Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/Akhytt2Lde604aADJXe4K5MjQ0g.roa
File: Akhytt2Lde604aADJXe4K5MjQ0g.roa (raw, json)
Hash identifier: 5kbUEgKJofjEs1Qyfo7ehMjJRdmwQA0TxDUd9DNoIIQ=
Subject key identifier: 02:48:72:B6:DD:8B:75:EE:B4:E1:A0:03:25:77:B8:2B:93:23:43:48
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0A64
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Akhytt2Lde604aADJXe4K5MjQ0g.roa
Signing time: Sat 13 Sep 2025 03:03:17 +0000
ROA not before: Sat 13 Sep 2025 03:03:17 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 7641
IP address blocks: 211.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: Sep 13 03:03:17 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=024872B6DD8B75EEB4E1A0032577B82B93234348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:21:70:a2:65:f0:d3:d7:9f:40:8d:3c:11:
2c:9c:75:e5:5d:01:d3:28:d2:90:86:be:db:54:dc:
bb:e5:e2:57:38:28:55:c5:5f:dc:17:9a:f7:38:14:
ba:97:01:2c:b4:08:a8:94:be:52:8f:8a:02:2f:38:
a8:0c:51:30:49:09:9c:c9:a5:b1:ed:b0:5f:99:9f:
cf:fa:9a:75:a0:fb:e8:2f:13:55:bc:57:31:3a:d4:
57:db:91:0b:12:80:ba:43:01:80:a9:3f:98:08:66:
c3:0f:4e:f7:ff:27:cd:9a:da:ea:98:70:ba:4c:df:
25:03:9f:cc:97:1c:62:a5:67:11:7b:56:dc:99:93:
d4:c9:ef:79:b6:8d:cd:cc:75:e5:a6:64:0e:0b:ae:
cb:65:3a:08:89:c1:0a:79:fc:65:64:4e:1d:bb:54:
fa:c7:d5:e4:a3:53:eb:26:fa:40:22:46:4b:73:5b:
5a:8b:28:b9:17:c8:83:4c:2e:32:d2:78:8d:27:57:
01:d2:38:46:9e:7a:7f:ce:1e:16:ad:b7:59:8a:ff:
f3:5d:5c:f2:b2:7e:a4:f3:c0:52:57:4e:d6:89:2b:
71:16:a2:b6:26:2e:98:dd:58:22:d4:87:f6:19:96:
33:a8:4c:e2:56:54:c8:4b:14:40:10:4e:ff:4a:70:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:72:B6:DD:8B:75:EE:B4:E1:A0:03:25:77:B8:2B:93:23:43:48
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/Akhytt2Lde604aADJXe4K5MjQ0g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.146.0.0/20
Signature Algorithm: sha256WithRSAEncryption
27:a8:2c:1f:35:f1:07:f6:7c:ab:5a:8e:df:3d:f8:28:e9:99:
5c:38:c8:ff:db:c5:82:4c:b7:da:42:8f:1c:49:ac:c1:b3:67:
88:de:b6:23:7d:2a:55:95:12:de:a4:51:5b:33:7d:7f:32:63:
d2:4d:22:fc:32:4b:01:76:c2:78:9c:97:b5:b1:80:fb:ca:a4:
89:b5:41:72:11:fb:df:fd:1a:58:0d:81:88:94:e8:77:31:68:
61:06:71:f3:c7:36:31:9a:07:0e:2f:64:65:81:4b:bb:b8:2e:
95:17:4e:30:14:d2:f5:dc:41:d5:08:7d:c6:dd:63:57:4d:7b:
7d:59:82:42:c6:45:b3:bf:f5:37:b8:7e:10:89:ad:bf:2d:ff:
70:b8:fd:51:f5:9d:8a:7b:5e:69:e7:32:99:10:08:d3:81:d3:
37:3b:12:95:b2:61:fc:f4:e0:6a:72:d5:3d:d3:4c:a8:c3:60:
8f:18:b2:64:ee:c7:84:2e:54:f3:78:67:84:4b:fa:29:df:91:
0e:13:99:cb:6b:e8:93:b6:fa:20:ee:9d:d1:93:fa:43:0b:91:
fc:94:e1:1c:92:2e:ef:b0:0e:56:98:3c:48:09:49:2e:38:02:
58:0d:63:e6:61:f0:b6:6f:88:26:37:d4:f3:99:a5:93:dc:7e:
f9:01:06:6a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw
MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA5MTMw
MzAzMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDAyNDg3MkI2REQ4Qjc1
RUVCNEUxQTAwMzI1NzdCODJCOTMyMzQzNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJESFwomXw09efQI08ESycdeVdAdMo0pCGvttU3Lvl4lc4KFXF
X9wXmvc4FLqXASy0CKiUvlKPigIvOKgMUTBJCZzJpbHtsF+Zn8/6mnWg++gvE1W8
VzE61FfbkQsSgLpDAYCpP5gIZsMPTvf/J82a2uqYcLpM3yUDn8yXHGKlZxF7VtyZ
k9TJ73m2jc3MdeWmZA4LrstlOgiJwQp5/GVkTh27VPrH1eSjU+sm+kAiRktzW1qL
KLkXyINMLjLSeI0nVwHSOEaeen/OHhatt1mK//NdXPKyfqTzwFJXTtaJK3EWorYm
LpjdWCLUh/YZljOoTOJWVMhLFEAQTv9KcLhzAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUAkhytt2Lde604aADJXe4K5MjQ0gwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U
IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv
TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9Ba2h5dHQyTGRlNjA0YUFE
SlhlNEs1TWpRMGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
05IAMA0GCSqGSIb3DQEBCwUAA4IBAQAnqCwfNfEH9nyrWo7fPfgo6ZlcOMj/28WC
TLfaQo8cSazBs2eI3rYjfSpVlRLepFFbM31/MmPSTSL8MksBdsJ4nJe1sYD7yqSJ
tUFyEfvf/RpYDYGIlOh3MWhhBnHzxzYxmgcOL2RlgUu7uC6VF04wFNL13EHVCH3G
3WNXTXt9WYJCxkWzv/U3uH4Qia2/Lf9wuP1R9Z2Ke15p5zKZEAjTgdM3OxKVsmH8
9OBqctU900yow2CPGLJk7seELlTzeGeES/op35EOE5nLa+iTtvog7p3Rk/pDC5H8
lOEcki7vsA5WmDxICUkuOAJYDWPmYfC2b4gmN9TzmaWT3H75AQZq
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:19 2025 by rpki-client