Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa
File: svqnms4OkBXhKx0p_gaynnVLnAw.roa (raw, json)
Hash identifier: 36G617lI/ZmXNJQrBpp06bTWCZP/E8T1Y+uibtvkPXM=
Subject key identifier: B2:FA:A7:9A:CE:0E:90:15:E1:2B:1D:29:FE:06:B2:9E:75:4B:9C:0C
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1A7B
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa
Signing time: Sat 13 Sep 2025 03:07:18 +0000
ROA not before: Sat 13 Sep 2025 03:07:18 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 398704
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6779 (0x1a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Sep 13 03:07:18 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=B2FAA79ACE0E9015E12B1D29FE06B29E754B9C0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:e6:21:49:9a:8e:40:7a:a7:53:51:1e:8d:
c1:ce:28:a5:38:83:d6:fb:25:03:28:53:f6:af:1c:
69:f7:d6:39:59:75:8e:b1:57:7c:ed:2f:eb:d5:9d:
b5:b3:de:04:de:30:e6:09:9e:e6:76:80:d0:8a:4e:
3f:72:c3:ef:0c:30:58:da:81:54:f7:b3:51:11:7e:
5f:02:b3:2d:ff:1a:6f:31:85:09:98:8b:eb:38:81:
0f:67:0c:ef:0d:86:19:d4:c0:0a:5f:b0:f0:87:3f:
a7:ce:d6:8a:59:b8:3a:b4:d1:ce:45:fe:23:91:9e:
03:75:32:95:e8:e9:a2:cf:cc:3c:38:fb:2c:d6:68:
0c:06:2d:79:e3:7e:89:75:c1:05:3d:a2:c6:87:51:
e8:d2:4d:3c:bc:58:97:73:5b:7b:39:a8:98:f6:5f:
2b:fe:be:7a:3a:44:27:e5:48:4c:7b:23:4f:0e:fd:
6b:81:47:d1:84:7c:54:f3:34:3d:91:24:31:29:45:
40:cd:e6:78:7a:50:03:90:9e:33:b2:73:e3:5d:10:
54:88:e0:ed:78:12:b6:e0:50:31:b3:5a:1c:b9:b3:
38:2d:4d:94:98:62:df:0d:e9:a9:5e:17:0d:1d:59:
0d:d0:e4:39:b0:5c:05:3c:47:7f:39:44:b9:95:b8:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:A7:9A:CE:0E:90:15:E1:2B:1D:29:FE:06:B2:9E:75:4B:9C:0C
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/svqnms4OkBXhKx0p_gaynnVLnAw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
16:66:1c:17:fd:d4:da:b0:06:13:d1:ac:c4:5a:81:2f:de:8f:
66:65:3a:5a:88:39:1d:44:55:44:2f:53:42:2e:8d:a3:30:6b:
4d:a7:ca:14:58:ff:37:1a:28:f2:27:da:e8:60:c0:c4:6d:4a:
bd:37:c9:d8:14:23:d3:45:11:6b:26:00:80:9d:50:e7:26:5c:
c7:60:70:a7:f7:fe:39:6f:5f:54:a4:60:d1:e5:45:d7:64:e5:
6c:fc:70:85:0b:f4:3f:75:7a:96:ce:59:1a:9b:9f:e1:f2:a0:
9b:c9:59:f9:21:f8:3c:1c:e1:32:0e:3d:c4:69:bd:db:3a:4e:
3a:99:44:62:d2:d8:bd:0e:0a:c5:91:5b:ec:90:8d:10:7a:ca:
da:8d:4b:42:f8:5b:1f:3f:d0:57:eb:17:22:75:cc:0f:db:5c:
45:cc:61:82:9a:7a:c4:0c:2a:7b:d6:53:3d:e9:50:cb:24:2c:
15:17:37:6b:c0:99:a6:d0:13:f5:33:7b:d7:d6:2d:36:0b:f5:
d7:97:11:a5:8c:b9:4c:27:f3:3f:cd:eb:d0:b7:b2:5e:0b:2e:
25:84:b1:1b:f2:fc:ad:78:bd:4e:2d:7f:d8:63:93:d8:ce:1d:
7d:6b:ea:b0:31:3a:f2:32:42:3d:a4:3d:35:51:ad:12:94:48:
b9:f5:c7:b2
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICGnswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTA5MTMw
MzA3MThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIyRkFBNzlBQ0UwRTkw
MTVFMTJCMUQyOUZFMDZCMjlFNzU0QjlDMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrUeYhSZqOQHqnU1EejcHOKKU4g9b7JQMoU/avHGn31jlZdY6x
V3ztL+vVnbWz3gTeMOYJnuZ2gNCKTj9yw+8MMFjagVT3s1ERfl8Csy3/Gm8xhQmY
i+s4gQ9nDO8NhhnUwApfsPCHP6fO1opZuDq00c5F/iORngN1MpXo6aLPzDw4+yzW
aAwGLXnjfol1wQU9osaHUejSTTy8WJdzW3s5qJj2Xyv+vno6RCflSEx7I08O/WuB
R9GEfFTzND2RJDEpRUDN5nh6UAOQnjOyc+NdEFSI4O14ErbgUDGzWhy5szgtTZSY
Yt8N6aleFw0dWQ3Q5DmwXAU8R385RLmVuBOnAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUsvqnms4OkBXhKx0p/gaynnVLnAwwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvc3Zxbm1zNE9rQlho
S3gwcF9nYXlublZMbkF3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAFmYcF/3U2rAGE9GsxFqBL96PZmU6
Wog5HURVRC9TQi6NozBrTafKFFj/Nxoo8ifa6GDAxG1KvTfJ2BQj00URayYAgJ1Q
5yZcx2Bwp/f+OW9fVKRg0eVF12TlbPxwhQv0P3V6ls5ZGpuf4fKgm8lZ+SH4PBzh
Mg49xGm92zpOOplEYtLYvQ4KxZFb7JCNEHrK2o1LQvhbHz/QV+sXInXMD9tcRcxh
gpp6xAwqe9ZTPelQyyQsFRc3a8CZptAT9TN719YtNgv115cRpYy5TCfzP83r0Ley
XgsuJYSxG/L8rXi9Ti1/2GOT2M4dfWvqsDE68jJCPaQ9NVGtEpRIufXHsg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:01 2025 by rpki-client