Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa
File: 6lgNokrHquzfMY4o0Ue-xILR_FM.roa (raw, json)
Hash identifier: bnnFnI4gkAVdY9+fYPbtHDBHofbyD67V5npIc05vTNI=
Subject key identifier: EA:58:0D:A2:4A:C7:AA:EC:DF:31:8E:28:D1:47:BE:C4:82:D1:FC:53
Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial: 1CAB
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa
Signing time: Wed 27 Aug 2025 06:17:42 +0000
ROA not before: Wed 27 Aug 2025 06:17:42 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 18118
IP address blocks: 219.72.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7339 (0x1cab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Validity
Not Before: Aug 27 06:17:42 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=EA580DA24AC7AAECDF318E28D147BEC482D1FC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:74:4a:a3:1f:11:be:6d:b0:2b:fe:41:d7:
ac:93:e2:ca:2d:83:80:91:b8:3f:8e:93:24:28:c8:
77:c4:05:72:6c:2a:8f:cc:d5:73:59:cc:18:1a:7a:
22:94:a6:54:b5:1b:de:c0:50:a5:31:6c:c1:a6:9e:
cf:4f:c7:26:c3:4a:75:f8:27:4b:25:2a:eb:e4:9a:
8f:18:ca:e0:68:51:72:27:14:af:2b:4b:93:2f:44:
db:b7:a5:74:66:50:d7:7d:c5:a5:a0:47:93:56:b4:
34:cd:1f:a3:1d:d2:ee:11:11:a1:ad:25:c4:dc:2e:
d9:e5:16:c3:91:70:94:c9:61:d7:91:5c:66:2f:c6:
02:ea:ae:aa:3b:9e:ef:bd:d7:a7:46:98:f4:6d:48:
31:da:7a:96:d3:93:69:21:3c:8f:9a:24:0c:34:85:
37:d8:fc:e5:98:b6:53:a4:83:22:2e:e0:a1:80:9c:
c9:e8:bf:07:9a:5b:28:fd:79:ff:42:a4:a0:e4:19:
9e:7a:2a:ee:9c:04:03:26:4b:57:3a:c6:bf:29:23:
60:03:bc:37:35:46:83:d2:b3:c5:76:b0:cb:9f:64:
ab:3d:f0:db:e6:0f:18:13:36:af:1c:3a:50:a5:86:
d6:fc:ab:94:52:a6:ca:3e:e9:cf:72:4c:5b:36:00:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:0D:A2:4A:C7:AA:EC:DF:31:8E:28:D1:47:BE:C4:82:D1:FC:53
X509v3 Authority Key Identifier:
keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/6lgNokrHquzfMY4o0Ue-xILR_FM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:ca:71:f0:a0:8a:54:d4:a7:20:a3:1c:c2:67:59:64:9c:74:
17:57:d4:d9:44:d6:f4:62:bb:00:6f:66:f8:c2:4c:b7:08:c8:
cf:60:fd:29:86:3a:eb:3f:a0:6f:35:5e:5a:03:73:35:3e:23:
02:d3:31:01:2a:57:57:d2:27:20:ba:08:77:6f:d7:99:3e:86:
2b:c6:4d:42:02:be:19:6b:cd:17:12:39:81:a2:e0:03:84:27:
bc:1c:23:e9:53:bc:17:3c:c2:93:65:bd:62:5b:ed:fa:b6:5b:
fe:bc:41:5d:48:11:34:ac:44:3f:b2:b4:56:45:84:f8:5a:3c:
35:b4:ed:d3:a3:41:b6:12:bf:80:ff:af:0e:c4:24:f5:81:36:
34:be:b0:db:c5:c9:aa:1a:91:99:f7:20:49:88:25:0d:ac:10:
ee:66:e8:46:d2:b6:39:d2:f2:02:15:3b:32:8f:95:f8:4d:4c:
91:dd:96:bc:46:44:b5:7d:ee:84:d7:95:ce:d1:ac:5b:1e:c1:
17:cc:78:03:6c:f5:51:1f:d8:22:ad:ab:43:05:a8:7d:9f:50:
12:68:d0:d8:93:46:18:11:7b:86:ec:ec:16:18:04:7c:93:ed:
46:31:b1:f7:ea:04:97:d9:e1:d7:28:dd:a7:d7:b3:9b:a1:28:
95:71:5e:2a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4
QzFERTE5NDc0MDM1Q0JFQTY3ODA1NEI2RDk0RjVBRkE1MzM2MTAeFw0yNTA4Mjcw
NjE3NDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVBNTgwREEyNEFDN0FB
RUNERjMxOEUyOEQxNDdCRUM0ODJEMUZDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9hXRKox8Rvm2wK/5B16yT4sotg4CRuD+OkyQoyHfEBXJsKo/M
1XNZzBgaeiKUplS1G97AUKUxbMGmns9PxybDSnX4J0slKuvkmo8YyuBoUXInFK8r
S5MvRNu3pXRmUNd9xaWgR5NWtDTNH6Md0u4REaGtJcTcLtnlFsORcJTJYdeRXGYv
xgLqrqo7nu+916dGmPRtSDHaepbTk2khPI+aJAw0hTfY/OWYtlOkgyIu4KGAnMno
vweaWyj9ef9CpKDkGZ56Ku6cBAMmS1c6xr8pI2ADvDc1RoPSs8V2sMufZKs98Nvm
DxgTNq8cOlClhtb8q5RSpso+6c9yTFs2ABXPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6lgNokrHquzfMY4o0Ue+xILR/FMwHwYDVR0jBBgwFoAULowd4ZR0A1y+pngF
S22U9a+lM2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3
L0xvd2Q0WlIwQTF5LXBuZ0ZTMjJVOWEtbE0yRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTG93ZDRaUjBBMXktcG5nRlMyMlU5YS1sTTJFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTg3LzZsZ05va3JIcXV6Zk1Z
NG8wVWUteElMUl9GTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwDbSDANBgkqhkiG9w0BAQsFAAOCAQEAQ8px8KCKVNSnIKMcwmdZZJx0F1fU2UTW
9GK7AG9m+MJMtwjIz2D9KYY66z+gbzVeWgNzNT4jAtMxASpXV9InILoId2/XmT6G
K8ZNQgK+GWvNFxI5gaLgA4QnvBwj6VO8FzzCk2W9Ylvt+rZb/rxBXUgRNKxEP7K0
VkWE+Fo8NbTt06NBthK/gP+vDsQk9YE2NL6w28XJqhqRmfcgSYglDawQ7mboRtK2
OdLyAhU7Mo+V+E1Mkd2WvEZEtX3uhNeVztGsWx7BF8x4A2z1UR/YIq2rQwWofZ9Q
EmjQ2JNGGBF7huzsFhgEfJPtRjGx9+oEl9nh1yjdp9ezm6EolXFeKg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:34:04 2025 by rpki-client