Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/vKuD6w31_uIMWeJf7UU0YQYf1FM.roa
File: vKuD6w31_uIMWeJf7UU0YQYf1FM.roa (raw, json)
Hash identifier: 24fK8+HxlKMje+X10koeIvjfJSh5EAZzPRM/S9WlceA=
Subject key identifier: BC:AB:83:EB:0D:F5:FE:E2:0C:59:E2:5F:ED:45:34:61:06:1F:D4:53
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 0B0D
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/vKuD6w31_uIMWeJf7UU0YQYf1FM.roa
Signing time: Mon 27 Oct 2025 02:39:23 +0000
ROA not before: Mon 27 Oct 2025 02:39:23 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 58834
IP address blocks: 202.168.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2829 (0xb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Oct 27 02:39:23 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BCAB83EB0DF5FEE20C59E25FED453461061FD453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:73:9a:7b:2e:00:2e:e0:b0:dc:3a:4b:f4:
17:15:a2:33:80:51:61:31:93:74:8f:2f:3d:a4:58:
9f:9b:c0:28:13:2b:d0:66:a6:b4:15:49:39:57:38:
e2:e3:8e:1d:e4:87:47:6b:93:87:b3:f1:4f:4e:8f:
07:de:1f:9e:97:5d:d1:a2:11:f9:d2:1a:d6:f8:9c:
38:ab:cc:90:5a:ec:58:7a:5f:d6:b4:c6:fa:02:71:
6e:61:61:39:92:b4:f6:4b:0b:ec:71:5c:eb:a0:ce:
2f:db:ae:a1:01:ee:16:ed:75:77:e9:59:36:c2:0b:
c3:f7:42:4f:d5:e9:3c:9f:92:ef:21:a9:9c:06:92:
10:e0:dc:ac:00:d3:a8:f4:b3:69:79:dc:64:b0:37:
c3:98:7f:5c:44:9a:64:31:c8:ac:bc:3f:18:ac:fc:
17:e6:d6:4a:7d:7c:fa:c9:6b:e7:4d:75:68:44:7e:
d7:2a:cf:19:0b:bd:ce:ac:4d:e0:4a:f2:b5:13:71:
d6:13:e3:58:ed:04:61:d3:4b:15:01:1e:13:2d:a8:
cf:21:74:30:75:f5:b2:57:bc:96:df:a6:b4:f0:35:
fb:0f:71:c8:38:c5:3e:53:da:21:36:e6:e4:63:2f:
43:8f:7f:13:72:38:0b:15:cc:30:e6:f4:50:6d:f7:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:83:EB:0D:F5:FE:E2:0C:59:E2:5F:ED:45:34:61:06:1F:D4:53
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/vKuD6w31_uIMWeJf7UU0YQYf1FM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f2:91:af:5b:1e:e4:b7:91:5d:f8:d3:a5:c5:a2:5e:ff:19:
d1:34:4e:2d:f6:87:66:1f:e7:c6:c7:6c:d4:7c:4a:95:33:f0:
22:a2:e1:57:59:93:0e:eb:dd:83:15:f5:2b:75:aa:71:93:41:
22:b9:4d:c0:2e:28:a7:6d:3a:2f:54:3e:10:36:0d:f2:28:64:
ec:62:c0:a8:8c:d6:e8:fd:d3:df:d4:71:3a:dd:ae:5e:74:e1:
0d:49:a0:81:a6:3a:cc:b5:58:8e:d9:e4:cb:0b:90:d4:16:a1:
3c:39:23:16:06:09:af:d1:df:65:ec:d4:0e:45:38:76:ca:98:
ee:06:24:94:7c:34:c3:4b:49:8d:f0:e8:04:21:c5:43:46:58:
4e:b6:3b:5c:b1:41:9e:4c:3a:b0:65:db:d2:ac:40:81:03:31:
61:59:81:cb:c8:d2:33:d2:fc:ff:08:ce:7b:0d:54:15:60:04:
78:37:bf:7f:1f:70:86:4a:88:33:15:a6:ca:e9:e3:eb:b9:bc:
7c:8f:e0:bc:d6:93:e5:51:02:7a:bb:9d:a9:a4:0f:f4:40:b6:
8e:9c:77:4b:e5:36:b8:38:48:8d:1b:b6:29:25:27:32:41:88:
91:2b:44:be:4f:f7:e1:36:3a:7e:df:93:20:7f:09:41:45:de:
11:43:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:54:47 2025 by rpki-client