Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/190/O5vV5JrQJkQfpKzFgXqMHGsi4ms.roa
File: O5vV5JrQJkQfpKzFgXqMHGsi4ms.roa (raw, json)
Hash identifier: AeqY8+UHfa7IbsATSn/xhtsWWnrmLiX5KeRE7npd3N4=
Subject key identifier: 3B:9B:D5:E4:9A:D0:26:44:1F:A4:AC:C5:81:7A:8C:1C:6B:22:E2:6B
Certificate issuer: /CN=E48FED76038496AD2AB1972D13468F4D3D403164
Certificate serial: 16CD
Authority key identifier: E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/O5vV5JrQJkQfpKzFgXqMHGsi4ms.roa
Signing time: Sat 13 Sep 2025 03:03:59 +0000
ROA not before: Sat 13 Sep 2025 03:03:59 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 24427
IP address blocks: 202.170.216.0/24 maxlen: 32
202.170.217.0/24 maxlen: 32
202.170.218.0/24 maxlen: 32
202.170.219.0/24 maxlen: 32
202.170.220.0/24 maxlen: 32
202.170.221.0/24 maxlen: 32
202.170.222.0/24 maxlen: 32
202.170.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5837 (0x16cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48FED76038496AD2AB1972D13468F4D3D403164
Validity
Not Before: Sep 13 03:03:59 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3B9BD5E49AD026441FA4ACC5817A8C1C6B22E26B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:c9:95:00:56:9f:0c:4c:cb:61:c6:2c:51:
40:71:34:5d:60:81:be:f4:38:ba:80:aa:15:ed:ee:
a0:26:95:4e:40:d8:4d:33:bb:f2:51:3c:99:53:fc:
2c:5e:88:e5:fb:19:8d:49:08:0a:88:79:d6:b3:82:
d5:86:c7:98:8d:74:3e:be:0d:d9:65:2d:0d:b2:bb:
0c:2a:5c:1b:ce:54:fc:72:61:27:25:fc:a5:a4:1f:
32:83:92:7a:a3:ec:fb:47:73:82:0c:d3:c5:cf:3e:
70:26:d0:80:39:58:30:02:05:51:44:e2:6d:29:6a:
5e:da:3d:21:7b:57:30:5d:c8:d7:89:dc:71:5c:55:
73:1d:a1:fc:c9:a7:68:96:c1:db:cc:1e:0f:ee:69:
16:40:b3:f6:f6:62:68:1d:36:93:2d:13:20:76:b3:
06:9b:37:08:f8:aa:b3:6a:1f:9c:ee:12:ce:68:90:
d8:96:12:ec:c2:6b:0b:3d:3d:02:66:cc:07:6f:3b:
95:3f:ee:b8:b4:1a:25:96:59:d6:a1:f5:68:5c:76:
9e:5d:0c:de:21:b9:7c:68:eb:48:32:21:89:3e:24:
93:2e:51:5a:88:b8:39:87:5a:3b:d1:ba:22:36:ac:
0f:f7:86:de:d4:a4:be:dc:a3:21:0f:f8:c1:66:05:
aa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:D5:E4:9A:D0:26:44:1F:A4:AC:C5:81:7A:8C:1C:6B:22:E2:6B
X509v3 Authority Key Identifier:
keyid:E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/O5vV5JrQJkQfpKzFgXqMHGsi4ms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.170.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:dd:e9:18:80:39:2a:9b:61:c9:15:a7:dd:db:33:85:9a:dc:
fd:da:b0:7b:59:52:04:f4:01:0d:aa:a9:9d:e2:9b:d7:35:1e:
b7:a1:9a:67:cf:54:8e:44:ad:42:ab:c8:a1:12:16:80:ff:ae:
d8:f7:b1:73:e8:b7:43:a8:d8:0b:19:ba:38:c4:ba:ce:40:2a:
ba:6d:2d:a6:3c:d1:6f:28:03:b7:3d:41:58:bc:9c:f0:d9:7e:
51:2f:bc:5c:cb:3f:e0:75:04:e4:1b:71:f7:7b:da:7d:f6:8e:
bc:cd:15:73:1e:48:30:e2:e3:10:39:90:d8:1c:6d:ee:58:3d:
99:8d:a7:83:67:32:20:33:49:b6:3e:98:4c:e2:2b:80:35:85:
81:d6:55:95:a8:e6:af:56:d3:ab:11:03:83:c0:c3:20:a0:af:
84:78:61:6e:7a:e0:2e:92:8a:91:28:8f:b8:68:03:38:6f:4f:
ae:68:4e:05:19:dd:c4:65:73:d7:bf:74:1b:8f:d4:6a:6d:70:
38:17:32:b6:d2:e1:a8:34:c2:fd:0d:9d:30:4f:1b:d5:4b:8c:
75:dd:e5:5f:68:5c:c7:8a:7e:5d:65:90:fe:43:95:d7:16:c4:
58:3d:8a:20:60:85:2a:ac:d1:51:bf:1d:ce:83:b1:ee:01:a7:
b0:7e:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:17:10 2025 by rpki-client