Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa
File: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (raw, json)
Hash identifier: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=
Subject key identifier: 52:FE:55:56:B8:4F:D3:E4:04:33:65:2A:48:F9:A2:8E:A1:09:A5:7D
Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF
Certificate serial: C7
Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa
Signing time: Thu 31 Jul 2025 08:27:42 +0000
ROA not before: Thu 31 Jul 2025 08:27:42 +0000
ROA not after: Thu 25 Jun 2026 02:35:12 +0000
asID: 151302
IP address blocks: 43.249.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF
Validity
Not Before: Jul 31 08:27:42 2025 GMT
Not After : Jun 25 02:35:12 2026 GMT
Subject: CN=52FE5556B84FD3E40433652A48F9A28EA109A57D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:e1:ba:b3:e5:87:bb:e6:0e:49:0a:5d:eb:
1e:0f:f6:3e:50:74:26:a5:e2:a0:de:79:fa:88:57:
8a:49:72:a5:1d:fb:ac:30:d1:53:ce:63:c0:a3:67:
74:70:1c:a5:96:a2:6d:a6:74:4a:9a:81:d6:f2:2f:
5e:c4:16:d8:61:1d:ef:ef:f5:58:28:a0:cf:3e:43:
eb:71:13:fd:30:31:0e:3e:4a:6c:7b:38:61:b5:85:
b3:2d:d3:f8:11:ed:3a:3d:4b:e4:64:40:4f:f6:6f:
7f:30:00:b4:17:1b:bf:63:70:54:ee:1a:23:e5:8a:
8e:c2:58:6e:38:39:6a:ef:50:5c:0f:43:43:1d:35:
46:b2:0e:17:64:f4:a5:8b:bc:a8:cf:9a:ed:50:13:
c0:cc:f9:10:c5:16:d3:b3:a5:72:9f:0e:82:0b:11:
c8:12:b2:06:3e:4e:77:6b:d7:da:f7:9d:da:f6:9b:
d4:a6:b0:02:51:e2:f4:62:77:c2:de:14:cb:02:aa:
56:a4:7c:88:c2:c1:e1:2c:06:60:d7:02:cf:17:ac:
83:a6:9a:95:0d:0a:52:d3:be:7f:b2:a4:38:59:29:
b8:33:9b:34:b6:05:d2:cf:95:10:59:53:68:32:09:
fb:4f:3f:a1:0c:55:68:b2:8b:14:a8:32:79:16:8f:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:55:56:B8:4F:D3:E4:04:33:65:2A:48:F9:A2:8E:A1:09:A5:7D
X509v3 Authority Key Identifier:
keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.168.0/23
Signature Algorithm: sha256WithRSAEncryption
48:60:09:40:6d:20:d4:44:bd:ed:dc:71:d2:d6:d0:96:5f:43:
38:00:68:21:75:ba:ec:f4:1a:45:01:1b:39:fb:1f:01:68:17:
54:f1:77:70:52:c5:9a:f6:07:0b:c9:e0:f3:3d:0f:ac:18:c0:
f3:a5:b0:8e:6a:bd:60:62:db:79:c7:8f:82:7b:24:93:26:48:
99:ec:a6:b1:6e:cc:42:54:33:fe:05:ac:e2:bd:85:30:33:4d:
73:85:cf:0a:8b:61:86:82:84:a2:ba:18:bb:4c:5f:ac:11:8f:
31:dd:b7:3e:12:de:47:53:9d:87:4d:4f:94:44:c9:8a:5b:80:
71:48:a6:ae:7e:b2:e0:f2:f3:be:e0:1b:79:35:9e:49:51:43:
ac:19:8f:8f:0c:dd:f4:35:6d:be:e9:fc:b0:38:23:89:a0:5c:
e0:48:18:f5:93:01:f1:95:ec:9c:f4:c0:5b:50:74:99:d2:cf:
4d:48:a5:10:17:c6:5e:37:bb:79:6a:26:f4:2d:bc:c7:3e:58:
de:78:69:0a:cd:f2:e1:76:bf:97:9d:e0:09:0f:0d:5c:86:00:
bf:15:94:13:33:b1:2f:d9:cd:02:a5:94:0a:0a:e9:e4:00:8c:
7d:3e:5e:9a:47:59:56:fb:cb:6d:94:36:29:f1:c8:6b:6d:8d:
d4:d0:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:44 2025 by rpki-client