Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/sWj1ni_Fr-4BkEbkc3aWAgTXyes.roa
File: sWj1ni_Fr-4BkEbkc3aWAgTXyes.roa (raw, json)
Hash identifier: zZ0JHmG0/Bxprsqr78enb2ahJrW3fY72/+Gt/rJafBs=
Subject key identifier: B1:68:F5:9E:2F:C5:AF:EE:01:90:46:E4:73:76:96:02:04:D7:C9:EB
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19FF
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/sWj1ni_Fr-4BkEbkc3aWAgTXyes.roa
Signing time: Mon 26 Jan 2026 06:53:02 +0000
ROA not before: Mon 26 Jan 2026 06:53:02 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 139.219.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6655 (0x19ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=B168F59E2FC5AFEE019046E47376960204D7C9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9b:d0:ea:99:45:ca:3f:d5:9f:f9:16:8b:b3:
1c:69:dd:3d:98:25:10:ff:5e:0a:ab:d1:8d:1c:52:
5c:d3:b1:f1:c7:6c:59:34:4e:c9:1a:ce:be:61:f7:
d9:fd:dd:73:71:7d:15:35:ee:a1:c7:05:c4:f7:74:
c2:62:70:ff:a1:f1:df:44:35:65:1a:75:51:a0:28:
7d:63:74:b6:37:da:64:61:fe:e8:19:df:ce:d5:f6:
84:7b:f5:48:12:4d:01:a0:c8:37:0f:f7:b6:3f:cd:
a7:12:79:75:64:6e:94:af:a4:63:88:36:be:11:e2:
b7:aa:bd:2a:17:bc:a1:49:80:8c:11:55:06:2a:55:
64:26:81:81:57:14:51:7a:21:5b:3d:8b:f7:8a:25:
21:ea:58:27:08:85:3f:a2:61:61:cd:a8:dd:8f:78:
e8:32:aa:af:42:b8:19:fb:ce:95:8b:6d:b2:ed:41:
e9:b1:11:cd:40:88:73:eb:0e:1a:e8:23:e9:64:cf:
9a:e2:93:29:ca:ab:be:05:20:00:0f:ac:10:a2:20:
9f:c3:60:64:90:70:93:b6:39:07:97:0e:7a:40:e8:
1c:43:69:0c:c3:74:0c:80:33:1d:84:0d:9e:da:cf:
58:d6:7e:7b:dc:42:4b:d9:2a:dd:32:7f:9e:c6:66:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:68:F5:9E:2F:C5:AF:EE:01:90:46:E4:73:76:96:02:04:D7:C9:EB
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/sWj1ni_Fr-4BkEbkc3aWAgTXyes.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:86:e9:aa:de:fb:a4:4a:8c:b3:5e:fe:9c:93:0c:10:e5:80:
97:b0:6e:48:94:d4:65:f2:1b:59:d1:dd:c9:9a:31:89:1d:b0:
59:e5:5c:2d:47:c3:10:66:a7:24:e9:a3:d1:9e:72:45:9d:4c:
37:8c:51:12:52:3d:fe:64:fa:55:ad:cc:3a:54:4c:36:90:52:
15:c8:81:dc:2c:7b:54:17:f2:4a:f4:11:18:1c:cd:4b:32:d9:
1e:d7:4a:a6:e0:c4:fe:02:7d:e5:ac:77:e1:d2:34:04:9c:24:
82:ca:d3:5c:22:bf:9e:31:9f:7f:7e:65:30:e2:88:dd:4e:75:
13:55:24:23:bb:3d:0c:34:fc:5c:be:85:df:f7:b6:0d:b4:2a:
59:ed:9e:b7:68:14:54:68:ef:16:c0:b2:79:91:e0:91:a9:b0:
40:db:3a:d3:d7:6d:3e:80:cc:a3:3d:ce:06:8c:cf:6d:ef:84:
f6:f1:50:90:53:6f:86:c9:77:d1:07:04:73:3a:8b:f1:14:e0:
82:5e:b7:f4:26:f6:c4:4b:ec:30:8a:49:63:67:5b:4f:79:a6:
2a:dc:b0:3e:de:3a:e7:ff:fd:5e:fa:af:1b:68:15:a6:e7:be:
3e:ef:d7:80:11:c4:07:d8:e4:42:2d:0f:a0:3a:39:d9:5b:39:
30:31:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:52 2026 by rpki-client