Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/AaKyzBLkoz9wwV_bip3WMYSAjzc.roa
File: AaKyzBLkoz9wwV_bip3WMYSAjzc.roa (raw, json)
Hash identifier: ZjvOGM9CPcudwGBEhIDEBc1xlbmOg4cENDZgNIKGbeU=
Subject key identifier: 01:A2:B2:CC:12:E4:A3:3F:70:C1:5F:DB:8A:9D:D6:31:84:80:8F:37
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 1C7B
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/AaKyzBLkoz9wwV_bip3WMYSAjzc.roa
Signing time: Sat 07 Mar 2026 16:16:43 +0000
ROA not before: Sat 07 Mar 2026 16:16:43 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 146834
IP address blocks: 202.165.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7291 (0x1c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Mar 7 16:16:43 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=01A2B2CC12E4A33F70C15FDB8A9DD63184808F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:4c:52:66:b4:27:44:5b:36:a8:62:ba:e3:
b5:1c:e4:c3:4d:21:1c:74:c5:9f:99:ee:3a:f1:a4:
c8:65:da:17:97:44:b1:d4:07:6e:d9:e3:6c:54:5e:
e2:29:31:2a:68:ca:ef:34:9d:c3:b8:db:94:da:0e:
4c:13:4e:c4:8b:32:95:1f:eb:e0:ce:ba:bb:27:37:
79:be:a4:63:09:78:6b:2b:fa:2e:1a:f8:f1:f8:ba:
aa:cb:6e:c0:69:bd:a4:ad:8d:5f:70:25:16:ee:d9:
2d:be:0d:18:8b:2d:bc:c7:90:5b:d1:93:11:74:86:
14:f5:8c:ca:ef:f1:c3:06:4a:a6:ff:65:ad:46:5b:
ca:fc:cb:65:6d:c2:bc:fd:48:be:ad:cb:2b:ad:02:
94:96:af:81:c2:c6:91:e4:c4:66:30:dd:9e:7f:6e:
37:25:06:f1:e8:47:cc:89:50:87:df:68:2c:ef:5e:
6a:bb:84:a0:01:cb:39:c0:ff:b9:4b:e6:24:57:06:
b8:da:aa:a9:c5:f0:33:42:2e:cd:23:35:1e:03:87:
be:ad:60:8d:31:5a:34:78:e3:c7:7e:93:84:41:2d:
96:f1:18:d6:f8:ca:ee:95:94:f5:ce:dc:cf:31:49:
73:ac:1b:f9:5c:68:a6:83:10:a9:b8:35:5d:5d:82:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:B2:CC:12:E4:A3:3F:70:C1:5F:DB:8A:9D:D6:31:84:80:8F:37
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/AaKyzBLkoz9wwV_bip3WMYSAjzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.165.208.0/20
Signature Algorithm: sha256WithRSAEncryption
98:ff:c1:6a:d4:a0:e5:17:2c:42:4d:56:1e:e1:71:da:98:b1:
d9:ba:4c:d7:80:c7:33:bf:62:90:73:ce:8b:34:1a:89:b0:90:
07:3c:1f:ae:34:04:61:39:d0:ed:bb:2b:b6:77:1e:b1:d6:35:
f2:69:06:c6:8b:4b:dc:24:a7:a9:31:3b:ae:da:21:96:30:9e:
ba:ef:92:a3:06:e7:99:37:73:75:0d:ac:16:e5:6b:51:2c:fc:
ff:ed:ac:b7:9f:f7:59:36:e9:0f:d0:c9:07:0f:02:00:ff:79:
c4:fd:5f:b4:99:20:35:25:53:de:ef:e2:1e:dc:d0:d9:74:1f:
07:c5:4d:4b:e7:07:bf:29:8d:b2:e4:f8:73:03:86:9a:20:58:
23:5d:5b:70:44:5d:a3:09:91:2d:e9:71:7b:f2:26:42:4f:d2:
12:16:0c:e9:af:01:f5:32:a7:f3:ae:e2:08:73:dc:6f:e3:04:
26:d9:d9:13:1b:7b:9b:05:6c:62:60:c2:ed:10:61:c8:84:eb:
de:84:f8:56:e0:05:00:dc:37:f7:5d:c1:0e:69:f9:c3:78:0f:
82:3a:d5:c2:e6:74:e0:30:65:dc:64:cb:c6:27:d8:2e:c7:89:
04:4d:a8:ae:57:86:f6:97:94:97:82:25:e0:0c:bb:fd:f6:7a:
a3:c5:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client