Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/Dvhce4lhLf4rwvjw5kRZSfRO0xQ.roa
File: Dvhce4lhLf4rwvjw5kRZSfRO0xQ.roa (raw, json)
Hash identifier: OCP30gSIo2lTt0hheLDn+VgouiABmTh0QvtLayi8ptY=
Subject key identifier: 0E:F8:5C:7B:89:61:2D:FE:2B:C2:F8:F0:E6:44:59:49:F4:4E:D3:14
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 209A
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/Dvhce4lhLf4rwvjw5kRZSfRO0xQ.roa
Signing time: Sat 13 Sep 2025 03:09:56 +0000
ROA not before: Sat 13 Sep 2025 03:09:56 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4808
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8346 (0x209a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Sep 13 03:09:56 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=0EF85C7B89612DFE2BC2F8F0E6445949F44ED314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:01:49:2a:d9:7e:b5:24:14:36:a2:cf:89:
d4:81:76:97:f4:b5:81:79:a8:a5:b6:27:f8:e6:e2:
7a:da:40:6e:73:1c:82:b8:d9:f9:e4:4b:86:95:8c:
9b:52:d5:6b:55:80:32:69:ed:71:9a:f6:bc:14:b8:
8c:e9:8f:0e:f0:00:42:d1:93:97:da:e5:ed:d3:98:
bd:cd:89:32:45:8c:dd:02:78:4e:bd:e3:95:cf:d1:
c3:d9:79:d7:6f:51:79:7e:74:3f:02:78:f9:0b:3d:
28:75:10:91:2d:a6:c1:c4:f6:d8:df:8d:fe:0d:2c:
a8:b8:60:c2:ee:af:6b:16:2b:d5:64:03:92:97:dc:
38:70:62:63:36:ee:97:28:6a:96:48:68:c8:22:c1:
3c:ec:8a:b4:9c:9c:39:c4:a1:0e:39:b5:62:d4:6c:
14:ea:16:19:e0:4f:7b:3e:c1:80:33:fb:52:52:5d:
e8:03:77:76:45:66:0e:ff:b4:34:99:0f:23:b6:b5:
87:69:a3:88:61:77:39:70:dd:26:a9:f4:7f:08:5a:
94:dd:5d:58:1d:cc:53:81:a5:90:d9:5b:3c:2a:72:
61:d5:c2:cd:2b:f9:40:17:c0:ac:48:73:2e:98:fc:
33:a8:3a:d8:84:62:08:e0:98:37:da:c9:9f:b2:03:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:5C:7B:89:61:2D:FE:2B:C2:F8:F0:E6:44:59:49:F4:4E:D3:14
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/Dvhce4lhLf4rwvjw5kRZSfRO0xQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
89:07:a2:aa:b6:59:4c:27:8a:36:b5:d9:4e:81:4a:3e:4b:84:
4a:e3:9a:a0:a9:4e:1a:ea:b9:7a:63:86:a0:79:ba:b5:e6:db:
5a:4d:4f:63:d5:cc:60:93:3f:84:a3:46:10:7f:60:13:29:7b:
de:f6:61:53:e8:84:a0:a1:80:2f:fa:1b:2e:5e:8d:37:09:a3:
56:ae:4d:fa:d2:0b:c1:ef:ad:50:10:70:ff:aa:e9:74:e8:a7:
de:7d:2e:4a:f7:79:31:87:63:a9:04:3f:7d:88:46:a9:51:da:
5f:56:de:88:aa:3e:82:07:74:8f:a1:e3:a2:db:f2:7a:6a:ac:
d8:7b:2d:ef:a5:a0:a2:32:fe:51:c8:0f:5c:5b:f3:c0:c8:49:
63:77:a0:b4:42:f0:cc:ff:fa:99:bc:ef:c2:6a:19:07:03:e8:
8b:fc:0c:16:de:b2:d5:f7:70:a7:e4:16:e3:c8:03:65:50:4a:
cb:a9:94:55:3e:fb:58:2b:60:18:8e:62:7b:8a:ac:41:f1:d3:
37:64:eb:58:54:95:37:ea:90:bf:1c:c4:76:8f:45:06:81:49:
62:38:a0:83:c6:cb:e8:1a:51:b9:d1:1f:24:50:4d:d9:b5:87:
e6:e7:8b:e0:04:bd:56:cb:6e:e8:fb:f7:2c:82:a6:b6:0b:de:
06:e7:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:14 2025 by rpki-client