Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/vDUfEQvUDr6mT0nq25oZIbZQCWM.roa
File: vDUfEQvUDr6mT0nq25oZIbZQCWM.roa (raw, json)
Hash identifier: eiLRA8yWtBnq2qiv25rvIQSQWQk8ljdCzbs8EO/88Uo=
Subject key identifier: BC:35:1F:11:0B:D4:0E:BE:A6:4F:49:EA:DB:9A:19:21:B6:50:09:63
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 19FE
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/vDUfEQvUDr6mT0nq25oZIbZQCWM.roa
Signing time: Mon 26 Jan 2026 06:53:02 +0000
ROA not before: Mon 26 Jan 2026 06:53:02 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.73.99.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6654 (0x19fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:02 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BC351F110BD40EBEA64F49EADB9A1921B6500963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:70:9b:80:b8:bf:c2:b6:13:d3:65:1a:7a:
08:ca:4f:19:4f:99:4a:4f:8c:19:dc:db:65:79:8f:
4e:d4:dd:01:09:d8:08:12:ab:97:2c:28:a4:dc:41:
de:35:65:21:85:5f:a3:18:d8:fd:f6:be:c8:24:79:
9b:84:93:0e:a6:ab:dc:64:2a:bc:b9:e4:3c:88:07:
db:f6:be:ab:b5:b5:20:5c:0b:ab:3f:f6:8c:77:8d:
fd:84:f3:8c:8f:42:0c:9f:19:1d:c3:39:33:49:32:
4c:2b:bf:43:87:cd:22:02:50:26:a8:b5:78:ba:6d:
85:0e:a6:3d:f0:1f:71:68:d4:49:c6:5f:ac:30:b3:
ff:ee:cf:45:cd:ca:1a:7a:6b:16:74:7d:c6:a9:bb:
2f:81:96:48:c1:f2:24:9b:4a:80:71:b5:a2:aa:8d:
85:90:5b:1a:bb:ee:fc:86:95:db:a8:9b:4e:81:e4:
20:00:00:29:9f:72:95:93:75:c4:dd:6b:2d:fa:e8:
a0:07:23:93:88:3a:d9:35:d3:97:7d:eb:d9:5b:e7:
f0:44:87:56:cb:b1:b3:64:ed:99:68:51:74:a5:52:
ea:d0:46:c3:0a:35:16:7a:e6:09:bb:9f:a5:68:1c:
f4:ea:b5:24:b5:a9:94:1d:54:5b:fa:1d:4f:d8:6a:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:1F:11:0B:D4:0E:BE:A6:4F:49:EA:DB:9A:19:21:B6:50:09:63
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/vDUfEQvUDr6mT0nq25oZIbZQCWM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.73.99.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6d:74:71:1c:d1:70:f3:80:23:35:c3:3d:99:5f:b0:f7:b8:
23:cb:b0:03:c3:a7:0c:62:1c:2e:3d:9c:cf:1f:56:b4:54:9e:
d5:00:78:54:af:08:e8:86:a4:fa:51:40:72:76:74:d0:a6:f0:
3d:3f:68:76:51:e9:69:50:e7:10:b1:93:ce:b1:35:97:08:9e:
aa:6a:b6:78:e4:fb:25:94:b0:f1:67:5e:41:03:d1:fe:ad:05:
51:89:1b:b3:75:c5:f9:b2:87:c4:a0:ed:e1:4f:f2:7a:05:aa:
d3:1e:b4:8b:c5:83:86:90:f2:7c:43:05:73:ff:ed:b4:8e:e0:
51:c7:ec:5e:23:3b:2b:4a:52:46:bf:54:57:b1:bc:56:3a:c5:
bd:c7:14:3a:9a:0a:33:7d:e2:ce:58:13:cd:7d:7c:7a:c2:4e:
97:d5:79:34:0e:93:9d:16:2e:21:27:a4:3a:a6:5f:dd:e0:d2:
a1:42:2a:c3:09:ea:53:e5:9d:19:59:8b:17:fc:e6:0a:bc:c4:
94:34:d1:77:74:ab:85:a3:c1:8c:39:87:f4:56:66:63:f4:38:
c0:55:c9:29:37:b1:96:37:c5:b4:ff:8e:ea:df:68:89:0d:99:
43:ad:b5:84:9b:f7:3c:fc:51:bd:74:68:11:b0:82:34:55:ff:
6b:d9:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:03:15 2026 by rpki-client