Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/cfZWdPH7hQv9N-lu9tLxm3feQuw.roa
File: cfZWdPH7hQv9N-lu9tLxm3feQuw.roa (raw, json)
Hash identifier: Zsczy+HfAN9nmOzlZj+dlIaIaLcWahEmGJHwzfLYkpw=
Subject key identifier: 71:F6:56:74:F1:FB:85:0B:FD:37:E9:6E:F6:D2:F1:9B:77:DE:42:EC
Certificate issuer: /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial: 1C7A
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/cfZWdPH7hQv9N-lu9tLxm3feQuw.roa
Signing time: Sat 07 Mar 2026 16:16:43 +0000
ROA not before: Sat 07 Mar 2026 16:16:43 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 146834
IP address blocks: 116.199.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7290 (0x1c7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Validity
Not Before: Mar 7 16:16:43 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=71F65674F1FB850BFD37E96EF6D2F19B77DE42EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:ed:31:8f:11:b6:0d:e9:b8:6d:4f:99:f9:
97:3a:cd:d0:1e:13:87:35:2a:93:d6:23:9b:18:d3:
f6:1f:91:fb:90:48:8c:1d:ba:c2:67:a6:84:42:8b:
a3:96:99:b2:59:c4:ae:0a:5a:68:3c:75:7a:00:48:
8b:da:50:cf:ec:aa:12:aa:2b:37:b3:e7:0c:97:c8:
58:ed:81:a3:bc:ac:0d:77:a1:44:0e:7a:49:af:19:
37:5b:df:28:b0:a3:19:6a:fa:58:a0:38:bd:c9:08:
12:6b:0e:1a:06:10:6f:89:dc:45:a3:6d:61:ff:16:
e8:6b:7c:b8:2c:1f:80:aa:c9:6c:98:e3:69:b8:59:
c8:fe:bb:49:eb:51:06:79:6a:a8:8e:57:2d:04:18:
a7:ea:50:4e:a2:a6:e6:bf:06:07:29:55:12:95:9d:
73:47:99:2a:dc:65:71:8c:15:15:ba:57:95:34:c7:
bf:98:d2:1c:9b:22:c7:8a:d5:7d:1e:44:8b:72:f3:
03:e9:64:9e:81:36:60:12:f1:8f:e1:9e:08:24:2e:
38:85:6d:4a:21:eb:df:98:ee:dc:4e:88:59:8c:b3:
ef:f8:bc:05:1c:d9:9c:42:58:10:0f:3f:62:39:f6:
e1:0d:43:5b:09:26:b6:db:33:da:60:24:93:b4:27:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F6:56:74:F1:FB:85:0B:FD:37:E9:6E:F6:D2:F1:9B:77:DE:42:EC
X509v3 Authority Key Identifier:
keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/cfZWdPH7hQv9N-lu9tLxm3feQuw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.199.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:1d:b9:23:48:18:6a:c6:5f:40:e0:86:8e:2e:17:85:4d:5f:
e6:c4:1e:5b:78:9a:3b:15:13:83:29:86:d6:d2:ad:75:33:11:
8c:05:6c:fc:f3:27:1a:9c:9a:c7:19:76:e4:0c:45:35:c5:dd:
ce:7a:86:a0:bd:af:c7:57:f9:bf:26:c2:71:b3:32:ef:03:1c:
a5:92:45:01:e3:fb:d6:60:be:80:a1:75:3c:7e:ca:87:b7:61:
84:46:56:c5:10:84:38:d7:1c:c5:b6:55:48:b6:6d:a8:a0:07:
ec:cf:cf:87:5d:df:d5:f6:cd:8b:f2:41:ea:a3:5e:64:f4:2c:
88:94:51:2c:31:30:7e:bb:b8:9d:9c:80:6d:09:4a:98:26:2b:
30:3a:28:a6:26:ef:ac:9b:9d:25:ee:29:c5:20:59:fe:40:2f:
15:c3:30:d0:0a:92:7d:e2:ce:8d:9c:a5:ce:44:5f:75:21:57:
62:63:f8:ed:e4:59:92:10:cc:aa:0a:b3:1a:18:39:37:95:16:
b3:bf:a2:32:76:4d:d0:93:20:9d:97:25:7f:b3:72:f7:ae:97:
40:25:b6:94:63:aa:4d:74:c6:d8:c7:e2:39:da:96:ad:8f:8b:
0f:11:3f:2d:e8:a4:c4:64:af:db:a9:50:78:e0:8a:d8:74:d0:
00:7f:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:17 2026 by rpki-client