Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa
File: hoPr-9IA4xK24pWrJXMiqEmgL-8.roa (raw, json)
Hash identifier: djCXcQA76LoasQf3lEFZRM2zMYCrw8/G6HVc9HLaw70=
Subject key identifier: 86:83:EB:FB:D2:00:E3:12:B6:E2:95:AB:25:73:22:A8:49:A0:2F:EF
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 14E4
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa
Signing time: Thu 11 Sep 2025 08:18:04 +0000
ROA not before: Thu 11 Sep 2025 08:18:04 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 17621
IP address blocks: 120.136.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5348 (0x14e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: Sep 11 08:18:04 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=8683EBFBD200E312B6E295AB257322A849A02FEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:7f:f2:26:b6:56:54:ac:0a:b9:48:3a:d1:
38:d7:26:11:98:90:66:2d:c1:b5:11:c2:38:da:41:
39:0f:21:9b:a0:b5:da:2e:1d:ae:0f:8f:0e:62:f8:
2c:0e:0d:35:bf:ce:7e:d9:19:21:f9:f4:80:fc:fd:
1a:4e:ee:b1:0d:14:59:1b:67:cd:5d:ca:71:69:14:
4c:f9:f5:68:17:29:0f:ef:d3:80:04:9b:c0:f0:bb:
67:58:d8:ad:9c:04:86:d8:db:42:ca:6c:68:05:3d:
9a:83:91:40:23:c7:e7:ed:46:67:62:ad:95:ef:e0:
5a:22:0f:f7:1d:af:22:d7:a6:f4:3b:46:ac:bb:ae:
70:25:0a:a2:e4:ea:f4:85:1e:4f:77:5f:fa:3e:30:
e0:d7:95:2f:11:c2:3c:e3:c7:ae:53:70:1d:b8:dc:
25:69:b3:1f:bf:4e:4e:ab:4f:18:bc:2e:5d:d4:33:
45:99:ab:5e:98:1e:f5:3c:ad:d5:1f:36:23:61:11:
18:54:fa:3a:cf:3c:50:e5:31:9b:be:f0:4a:c0:d0:
31:94:bd:17:80:bb:de:98:12:70:50:bf:4a:f0:51:
18:9e:a0:73:2a:9b:66:53:33:1b:f3:21:19:c9:76:
da:03:8e:c9:92:fd:77:11:f8:71:89:53:6d:e3:7c:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:EB:FB:D2:00:E3:12:B6:E2:95:AB:25:73:22:A8:49:A0:2F:EF
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/hoPr-9IA4xK24pWrJXMiqEmgL-8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.136.176.0/22
Signature Algorithm: sha256WithRSAEncryption
75:58:ad:c5:c1:5b:a5:7f:ed:07:bb:0d:35:95:b4:8e:fb:1b:
de:44:02:85:48:d1:8b:e1:0e:c7:34:0d:34:b3:d2:ab:6d:80:
30:f5:5e:bd:0e:81:e8:55:d2:d6:eb:1c:99:8b:74:89:c8:f5:
1f:d5:2c:7c:3c:df:1a:f2:fe:ef:ab:26:9f:57:b5:d4:17:b4:
7e:f9:b6:39:9a:36:57:3b:86:9e:c2:6d:3f:de:8b:58:67:c1:
f0:4c:1b:54:0c:8d:30:48:78:ac:59:d9:c4:b8:1f:b2:26:81:
6d:d9:7e:29:61:8d:65:41:83:c8:e2:d9:45:72:5e:b9:47:28:
6f:78:33:d8:db:53:ae:94:71:d9:9e:eb:c2:2d:63:f7:6e:e2:
d3:a6:a0:55:27:82:9e:cb:8a:b2:d9:c6:b5:ff:2c:ad:d3:80:
31:90:e4:3a:92:d7:ef:79:55:65:ca:28:5b:e8:6a:0b:3f:79:
d3:54:10:85:83:91:04:ac:e6:8e:1a:cf:d6:3c:60:02:41:29:
3b:27:d5:0f:c9:18:0c:d7:2c:3a:3b:48:32:fa:a7:13:0a:68:
14:55:7c:a6:2d:cd:c5:fb:d4:44:53:24:49:b0:a7:df:96:d5:
98:46:70:ba:b1:52:67:4d:7b:c4:9e:0f:a0:97:d2:81:c1:89:
ca:ed:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:02 2025 by rpki-client