Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/oxHNRjU7C846WiHFbf56tcEKJyA.roa
File: oxHNRjU7C846WiHFbf56tcEKJyA.roa (raw, json)
Hash identifier: y56fr6e9KTD9lwRz2IGkkkE89JG6FVeb7dPOTL4dzxY=
Subject key identifier: A3:11:CD:46:35:3B:0B:CE:3A:5A:21:C5:6D:FE:7A:B5:C1:0A:27:20
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19F0
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/oxHNRjU7C846WiHFbf56tcEKJyA.roa
Signing time: Mon 26 Jan 2026 06:52:58 +0000
ROA not before: Mon 26 Jan 2026 06:52:58 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.72.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6640 (0x19f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:52:58 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=A311CD46353B0BCE3A5A21C56DFE7AB5C10A2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:82:23:e5:cc:87:83:f7:c1:c3:a4:78:5b:
69:db:aa:16:60:13:db:22:18:36:2d:9c:44:cd:9a:
ca:5c:95:d3:c1:e7:ae:96:a6:1e:f0:df:69:ab:d6:
c3:a0:92:f4:35:3f:c0:f7:79:f6:e0:25:44:ba:f5:
25:a1:95:6c:cc:ea:02:a3:a5:8c:29:9f:6e:f7:6d:
50:07:17:ee:ad:0e:a3:9f:08:b9:be:38:95:15:ec:
24:27:81:fb:1d:d0:9b:ea:b2:83:20:88:e8:6f:73:
df:74:e8:b2:7d:66:f9:5c:e9:12:1a:48:3c:54:8f:
4a:f8:f3:55:3f:12:9f:cb:1a:1a:d1:0c:ba:7b:65:
bb:f0:9d:fd:2c:29:dd:9a:ce:43:0e:53:89:86:50:
16:45:17:0b:91:8a:ca:41:f4:34:90:2a:c9:54:de:
ea:30:9d:ea:7a:a1:eb:fd:f0:1c:c4:58:d2:b7:36:
3a:f7:fa:a6:c2:f4:ef:f4:a5:e5:e4:10:71:2b:0c:
d4:12:ba:fe:80:78:f2:33:0c:fd:19:66:cd:03:c7:
67:df:1e:09:9f:74:b0:c6:d8:87:86:f9:20:55:3b:
c6:59:d3:8e:19:44:fd:68:67:a6:78:77:84:8e:8e:
db:7e:0e:e4:cf:37:ca:35:e8:2e:92:b1:32:c5:a2:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:CD:46:35:3B:0B:CE:3A:5A:21:C5:6D:FE:7A:B5:C1:0A:27:20
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/oxHNRjU7C846WiHFbf56tcEKJyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.128.0/17
Signature Algorithm: sha256WithRSAEncryption
70:a4:f8:a4:25:38:a7:f5:82:ac:48:7f:da:76:65:94:d5:be:
8f:a3:e6:49:ec:cc:a2:df:d0:5c:b6:45:39:83:0e:e1:07:35:
d4:5d:61:b9:8f:56:ce:8b:cb:65:d7:3f:75:8c:92:7f:e0:c3:
30:9c:92:57:34:db:db:cf:51:f6:7c:82:c3:2d:82:a2:8d:c9:
6f:00:83:22:11:d5:b8:da:6b:64:43:00:94:1a:c5:33:5b:29:
34:70:95:50:6d:ca:12:a2:48:37:75:4c:86:d2:3f:09:70:dc:
66:b0:64:79:83:17:e3:b7:26:00:29:c6:32:34:6b:9c:14:04:
d5:4f:ce:6a:c6:27:d4:fb:2c:dc:a1:95:a1:3f:25:a3:95:be:
68:04:18:b3:ba:1f:52:dd:3b:32:ff:9a:ca:fa:b7:7b:3d:e5:
d7:6b:7b:95:08:f0:62:0c:66:23:be:e3:e1:84:7b:b8:ba:f3:
ea:75:65:b2:68:4b:78:3f:e0:54:5e:32:19:78:a8:63:b5:2f:
69:0f:25:f2:b0:64:57:bc:0f:8c:69:cd:cb:e9:54:3e:16:21:
62:48:d1:d8:6b:1b:ec:14:72:24:b3:6b:f7:71:b1:72:07:de:
9e:db:4c:a5:af:aa:d5:a0:6c:83:ba:44:e0:60:df:06:f4:e0:
bf:74:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:20 2026 by rpki-client