Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/V4pN00D0zdJU_Gu8rHcMk13_EFE.roa
File: V4pN00D0zdJU_Gu8rHcMk13_EFE.roa (raw, json)
Hash identifier: ZAI5OVJjlRF15mmrVJb6iFSSA2U30abCxxqS76WUEaE=
Subject key identifier: 57:8A:4D:D3:40:F4:CD:D2:54:FC:6B:BC:AC:77:0C:93:5D:FF:10:51
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 0AFF
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/V4pN00D0zdJU_Gu8rHcMk13_EFE.roa
Signing time: Mon 27 Oct 2025 02:31:38 +0000
ROA not before: Mon 27 Oct 2025 02:31:38 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 58834
IP address blocks: 124.240.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Oct 27 02:31:38 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=578A4DD340F4CDD254FC6BBCAC770C935DFF1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:a7:1f:ba:1d:3b:d1:4e:90:0c:5d:7a:65:
2c:3c:0c:58:81:89:73:b5:a4:10:51:ec:9f:55:b6:
6e:d0:38:8a:e4:66:b4:72:b7:fd:3c:43:87:94:ea:
e1:1a:b7:73:c6:eb:74:53:5f:50:b0:cd:c4:fa:6f:
61:10:dc:d9:c1:7a:69:e1:ec:40:ca:8c:6b:83:26:
07:cb:b6:af:ec:7d:ae:b3:d7:94:d3:3d:88:8d:79:
e3:62:ac:39:2b:97:34:24:f7:c7:18:ff:8a:a9:55:
a7:d1:5e:b6:d2:2f:24:63:83:b6:d9:ab:ae:01:80:
f1:29:a2:3d:c2:b9:1a:cf:d4:bb:38:64:ae:66:5c:
95:9c:56:f5:ba:25:c0:a9:09:37:b2:2a:e5:2d:b0:
9b:42:36:0b:cb:07:23:3b:1f:24:4a:b5:95:33:30:
2b:e9:5a:e2:14:77:24:a1:b9:d2:ec:0f:47:46:31:
e4:c9:c2:f9:75:ac:04:5c:a3:4a:2f:2a:9d:e0:2a:
22:08:60:9f:b5:7a:87:fd:aa:c2:c6:6b:25:4d:79:
bd:1a:7b:1e:fe:08:6c:ab:ba:d9:a0:b4:b0:f7:0d:
f3:90:69:e0:2e:4f:f1:b5:a7:6c:92:da:bb:33:92:
89:ef:12:97:1e:90:f0:b6:c8:0f:c0:07:f8:e2:ad:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:4D:D3:40:F4:CD:D2:54:FC:6B:BC:AC:77:0C:93:5D:FF:10:51
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/V4pN00D0zdJU_Gu8rHcMk13_EFE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.240.96.0/19
Signature Algorithm: sha256WithRSAEncryption
89:ce:61:43:35:58:97:fc:3f:82:2d:f8:ef:74:bb:22:cc:1c:
4b:ff:5b:cb:2e:94:27:d4:e8:3a:72:4d:a7:57:9f:68:09:c0:
9d:b4:52:2b:a7:ec:9f:71:54:22:9c:a2:48:22:f0:25:97:2c:
41:5a:7b:6c:40:f8:6f:9b:97:c7:f6:52:a8:63:f5:17:9a:52:
e6:bd:98:7b:0b:61:c4:01:d5:17:9c:81:8a:df:82:21:cd:3b:
f6:dc:85:6a:cd:11:8e:44:63:6f:6d:93:c8:42:42:1d:81:f5:
79:b9:11:7a:db:f1:bf:ea:4f:fc:0c:ad:40:19:a6:87:2a:6a:
0a:0d:66:8f:4b:a9:79:25:ac:96:23:56:f1:ff:82:f2:3d:e4:
ac:a2:0c:7b:3d:68:70:a3:c1:85:66:dc:57:1d:4a:ec:23:18:
77:3f:33:38:66:38:22:d9:bf:36:cd:d8:3a:7c:1d:77:51:b9:
97:3f:30:5f:eb:ea:5d:16:ac:fc:f5:97:c3:80:87:9f:ce:46:
54:4c:f5:27:04:4b:ef:78:74:dc:23:05:b9:9f:3b:f7:fb:40:
41:0d:0e:99:eb:c6:8e:98:73:d0:2e:33:f6:aa:da:18:49:a0:
ac:cc:30:a3:38:10:78:ca:48:1f:98:53:b1:e5:59:c5:f9:c5:
7a:8c:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:54:48 2025 by rpki-client