Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/LSYYd08kpjw2cGhJj0ytyTcY0MU.roa
File: LSYYd08kpjw2cGhJj0ytyTcY0MU.roa (raw, json)
Hash identifier: SvbneBsC2YJ/0OdjmksqIb0JIap1YdOTWsM5pWonb4M=
Subject key identifier: 2D:26:18:77:4F:24:A6:3C:36:70:68:49:8F:4C:AD:C9:37:18:D0:C5
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 18CE
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LSYYd08kpjw2cGhJj0ytyTcY0MU.roa
Signing time: Tue 10 Feb 2026 05:00:42 +0000
ROA not before: Tue 10 Feb 2026 05:00:42 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 55990
IP address blocks: 116.218.32.0/19 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6350 (0x18ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Feb 10 05:00:42 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=2D2618774F24A63C367068498F4CADC93718D0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:f4:20:d8:67:e3:07:4e:21:c7:ef:13:14:
57:5a:f3:2d:d8:ca:6c:e4:0e:94:61:4f:79:cd:57:
e2:a1:4b:98:b5:4d:fb:e4:8c:c6:3a:82:4a:ff:f2:
4b:a8:79:62:9a:08:05:a3:8f:b1:f4:54:e2:73:dd:
40:9e:93:21:b4:2d:3a:01:5f:0d:46:e0:22:a2:38:
de:a3:71:bf:ad:53:d2:2e:3e:ef:b5:03:70:d2:e0:
45:69:74:69:9c:43:ff:62:cb:3f:ed:d5:0f:8f:c1:
d8:d9:74:f8:27:10:ca:e8:a6:15:5e:d0:e0:64:e6:
26:89:af:57:20:12:05:e5:ba:af:67:58:1d:70:42:
33:e6:e9:25:01:1c:a0:66:32:46:2f:96:00:43:c6:
f7:e7:fd:9f:ab:ad:e0:7e:3e:8e:5d:52:85:f5:1f:
b0:2a:d4:43:0c:b5:9a:e5:a8:1c:82:bb:8f:24:7b:
f2:b4:e0:2d:87:5c:6e:6d:28:ad:9a:6c:92:ae:ba:
c4:95:f4:c7:cb:01:ac:7d:eb:2a:43:a3:cc:4b:c6:
8c:e6:ab:d9:cb:1d:ab:43:8e:97:bd:79:57:2b:05:
41:2a:01:fc:5a:f1:21:1e:6e:41:f7:51:87:05:21:
c6:ff:1d:25:d7:d5:20:e1:8f:cc:88:4b:e9:60:d9:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:18:77:4F:24:A6:3C:36:70:68:49:8F:4C:AD:C9:37:18:D0:C5
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LSYYd08kpjw2cGhJj0ytyTcY0MU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
82:90:f5:ce:8f:67:db:bf:15:ad:04:de:dd:20:d7:a5:64:f5:
62:f5:b9:1c:2e:84:1d:18:1c:53:3f:c8:e4:ed:36:aa:8f:1a:
d3:e9:c8:a4:c5:03:11:19:d6:3b:ab:2f:95:4c:e3:6d:cd:ec:
ea:3e:98:aa:65:97:49:ed:b5:98:37:65:03:61:76:14:e2:b0:
09:6b:1f:f1:22:cb:de:83:c4:06:38:2e:cf:85:86:93:60:97:
9c:78:80:1a:da:f8:5d:80:59:61:ce:2e:67:8f:31:28:1b:b1:
45:9e:dd:d7:39:15:b2:63:09:b6:67:13:2c:1f:53:40:4b:19:
66:c2:fe:68:80:90:61:4c:7a:2b:30:33:5a:3a:c3:48:76:27:
76:3b:0e:e3:f1:41:a3:f7:54:7a:df:06:26:45:37:f4:ed:a1:
c7:5e:ea:9f:d7:d0:28:21:46:68:f5:0f:3f:f1:c7:91:f4:17:
81:67:57:00:48:1e:ba:ca:7c:8f:0c:6a:d4:98:70:4c:28:d4:
6d:69:06:0a:20:c1:9f:b9:f3:4f:21:95:1b:a0:97:83:e8:a0:
54:93:34:3d:86:ac:f3:f4:a8:21:35:33:5c:1c:02:07:02:4f:
48:fe:78:9a:03:8d:a6:3e:54:60:c5:d1:1d:70:4e:e8:9d:d8:
73:b6:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:13 2026 by rpki-client