Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa
File: xqMngYF6o_FDcv3kBmsCMk11U9Y.roa (raw, json)
Hash identifier: MSt24a56MCTma7VAqromKvi19uCWmTVWhlSJ8fVLNcY=
Subject key identifier: C6:A3:27:81:81:7A:A3:F1:43:72:FD:E4:06:6B:02:32:4D:75:53:D6
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 21E0
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa
Signing time: Sat 13 Sep 2025 03:09:04 +0000
ROA not before: Sat 13 Sep 2025 03:09:04 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 137718
IP address blocks: 180.184.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8672 (0x21e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Sep 13 03:09:04 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=C6A32781817AA3F14372FDE4066B02324D7553D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:e7:22:c1:73:81:ad:92:4d:6e:9a:5c:63:
85:53:c0:c0:89:75:8f:fd:22:0c:ee:6c:61:46:b2:
55:14:94:ff:57:64:34:de:cf:8c:15:99:4e:2a:39:
bb:14:3f:2d:32:a2:b9:8b:4e:52:2b:c0:bd:60:47:
af:28:f0:1f:97:ac:c0:66:2a:5a:7a:06:f4:5e:3d:
19:19:98:46:e9:96:6f:2a:1a:bc:f6:02:02:c1:93:
32:53:15:ea:b0:c5:97:a7:d4:85:e6:04:59:7a:4d:
6f:e6:ea:f4:8a:b9:d6:e6:4f:33:5b:83:e3:69:34:
da:83:10:96:2a:ea:dd:1f:17:8e:a5:bf:cf:01:83:
25:8c:14:71:fa:b5:20:62:06:86:40:71:7a:74:2d:
37:c7:8f:d9:4f:4b:3b:09:fd:bd:51:c5:a2:3f:3a:
62:fc:10:37:f6:90:ea:3e:75:49:51:c4:06:a4:ff:
4b:dc:e1:bb:bd:bc:da:92:10:e0:d2:e2:5f:c1:a9:
ab:89:cd:b1:ae:23:7b:ec:2e:bf:1b:6c:b8:fd:3e:
ef:1e:47:bb:d3:ba:bf:3e:04:88:0f:a0:a7:dc:7c:
d3:32:de:17:b4:e1:3a:9f:d6:1a:1c:00:a7:57:80:
ee:e1:67:13:35:df:3e:b2:ef:f7:2d:c2:e9:a2:d7:
62:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:27:81:81:7A:A3:F1:43:72:FD:E4:06:6B:02:32:4D:75:53:D6
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/xqMngYF6o_FDcv3kBmsCMk11U9Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.184.184.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:7f:14:2b:a1:a1:c4:93:c9:97:4c:98:22:c6:3a:1a:b1:1c:
b5:f6:2b:dc:07:a6:3a:e5:11:73:07:af:7e:e6:02:ba:0b:93:
87:91:33:45:68:9b:c6:b0:e6:e1:f3:ba:83:b2:97:27:1f:26:
b1:f4:14:3d:18:28:79:05:12:b1:3c:25:ce:7c:7d:ce:6e:bd:
d8:b3:e6:aa:0a:a9:7a:ac:ac:cf:79:0a:f3:d8:e2:e4:96:34:
38:eb:9b:f5:37:b2:95:67:7a:c0:ba:be:e4:0c:d7:af:ce:cd:
5d:79:d5:d8:40:d5:92:3f:5a:60:4e:92:15:15:e3:60:02:d1:
79:b0:e4:fb:aa:1e:6c:25:4f:43:c1:92:ad:30:94:be:93:18:
32:e1:95:47:66:0f:74:02:0d:2c:60:b2:f9:c9:b1:b3:45:a4:
3a:da:c4:1e:21:32:d5:80:99:e0:8a:52:28:5c:55:5a:56:5a:
c0:be:74:91:e5:a1:0e:95:ba:99:84:92:b9:93:38:d0:ee:c1:
05:8b:f4:46:f3:a2:4b:e4:ce:7a:fa:11:38:02:24:0b:50:a0:
c6:f3:23:27:14:4d:f1:89:9d:e7:32:3c:c0:c3:a4:6c:d9:3d:
01:e4:ec:58:82:5b:45:70:66:4c:ec:10:25:46:fb:49:e2:84:
62:b7:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:34:05 2025 by rpki-client