Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2358/s_RNbyQMNeObRzGo0j-GHaIMs8s.roa
File: s_RNbyQMNeObRzGo0j-GHaIMs8s.roa (raw, json)
Hash identifier: uP2mh8C+bXtovTZ/4SlMeQzC+eYk8+go7KDF3KOCshU=
Subject key identifier: B3:F4:4D:6F:24:0C:35:E3:9B:47:31:A8:D2:3F:86:1D:A2:0C:B3:CB
Certificate issuer: /CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Certificate serial: 45
Authority key identifier: 4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/s_RNbyQMNeObRzGo0j-GHaIMs8s.roa
Signing time: Thu 25 Sep 2025 06:36:28 +0000
ROA not before: Thu 25 Sep 2025 06:36:28 +0000
ROA not after: Tue 15 Sep 2026 07:06:43 +0000
asID: 131539
IP address blocks: 110.42.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0430E3518A5AF51BC0DF62567E0D157CA523C1
Validity
Not Before: Sep 25 06:36:28 2025 GMT
Not After : Sep 15 07:06:43 2026 GMT
Subject: CN=B3F44D6F240C35E39B4731A8D23F861DA20CB3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:8e:98:a7:dc:32:72:4c:7b:5c:0a:78:6c:
6f:ff:8a:7c:c4:ff:5c:8c:a9:7f:42:6b:ab:59:aa:
b7:36:24:19:e3:57:b5:56:48:d7:3b:74:07:6c:cb:
3a:79:ae:ce:fa:32:37:48:64:77:02:fb:49:dd:91:
91:6b:4c:03:13:05:c5:65:d5:f8:f0:8a:df:d9:4a:
71:10:2a:a3:95:2a:b9:50:69:8b:a9:4f:b3:d0:fc:
53:ff:49:fe:ae:35:72:2f:84:df:64:5b:d5:b7:d2:
de:a0:a5:58:da:a3:6f:63:cf:15:5a:9f:3e:59:ff:
cb:6b:05:97:9f:b2:cb:94:20:c8:29:99:a4:c9:ed:
69:c2:a7:0b:0e:a8:e6:15:73:eb:56:3e:7c:4b:72:
69:32:fa:ad:4f:d2:44:b4:3a:1e:f3:76:a3:c6:b7:
d0:3c:85:54:c0:d2:f2:f1:c1:b9:ce:79:d7:33:fe:
60:6f:61:c3:cf:e7:58:28:0b:8c:71:e3:cd:c4:88:
23:e1:35:53:b1:72:a4:98:7f:00:28:08:aa:4d:46:
17:44:ff:bc:28:bb:16:12:3f:ff:ed:d0:e6:e4:9b:
62:3d:85:18:e8:4d:a1:8a:a3:97:48:f0:0f:5b:2f:
fb:04:e9:b4:82:27:01:29:d1:65:83:73:bc:07:1d:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:4D:6F:24:0C:35:E3:9B:47:31:A8:D2:3F:86:1D:A2:0C:B3:CB
X509v3 Authority Key Identifier:
keyid:4C:04:30:E3:51:8A:5A:F5:1B:C0:DF:62:56:7E:0D:15:7C:A5:23:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/TAQw41GKWvUbwN9iVn4NFXylI8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TAQw41GKWvUbwN9iVn4NFXylI8E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2358/s_RNbyQMNeObRzGo0j-GHaIMs8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.42.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:31:fa:31:92:bc:ad:b1:21:73:79:3d:7e:be:69:4f:3c:e4:
fa:72:41:27:fa:48:a8:90:76:31:07:56:82:3b:7b:eb:74:8f:
0b:90:58:4b:af:8a:0a:20:31:24:29:15:0f:ef:c2:c7:7e:ee:
a1:25:db:e6:54:34:23:84:84:e7:ae:d1:a0:c9:05:59:02:94:
18:34:37:8b:6a:a4:88:4b:da:37:40:58:c2:cd:3d:bd:39:d8:
7e:67:68:73:39:fb:97:fd:18:f1:1b:93:cc:2b:9e:33:b7:cc:
50:0d:00:d6:75:a2:15:aa:78:91:52:9f:12:21:7b:95:b0:ee:
d9:59:51:87:93:40:b0:23:79:83:ec:2f:90:9f:15:50:ae:a9:
78:0f:95:18:82:23:83:28:86:fe:7d:5c:58:21:92:18:9b:0a:
ba:02:0a:82:7c:51:ed:64:3f:0f:3e:bb:3f:3c:a4:e3:27:80:
41:33:40:05:a1:94:9e:1d:e1:98:65:55:64:6b:b8:b7:3e:88:
d5:24:39:4b:74:da:d0:6f:7f:bc:e3:2e:1d:40:35:0f:e2:8e:
1c:79:a0:a8:80:07:5b:2d:7c:48:77:0e:81:b9:81:37:31:e7:
77:44:34:a9:09:86:da:3a:4d:43:62:51:8c:80:e7:e3:bc:cd:
5b:19:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:34:19 2025 by rpki-client