Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa
File: QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa (raw, json)
Hash identifier: Uo1NXgmxduN8ZLxUAEiSzkhrWOTJAv90VkspB9KZxo0=
Subject key identifier: 40:2E:19:9D:B2:2F:71:DA:E9:91:31:36:9B:F6:B9:69:15:91:FA:DF
Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Certificate serial: 5B
Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa
Signing time: Mon 29 Sep 2025 01:20:56 +0000
ROA not before: Mon 29 Sep 2025 01:20:56 +0000
ROA not after: Tue 15 Sep 2026 07:06:43 +0000
asID: 131539
IP address blocks: 110.42.7.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Validity
Not Before: Sep 29 01:20:56 2025 GMT
Not After : Sep 15 07:06:43 2026 GMT
Subject: CN=402E199DB22F71DAE99131369BF6B9691591FADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:74:ba:be:52:4c:0b:0d:31:16:6d:eb:67:
00:85:c6:da:9e:73:60:cf:0a:48:dd:0e:7b:9f:58:
1e:39:db:c6:d8:a4:ab:3e:91:b6:ad:97:11:b4:ee:
75:e1:e4:8d:9a:73:31:99:21:68:58:1d:9e:07:b1:
57:35:db:4d:0f:34:07:43:71:eb:6c:e4:6b:c4:1c:
9a:6f:3c:17:7d:6b:d9:1a:e5:5c:f1:57:3e:09:99:
c4:d7:5d:73:7b:d3:78:88:07:0a:6b:ab:fa:ea:c8:
8f:42:b9:51:b1:71:3c:04:2a:38:96:9c:af:06:f2:
d8:a5:c4:47:86:85:ad:8e:5d:60:a6:29:6c:eb:1d:
e5:35:9c:a2:9a:53:2b:66:0d:76:12:4d:c8:75:69:
01:b8:1f:70:e6:3a:13:33:a8:52:1a:18:f6:3b:6c:
6f:5d:41:ad:93:78:39:ce:d6:94:d9:c4:bf:61:a3:
70:b4:68:25:92:31:60:34:ae:f0:30:2f:9f:1f:9c:
9f:ab:84:29:68:e1:2f:01:70:2c:38:41:2a:74:98:
04:ec:44:3f:99:ca:54:a8:25:b9:e4:37:ed:89:29:
77:a8:24:a0:d7:a5:2c:2d:8c:5d:8d:9c:0f:d2:0a:
da:f2:9b:e3:33:63:1e:b4:27:71:2a:a7:e9:69:c5:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2E:19:9D:B2:2F:71:DA:E9:91:31:36:9B:F6:B9:69:15:91:FA:DF
X509v3 Authority Key Identifier:
keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/QC4ZnbIvcdrpkTE2m_a5aRWR-t8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.42.7.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7b:74:84:b6:d4:c8:78:58:ae:42:4a:8b:1a:3f:17:58:54:
4c:a8:1d:2a:79:a3:01:21:97:9d:a0:68:b2:93:9c:61:71:2f:
71:e0:8f:30:1b:7d:99:f4:18:73:02:d5:a2:1f:0d:32:8b:e9:
ec:ba:2c:c4:6f:d4:0d:af:f5:82:58:a3:b3:38:0c:63:62:20:
0f:e0:71:5d:04:c8:c9:8f:c2:cf:16:0e:a5:f8:4c:78:09:81:
af:2d:09:22:73:e2:e7:9f:86:b0:77:c9:92:fd:8f:57:29:0c:
a5:22:57:22:bf:21:db:56:e1:84:13:f7:25:85:86:28:e5:32:
76:ec:af:1b:23:da:54:43:f2:b7:c1:4f:28:c5:58:ef:5d:84:
d1:58:d4:bd:9c:e6:21:98:c9:68:e7:39:bc:98:64:81:3d:a0:
74:66:d3:ec:cb:a4:dd:df:46:21:83:a0:50:f9:7a:23:60:17:
d7:ee:45:92:27:29:a3:c2:fe:cd:49:ab:50:a5:d0:87:19:84:
59:ca:db:a2:01:2d:5e:c1:b0:06:a1:44:c4:76:e1:e3:f6:bc:
2d:4a:e2:88:09:b7:f9:0f:4a:d2:63:41:c5:34:e1:a2:97:f9:
30:aa:57:ed:7b:c1:1a:bc:8e:7f:b2:62:05:88:8a:12:b3:fb:
39:23:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:51:39 2025 by rpki-client