Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa
File: df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa (raw, json)
Hash identifier: ofJX+uTbB9SRnzmr1dUgEW+yUuWxDAYktAQChsfNRhM=
Subject key identifier: 75:FD:29:2E:66:7B:9A:1C:4B:CD:92:D8:CC:47:D4:09:4B:3F:15:0D
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21C6
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa
Signing time: Sat 13 Sep 2025 03:08:58 +0000
ROA not before: Sat 13 Sep 2025 03:08:58 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 137718
IP address blocks: 118.145.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8646 (0x21c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:08:58 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=75FD292E667B9A1C4BCD92D8CC47D4094B3F150D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:e0:d0:91:4a:f9:ec:eb:dd:79:64:57:33:
7b:04:e7:70:45:5e:b5:ef:ea:bf:6d:69:70:2c:36:
8a:44:3e:34:49:06:a3:e5:b6:8d:66:35:d2:f0:1f:
93:ef:17:ab:35:7c:b4:56:86:d5:72:d7:36:37:c7:
a6:b1:ef:c5:19:0b:c0:69:94:18:c5:e1:d6:a1:e9:
19:f1:17:30:c0:bb:61:f7:71:7a:52:f2:35:c6:51:
07:cb:be:2b:b1:96:26:9e:8c:c1:b1:99:d2:d4:9d:
34:4c:a2:86:6e:47:e9:08:1c:0b:ed:b1:e9:55:3f:
4e:4c:2a:08:88:b1:0a:92:31:16:d6:d4:57:34:26:
51:f9:5d:e9:c6:c6:18:14:6a:a3:e8:60:bd:4d:b0:
14:30:fa:63:1f:9d:00:bf:2e:29:2b:b2:6a:67:15:
18:93:69:1d:64:19:34:9b:fb:ca:9e:db:0e:b8:07:
26:c1:89:41:72:14:1e:5e:cc:b6:09:c2:49:28:b1:
fa:3e:1e:45:5c:86:93:74:22:a2:9d:07:19:6f:d6:
88:fb:91:24:25:75:e3:83:eb:39:34:3d:e6:76:1d:
20:cb:9b:15:68:fe:73:be:53:c7:a1:f4:77:72:0b:
ac:37:85:e7:24:b6:a5:29:4a:9c:c3:6f:3f:d3:e3:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:29:2E:66:7B:9A:1C:4B:CD:92:D8:CC:47:D4:09:4B:3F:15:0D
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.145.32.0/19
Signature Algorithm: sha256WithRSAEncryption
53:df:bf:a2:3c:fe:f7:8b:95:6c:83:69:28:0c:2f:d5:e3:52:
ba:13:17:ea:9b:0f:7c:a9:61:f5:44:12:f0:e7:54:ca:df:d5:
d3:8f:a4:9b:41:2d:35:5b:6b:6d:4c:6a:8b:c3:48:4c:ea:0c:
68:ee:f8:3e:f5:fc:be:ed:09:0a:d6:a3:16:15:ea:cd:f1:5c:
46:b6:c9:86:a3:e5:1f:52:6f:89:1f:d6:09:a4:6c:d1:e3:60:
2e:7e:ce:43:79:8e:96:58:58:5d:02:e7:da:64:16:ea:28:a7:
a6:c5:08:df:bb:c3:b9:5d:01:25:bf:5d:a9:54:7c:c2:61:a1:
d4:6a:2d:4c:13:d1:43:6d:a6:2a:51:c6:78:19:55:10:81:fc:
70:8d:ad:ac:af:bd:92:e4:31:8f:b1:bb:b3:2b:05:e1:fe:b2:
18:6c:69:30:b2:be:63:2b:35:6e:69:08:cb:0a:38:21:45:3c:
de:d7:79:c0:7a:09:c8:81:d0:33:26:ed:8f:c7:b5:91:25:c6:
fe:00:45:c6:3e:32:88:b4:19:e5:6a:4d:5e:1c:8e:c4:72:1d:
ca:eb:1d:f0:ed:59:27:83:74:a0:2a:73:26:da:c3:f9:58:a5:
5f:43:80:85:cd:93:59:96:80:88:21:00:e3:37:05:7b:17:68:
d1:8f:a2:c7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTA5MTMw
MzA4NThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDc1RkQyOTJFNjY3QjlB
MUM0QkNEOTJEOENDNDdENDA5NEIzRjE1MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvmuDQkUr57OvdeWRXM3sE53BFXrXv6r9taXAsNopEPjRJBqPl
to1mNdLwH5PvF6s1fLRWhtVy1zY3x6ax78UZC8BplBjF4dah6RnxFzDAu2H3cXpS
8jXGUQfLviuxliaejMGxmdLUnTRMooZuR+kIHAvtselVP05MKgiIsQqSMRbW1Fc0
JlH5XenGxhgUaqPoYL1NsBQw+mMfnQC/LikrsmpnFRiTaR1kGTSb+8qe2w64BybB
iUFyFB5ezLYJwkkosfo+HkVchpN0IqKdBxlv1oj7kSQldeOD6zk0PeZ2HSDLmxVo
/nO+U8eh9HdyC6w3hecktqUpSpzDbz/T4/jDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUdf0pLmZ7mhxLzZLYzEfUCUs/FQ0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvZGYwcExtWjdtaHhM
elpMWXpFZlVDVXNfRlEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXaRIDANBgkqhkiG9w0BAQsFAAOCAQEAU9+/ojz+94uVbINpKAwv1eNSuhMX
6psPfKlh9UQS8OdUyt/V04+km0EtNVtrbUxqi8NITOoMaO74PvX8vu0JCtajFhXq
zfFcRrbJhqPlH1JviR/WCaRs0eNgLn7OQ3mOllhYXQLn2mQW6iinpsUI37vDuV0B
Jb9dqVR8wmGh1GotTBPRQ22mKlHGeBlVEIH8cI2trK+9kuQxj7G7sysF4f6yGGxp
MLK+Yys1bmkIywo4IUU83td5wHoJyIHQMybtj8e1kSXG/gBFxj4yiLQZ5WpNXhyO
xHIdyusd8O1ZJ4N0oCpzJtrD+VilX0OAhc2TWZaAiCEA4zcFexdo0Y+ixw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:34:04 2025 by rpki-client