Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa
File: c9ESnnmc3a4WZ5PAxwVSSav78EU.roa (raw, json)
Hash identifier: 0sCvCqVRI3bu0GOMcfqxEUkKQMrtCFdRTHW02qnP9J8=
Subject key identifier: 73:D1:12:9E:79:9C:DD:AE:16:67:93:C0:C7:05:52:49:AB:FB:F0:45
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 0A1F
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa
Signing time: Sat 13 Sep 2025 03:02:32 +0000
ROA not before: Sat 13 Sep 2025 03:02:32 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 58834
IP address blocks: 119.2.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2591 (0xa1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Sep 13 03:02:32 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=73D1129E799CDDAE166793C0C7055249ABFBF045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:46:89:5a:0c:a2:a8:b8:63:a5:69:c6:76:
4c:58:da:0f:49:0e:ca:01:a5:c5:66:1b:b2:0c:ae:
cf:90:ee:9b:07:c5:d9:86:ff:31:51:73:90:32:8b:
d5:ca:80:81:39:f1:34:aa:e7:3f:54:54:15:8e:65:
1d:3f:27:56:1b:1b:31:7d:d1:19:da:b8:ca:31:9e:
42:0d:16:2b:f7:b3:ea:14:73:34:c6:17:e4:6d:80:
a5:d6:20:57:00:bd:8e:e8:92:67:b2:39:48:a6:77:
f4:ac:95:f2:b4:c1:21:4a:bf:64:f9:93:93:aa:3a:
9f:11:4f:12:85:88:76:ed:18:f0:e1:3e:e8:dd:68:
c9:54:e9:f8:91:d1:61:a7:e9:8c:77:10:ab:d4:1f:
d4:ec:fc:4e:65:8e:26:28:05:0a:b6:e2:28:1f:9d:
c6:9b:e6:50:13:ad:01:51:17:d8:91:a2:f8:2c:ed:
1c:9d:43:10:75:40:56:6a:44:d0:19:fb:ac:94:f7:
26:4a:82:8b:6c:4f:9e:6b:d7:76:f0:6f:30:ab:28:
f9:45:40:6e:65:81:4d:15:27:58:d7:9a:65:4a:b4:
2a:8e:dc:92:3c:6d:b9:22:e1:13:17:26:fe:ee:93:
5e:91:49:f8:c8:01:62:02:e5:79:f2:12:57:c9:e8:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D1:12:9E:79:9C:DD:AE:16:67:93:C0:C7:05:52:49:AB:FB:F0:45
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/c9ESnnmc3a4WZ5PAxwVSSav78EU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.2.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:43:f5:01:f6:49:22:40:1e:7b:30:2f:4c:5f:ea:d9:5a:b1:
4c:5b:fa:5b:b6:3c:b6:68:cb:e3:94:41:eb:f3:a2:45:7c:da:
bb:11:2c:1b:b2:5b:21:e3:08:f9:49:27:a7:8f:8f:f3:09:92:
55:33:95:7e:9c:cd:b3:db:01:dd:4c:51:21:5e:3b:8e:77:1f:
e3:d9:fa:7f:b0:33:da:49:95:42:6c:d3:8a:a4:26:29:35:df:
f0:76:05:bf:b7:a7:19:4a:4c:1a:03:57:a9:d9:f5:89:04:38:
ba:82:7e:08:a1:e9:43:c8:92:fc:12:66:0d:c2:d7:ea:b3:14:
3a:73:34:15:47:44:2e:9a:71:37:d1:58:a6:84:25:7f:47:4d:
d3:c9:b9:c7:51:72:22:69:aa:37:91:c7:76:b2:af:55:c3:1d:
b4:38:1f:63:d9:ff:8e:6b:a9:86:b8:6c:58:7d:af:ea:58:79:
1e:19:81:a6:35:40:3c:b1:e2:6f:4e:1f:22:8b:b4:82:48:97:
e9:b8:99:0d:12:33:54:58:04:47:e0:75:07:1b:8e:fa:5e:94:
ef:7b:db:77:15:fd:b3:ec:73:a9:6c:74:59:ce:77:03:2a:96:
3b:21:8d:fe:e7:28:31:15:db:14:81:dd:90:a8:d8:1f:bf:0f:
25:1f:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:57:38 2025 by rpki-client