Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ymrGINw8MvYEo9Te4dh8zGpSEIg.roa
File: ymrGINw8MvYEo9Te4dh8zGpSEIg.roa (raw, json)
Hash identifier: s19UKerzeiaWlSAZGgwUzM0bCjLsmRI2sbkgIhd0rds=
Subject key identifier: CA:6A:C6:20:DC:3C:32:F6:04:A3:D4:DE:E1:D8:7C:CC:6A:52:10:88
Certificate issuer: /CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Certificate serial: 1A05
Authority key identifier: 21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ymrGINw8MvYEo9Te4dh8zGpSEIg.roa
Signing time: Mon 26 Jan 2026 06:53:04 +0000
ROA not before: Mon 26 Jan 2026 06:53:04 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 58593
IP address blocks: 40.73.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6661 (0x1a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DC875965C2BA61D1DACBB48DEE140554AA5AEF
Validity
Not Before: Jan 26 06:53:04 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=CA6AC620DC3C32F604A3D4DEE1D87CCC6A521088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:9c:ac:ff:bc:10:83:92:7a:6d:d1:7d:ae:
61:1d:5b:54:38:d7:ff:13:09:00:9c:c4:07:17:ee:
33:88:79:81:10:d8:a0:56:1b:d0:dd:32:6f:31:83:
69:b3:4d:8c:13:a9:bf:56:52:32:95:c5:2b:4d:aa:
b0:3b:80:7e:a7:c6:b7:3e:0d:c3:be:be:60:ab:35:
b5:de:18:c9:8a:30:87:fc:07:4b:d5:c2:b8:ba:4f:
20:ca:f5:84:58:87:3a:fe:40:a4:52:69:4b:54:03:
cb:23:bb:e8:e8:50:f0:77:ff:25:8b:dc:b7:6f:08:
a2:2e:43:d5:79:74:f9:a0:31:c1:8d:74:d3:9d:19:
fd:bb:33:1a:14:a4:f8:a8:08:d9:e8:6d:22:0d:b4:
18:4f:7a:56:24:7b:80:75:ce:86:32:2a:e2:23:05:
f0:60:cf:a0:ba:40:c5:60:79:9e:50:5b:0c:04:e0:
cc:53:e1:eb:34:7b:cf:a9:b1:5b:17:4c:5c:32:a8:
53:bd:02:af:12:9d:29:8c:a8:9b:6b:7b:4b:ae:21:
00:b0:28:fa:a0:56:ee:d1:db:97:26:88:52:35:e9:
17:de:b3:ef:89:6e:ac:81:8a:1e:df:1d:2d:98:22:
1b:dc:dc:4b:4c:49:f5:2f:87:3d:93:99:84:47:ff:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:C6:20:DC:3C:32:F6:04:A3:D4:DE:E1:D8:7C:CC:6A:52:10:88
X509v3 Authority Key Identifier:
keyid:21:DC:87:59:65:C2:BA:61:D1:DA:CB:B4:8D:EE:14:05:54:AA:5A:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/IdyHWWXCumHR2su0je4UBVSqWu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IdyHWWXCumHR2su0je4UBVSqWu8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ymrGINw8MvYEo9Te4dh8zGpSEIg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.73.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:d9:96:73:28:9b:24:1a:81:a3:f0:c7:39:30:f1:51:08:07:
5c:59:5c:ec:96:c6:62:00:5b:f0:52:aa:1b:68:6f:ce:12:80:
3d:bc:2e:4c:09:d7:31:93:89:50:34:01:96:ff:20:f3:24:e2:
3c:da:70:f8:60:cc:2e:52:bc:26:2e:22:c0:82:9e:43:9a:e7:
73:c9:4f:b8:ee:44:bd:3e:bc:6e:32:65:d4:2d:17:7b:a4:d2:
31:24:62:c0:eb:df:a6:ab:f4:77:d6:20:1b:d7:1c:78:54:e6:
11:86:d2:8d:00:2f:3e:8b:0c:65:13:3c:f2:a6:ca:e9:61:98:
8a:10:d9:82:cd:45:7b:f1:a2:c2:c3:2d:77:35:e1:92:e2:bb:
0f:00:d7:07:95:6e:7f:f3:e9:46:65:47:d7:60:ac:8a:f7:6d:
98:ec:8a:c2:d9:7c:30:bd:8f:ff:af:05:d4:56:47:3c:f0:6b:
4e:74:a0:58:fd:f9:c3:de:64:ee:dd:1d:0e:cc:c5:71:53:d1:
79:f0:51:bd:fe:b8:4d:8f:32:87:bd:7b:9f:1e:ec:e2:0d:32:
94:f0:f2:2c:c0:fe:3a:9e:ca:5e:6a:10:53:99:af:08:9e:a9:
30:bc:70:50:91:4c:2d:b6:7b:eb:15:8b:df:c8:1a:d6:ea:3c:
4c:7d:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:15 2026 by rpki-client