Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa
File: CZs_Ni5V2gSCjdV78asso1QzGco.roa (raw, json)
Hash identifier: z+5V/AgcfNiocZ4OSlh0JDUtnLm9sPDAWh31QNuUcM0=
Subject key identifier: 09:9B:3F:36:2E:55:DA:04:82:8D:D5:7B:F1:AB:2C:A3:54:33:19:CA
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21A4
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa
Signing time: Sat 06 Sep 2025 08:04:30 +0000
ROA not before: Sat 06 Sep 2025 08:04:30 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 136958
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8612 (0x21a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 6 08:04:30 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=099B3F362E55DA04828DD57BF1AB2CA3543319CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:25:68:08:50:a3:a4:70:b5:ae:2a:39:f2:
7b:01:cb:bc:fe:f2:c0:82:5d:d9:29:47:86:08:8c:
0d:da:28:4d:d5:26:eb:ac:89:82:86:4f:bc:8c:82:
a1:99:c4:b5:58:b3:0a:21:e2:f6:77:2d:89:4a:fd:
b6:ed:43:43:18:7f:72:9d:59:9a:ca:c7:f7:e6:ae:
3f:e6:01:91:25:06:fa:64:ea:9a:93:09:9a:76:8b:
fb:8f:de:58:61:5c:a5:a7:da:08:c6:b6:a0:c3:0a:
b0:2d:bf:79:86:c8:1b:95:72:7b:77:96:e4:d9:ee:
f3:11:76:dc:09:3d:72:b5:74:38:7c:c9:d7:66:db:
ae:90:d1:5b:d4:32:37:3d:58:9a:63:88:73:c7:a6:
b7:11:3d:a7:93:58:c9:b3:c0:6a:e3:ca:db:50:78:
07:31:c2:61:ec:3a:97:04:a3:ec:e8:e0:61:9e:7e:
e2:b6:35:3c:b5:9e:d0:28:cc:bd:ae:b0:f1:f5:1c:
aa:8e:ce:da:cb:d0:c7:80:47:77:ae:02:5f:f8:b2:
12:d9:8b:9d:b6:62:82:45:a4:7c:94:d5:51:64:17:
b4:1a:6d:0a:d5:8f:8e:c9:30:5b:bd:27:6a:45:ff:
d4:82:c1:69:c4:2b:e1:b4:c4:7b:0f:e3:24:aa:d5:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9B:3F:36:2E:55:DA:04:82:8D:D5:7B:F1:AB:2C:A3:54:33:19:CA
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/CZs_Ni5V2gSCjdV78asso1QzGco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
12:bd:a0:1b:46:15:20:e7:c3:69:5f:99:7d:50:18:bb:2b:ec:
b9:e4:ee:d4:35:1c:b4:c7:af:4d:d3:0b:a8:c4:10:b7:85:a7:
e8:1f:13:38:c5:51:ea:62:ae:66:ef:65:62:4b:33:5f:4c:f3:
c1:14:b7:73:77:41:8e:af:8c:b7:07:cf:ac:6f:36:9a:78:1c:
dc:94:65:3f:c6:07:a2:9a:42:91:36:e8:95:cb:5c:d2:34:07:
a9:76:10:90:b9:19:f5:10:a0:92:06:87:44:96:57:4a:1b:d3:
d2:96:68:34:05:29:64:51:d6:2e:72:b7:20:80:76:21:5d:a1:
5a:0b:22:eb:38:47:3d:5e:ee:ce:5f:a1:f4:64:84:fb:e3:03:
0f:fc:ec:f9:66:42:d0:2d:22:85:69:7a:19:da:18:c2:47:cd:
1f:ed:67:6e:82:0e:8c:ea:f0:66:bd:e5:02:0b:e4:2b:ae:71:
0b:db:83:e3:f3:e5:9f:fa:3b:ae:cf:8f:4c:3d:8f:e2:1d:9e:
81:10:92:52:ae:73:bb:c4:79:c8:d4:61:47:b2:c1:b5:e9:49:
e0:ca:3e:96:bd:a3:4f:e0:bb:1e:42:66:5f:21:64:23:5b:01:
8f:2b:f6:1a:7d:f7:00:ac:ca:7e:66:db:59:8b:18:88:e5:4c:
ae:92:4b:51
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MDYw
ODA0MzBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDA5OUIzRjM2MkU1NURB
MDQ4MjhERDU3QkYxQUIyQ0EzNTQzMzE5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ByVoCFCjpHC1rio58nsBy7z+8sCCXdkpR4YIjA3aKE3VJuus
iYKGT7yMgqGZxLVYswoh4vZ3LYlK/bbtQ0MYf3KdWZrKx/fmrj/mAZElBvpk6pqT
CZp2i/uP3lhhXKWn2gjGtqDDCrAtv3mGyBuVcnt3luTZ7vMRdtwJPXK1dDh8yddm
266Q0VvUMjc9WJpjiHPHprcRPaeTWMmzwGrjyttQeAcxwmHsOpcEo+zo4GGefuK2
NTy1ntAozL2usPH1HKqOztrL0MeAR3euAl/4shLZi522YoJFpHyU1VFkF7QabQrV
j47JMFu9J2pF/9SCwWnEK+G0xHsP4ySq1XfRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCZs/Ni5V2gSCjdV78asso1QzGcowHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvQ1pzX05pNVYyZ1ND
amRWNzhhc3NvMVF6R2NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAEr2gG0YVIOfDaV+ZfVAYuyvsueTu
1DUctMevTdMLqMQQt4Wn6B8TOMVR6mKuZu9lYkszX0zzwRS3c3dBjq+MtwfPrG82
mngc3JRlP8YHoppCkTbolctc0jQHqXYQkLkZ9RCgkgaHRJZXShvT0pZoNAUpZFHW
LnK3IIB2IV2hWgsi6zhHPV7uzl+h9GSE++MDD/zs+WZC0C0ihWl6GdoYwkfNH+1n
boIOjOrwZr3lAgvkK65xC9uD4/Pln/o7rs+PTD2P4h2egRCSUq5zu8R5yNRhR7LB
telJ4Mo+lr2jT+C7HkJmXyFkI1sBjyv2Gn33AKzKfmbbWYsYiOVMrpJLUQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:40:24 2025 by rpki-client