Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/pitQToVnChAGPMmlzkh5wlFs03k.roa
File: pitQToVnChAGPMmlzkh5wlFs03k.roa (raw, json)
Hash identifier: pqj2pFNAAyNew2757uosgWlA/wqKmYX8gfXis7hBmjA=
Subject key identifier: A6:2B:50:4E:85:67:0A:10:06:3C:C9:A5:CE:48:79:C2:51:6C:D3:79
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 0B18
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/pitQToVnChAGPMmlzkh5wlFs03k.roa
Signing time: Mon 27 Oct 2025 02:39:26 +0000
ROA not before: Mon 27 Oct 2025 02:39:26 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 58834
IP address blocks: 43.243.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2840 (0xb18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Oct 27 02:39:26 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=A62B504E85670A10063CC9A5CE4879C2516CD379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:a5:52:18:83:cb:22:71:58:c6:49:4e:30:
87:7f:f4:cd:f9:69:9d:1e:ce:59:a5:4e:61:a3:cd:
ed:ae:7e:29:e8:98:23:db:ec:3b:18:71:6f:5f:20:
8a:0a:09:94:cc:95:bc:7e:ac:97:28:09:6e:5b:bf:
6a:38:89:be:cd:64:52:77:dc:5e:cd:c9:61:9b:e0:
a1:ec:d1:94:72:77:c6:d5:80:5c:21:7e:57:54:14:
a7:de:ef:43:77:5a:40:3a:56:00:0f:16:13:b5:7e:
37:f4:ea:26:bc:24:ab:fe:ad:7f:e0:2a:20:c2:5c:
18:78:6e:09:41:42:7b:8c:6a:06:21:dd:71:e0:46:
16:99:e0:ec:50:2e:81:b7:b2:7a:7e:ef:ce:8c:46:
83:5d:11:9d:01:d4:73:c4:7f:17:e0:59:2c:9e:51:
4b:68:58:18:4d:65:c6:c0:a5:d2:57:61:ae:7f:6f:
c0:87:77:db:46:92:b3:f8:b7:cb:1f:9d:f3:7f:85:
99:05:ea:d8:52:63:e6:5d:89:d8:10:1c:06:63:80:
37:5c:5e:13:f3:8c:d8:7b:c0:de:f4:a9:d3:38:df:
14:be:13:3c:da:b7:3a:2e:db:d2:6a:40:de:75:5c:
52:d7:66:f3:aa:11:9f:98:0b:bc:d9:79:6a:d1:48:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:50:4E:85:67:0A:10:06:3C:C9:A5:CE:48:79:C2:51:6C:D3:79
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/pitQToVnChAGPMmlzkh5wlFs03k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.244.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:3d:75:b2:9a:1e:f5:f8:d2:f0:ed:2b:68:55:9b:d6:d2:ba:
06:fb:e1:42:63:ba:d5:3a:1b:26:c5:a5:52:5f:09:63:fa:19:
a8:08:84:bb:67:68:a3:53:21:67:de:4b:34:33:08:6d:0c:d9:
5d:67:fb:1c:eb:43:28:f7:cc:66:46:ea:0b:aa:36:c1:01:e9:
7b:58:f7:c0:b8:0e:1b:51:16:6f:80:20:a3:49:25:f1:a9:82:
fb:76:b6:56:3a:67:50:df:9f:ee:7b:fc:f2:72:dc:7f:c4:e1:
b3:34:b2:1c:90:a2:b5:6b:ed:3b:5a:20:89:cd:a6:06:c5:49:
f4:1a:64:ac:04:7d:da:83:47:30:e4:04:c5:47:3d:f4:5a:d0:
65:70:95:c3:74:fc:5b:1a:16:a9:ba:fd:0f:c9:bb:01:9a:a2:
4f:69:d6:5b:a0:f5:6d:41:4c:9e:32:98:46:64:86:bd:fe:20:
e7:1d:fb:c3:32:f0:0f:e2:e8:22:9c:c2:03:db:af:be:27:b5:
62:d9:f5:12:09:3d:7a:5c:5e:cf:8d:45:fe:15:ce:47:9c:29:
95:cb:5e:bf:49:83:1f:8e:d4:7f:23:ee:90:cb:eb:ac:18:02:
f4:63:ee:81:56:9b:d3:49:be:56:48:f4:dc:00:13:58:f1:4a:
d5:ba:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:57:38 2025 by rpki-client