Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa
File: ds1nqXRhVs8eWSasKIL1OVWE7MU.roa (raw, json)
Hash identifier: uFUub2XrejoHM+0zVXEWTSnCvrQ/oUtbRuxK0boCpCc=
Subject key identifier: 76:CD:67:A9:74:61:56:CF:1E:59:26:AC:28:82:F5:39:55:84:EC:C5
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 2190
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa
Signing time: Fri 29 Aug 2025 09:05:28 +0000
ROA not before: Fri 29 Aug 2025 09:05:28 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4808
IP address blocks: 117.50.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8592 (0x2190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Aug 29 09:05:28 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=76CD67A9746156CF1E5926AC2882F5395584ECC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:02:6e:65:58:85:11:d9:08:6d:ea:3f:e4:
8e:2c:02:8f:cb:a3:ca:0d:e1:d3:34:ef:05:1d:72:
66:27:8d:23:2f:2e:b8:f3:0b:51:cb:7b:13:06:5a:
0a:c5:e2:22:0d:94:79:ad:ec:5f:e2:69:c6:bc:78:
b9:7a:3e:22:d8:1d:d4:68:2c:a7:04:7a:a1:b4:14:
e3:c2:1d:0e:10:13:8f:70:bf:ae:94:e3:65:fe:d7:
b9:e1:4a:da:7a:40:ba:cb:e7:1b:41:7e:6a:ed:6b:
33:63:b3:ec:8a:e6:75:9b:b4:0d:36:a9:fe:ae:8e:
19:20:da:45:82:b0:ee:94:de:2c:91:0c:06:57:0c:
51:bd:28:c4:62:b9:ba:20:1f:2c:a3:fa:21:7d:89:
c6:60:8e:7b:b9:65:0c:42:48:50:5b:97:c4:3b:e2:
ef:79:e9:27:90:aa:e4:2a:7e:0c:a6:1d:dc:94:05:
cd:9f:89:db:85:ef:6f:47:f3:03:ed:99:68:84:f1:
2d:49:8e:e4:bf:b3:43:cf:6b:5e:36:06:39:a4:73:
f2:c1:a6:61:6d:b6:14:28:d5:2d:91:f8:5c:8d:29:
7e:aa:ce:80:b9:34:2e:1f:9e:82:16:a9:d8:76:1f:
ae:26:65:5c:8a:ef:a1:a2:da:0e:f1:c3:60:6d:3d:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:67:A9:74:61:56:CF:1E:59:26:AC:28:82:F5:39:55:84:EC:C5
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/ds1nqXRhVs8eWSasKIL1OVWE7MU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.50.192.0/19
Signature Algorithm: sha256WithRSAEncryption
33:ac:92:3d:a5:e5:f7:fd:f8:ae:49:5f:0e:3c:71:e8:72:ef:
d4:7a:0f:a2:72:ef:38:7a:e8:3b:b0:aa:64:6f:44:c7:a9:3c:
cc:9c:89:60:dc:ab:09:84:a9:ce:a1:ad:4b:b7:46:21:53:22:
aa:f8:d7:79:4f:1a:88:64:7c:7e:1a:66:c7:bd:4a:c2:12:23:
46:fb:2d:0c:e8:2d:74:51:b1:af:0a:24:67:12:75:cd:a3:af:
5b:7b:95:af:b1:3a:9d:7b:f7:fd:15:81:71:68:78:14:ab:c9:
0a:c0:34:94:ed:0b:bf:b6:a8:a6:ca:89:6d:96:54:87:8b:a2:
d0:79:39:6c:a7:4a:b7:d1:1f:18:e2:9b:50:d4:a4:61:6d:94:
e8:4b:35:0e:58:e7:c3:96:a6:53:23:7f:e0:03:0a:dc:21:15:
3f:2f:38:fc:c9:32:bd:a9:b7:51:34:9f:d8:28:53:7a:f7:8a:
57:5b:ac:e8:b9:fb:6b:6e:e8:e2:72:01:7b:4b:37:70:a5:b2:
92:b2:c7:b4:ae:15:c7:e1:a1:9d:24:23:3a:b2:1e:d1:ce:62:
42:01:66:80:a7:ee:9b:83:0f:7b:30:25:51:4a:38:b1:ed:14:
d3:a0:a1:6f:5b:c0:25:4d:16:27:2a:62:97:38:de:e9:d4:83:
4e:db:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:53 2025 by rpki-client