:FB:BF:40:C2:11:0E:BF:CC
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/nPySr4YUqcjT2Vau-79AwhEOv8w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/18
Signature Algorithm: sha256WithRSAEncryption
14:02:70:a5:9d:75:3a:03:53:99:1b:90:aa:30:51:1d:44:b0:
ff:5f:e8:68:fb:4e:df:f6:68:b3:72:b7:39:f1:cf:03:7f:b8:
d8:6a:75:f8:ad:41:cb:9f:4f:11:b0:4e:6e:a7:3d:cd:be:0e:
b4:af:6d:75:e2:31:19:be:9f:5a:4d:81:0d:35:fc:2a:55:e2:
6e:8c:25:b4:31:5d:f7:2c:2e:7c:a1:5d:eb:3d:68:d2:ed:4a:
5d:c9:d2:f0:dc:e0:48:a2:af:58:50:06:06:52:9a:71:25:b9:
5e:62:20:06:47:83:a8:71:8e:77:e2:8c:e0:4b:df:d2:a7:3d:
22:ea:0f:87:0e:c2:9a:81:4d:49:c9:ce:a6:7f:4c:a2:65:07:
2d:82:a1:9b:25:15:f1:e6:08:97:9b:7c:7b:b9:29:65:4b:ed:
c8:71:2b:c1:6e:dd:5d:1f:7f:cc:8f:00:bc:07:78:d3:6a:5c:
5c:58:4f:0c:52:b3:38:6b:f8:6e:c4:c3:d2:67:28:48:35:9c:
78:a2:d3:94:61:23:78:cd:c0:44:c7:05:cc:f0:e0:6e:74:57:
45:8f:78:04:c6:71:42:a4:c8:0c:df:40:31:7e:3e:70:9e:98:
6a:9d:68:e5:c3:73:fc:8a:f4:de:76:5e:f8:4e:0b:82:45:85:
99:a0:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:48 2026 by rpki-client