Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa
File: P4rrPSUpBszXlm5a4ExpKwVWwRA.roa (raw, json)
Hash identifier: ZmlZSlxLhhUBsDGQVPtr6Pb52LCMNPCzFq61HL7eshc=
Subject key identifier: 3F:8A:EB:3D:25:29:06:CC:D7:96:6E:5A:E0:4C:69:2B:05:56:C1:10
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 14E6
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa
Signing time: Thu 11 Sep 2025 08:18:04 +0000
ROA not before: Thu 11 Sep 2025 08:18:04 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 211.144.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5350 (0x14e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Sep 11 08:18:04 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3F8AEB3D252906CCD7966E5AE04C692B0556C110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:86:61:34:12:ad:ad:ce:46:3e:ec:84:b0:
e1:47:9c:5e:f6:90:50:8c:76:7b:ec:52:03:9c:1c:
d4:6e:36:fe:47:78:c6:bf:17:ca:9c:14:34:71:97:
14:60:aa:80:00:e3:78:76:4b:1a:17:d3:4e:e7:51:
5f:f3:2d:f6:e6:c8:b0:d8:5f:d8:4b:ac:20:7e:f8:
57:44:22:90:eb:20:3d:31:64:f1:b7:97:6f:f2:b9:
0b:b9:cf:e0:f0:16:9f:b3:4c:b4:f0:c0:46:c0:39:
b0:eb:e3:a9:ae:1a:a5:26:bd:83:03:d0:42:12:d3:
08:b9:4f:ea:87:3b:d6:63:0a:59:7a:6f:b1:a6:a8:
95:f5:2b:9d:11:a5:29:64:a1:b6:f3:73:8c:30:9d:
ea:68:86:c7:17:5f:9e:f3:e3:4c:a8:b4:76:9c:b1:
0e:04:ce:57:82:2f:16:c6:99:83:bc:52:90:93:08:
5f:f5:fa:2c:89:7c:d6:24:cf:51:6c:22:f9:f2:d1:
e3:b0:92:0a:ae:57:d2:23:e5:c3:71:89:35:c1:1f:
1d:66:9e:73:60:cf:4a:0e:36:54:ea:03:bf:39:6d:
2d:6c:dd:43:da:e9:a6:a1:9b:06:11:80:cd:40:cd:
a1:31:78:6d:45:fc:70:16:0c:13:35:23:57:23:29:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8A:EB:3D:25:29:06:CC:D7:96:6E:5A:E0:4C:69:2B:05:56:C1:10
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/P4rrPSUpBszXlm5a4ExpKwVWwRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.144.192.0/20
Signature Algorithm: sha256WithRSAEncryption
de:0e:1e:70:90:61:5d:c2:67:ba:53:90:ea:5a:4d:c4:69:97:
9b:b1:e3:8a:5d:59:67:65:ef:c8:c1:88:cb:3e:10:34:62:56:
de:1e:a2:cf:01:e4:73:c5:99:d5:d4:7c:41:05:48:86:6b:93:
55:3d:3d:5e:7d:ec:43:16:bf:05:36:91:e6:c4:70:4d:d6:09:
41:e5:63:82:cf:c8:01:a0:1b:52:e1:b1:d7:da:53:fb:da:d7:
ee:a7:61:42:40:b3:97:e9:54:0c:b1:89:98:88:2a:05:45:4d:
0b:c8:62:10:fe:76:91:ee:ae:4a:af:47:e1:06:26:a6:6a:94:
77:a9:b3:06:08:93:28:9a:70:e8:d5:38:17:dd:07:50:c6:9f:
cc:77:14:01:d6:1e:c9:03:af:6d:56:5a:a9:13:27:21:96:a1:
89:ed:f5:46:31:69:c3:f3:e3:df:b3:7c:00:cb:41:27:cd:e2:
31:8b:5f:43:a3:f9:4a:c6:8a:80:dc:34:9d:8e:bd:b7:5b:93:
61:d6:68:93:88:58:4b:a7:12:c3:91:de:07:02:fb:e1:74:fb:
9e:a8:b3:36:1d:f8:41:31:ea:d2:27:ce:da:b6:9d:7a:56:ce:
4e:d0:ed:03:c7:2d:cc:70:ed:76:a7:e9:e9:ae:a5:d0:0d:22:
cc:4d:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:21 2025 by rpki-client