Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/yJk1f5Mevsp5D9k7LSoBiXoWCOo.roa
File: yJk1f5Mevsp5D9k7LSoBiXoWCOo.roa (raw, json)
Hash identifier: 00gGhHDP6tCNoOIX6UREpwXzWG+9IigAI4MrAKoPTi4=
Subject key identifier: C8:99:35:7F:93:1E:BE:CA:79:0F:D9:3B:2D:2A:01:89:7A:16:08:EA
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1E41
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/yJk1f5Mevsp5D9k7LSoBiXoWCOo.roa
Signing time: Wed 18 Mar 2026 01:16:12 +0000
ROA not before: Wed 18 Mar 2026 01:16:12 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 4134
IP address blocks: 180.223.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7745 (0x1e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Mar 18 01:16:12 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=C899357F931EBECA790FD93B2D2A01897A1608EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:5f:f0:6e:60:8c:4b:02:6a:a3:43:5a:0b:
77:cd:00:ff:d0:21:27:b5:a5:f5:35:41:57:92:fb:
1c:b7:38:60:80:d6:a0:5e:eb:72:7b:d0:8d:fb:7a:
eb:70:bf:c0:23:c6:65:49:5f:a9:51:dc:91:3a:10:
20:61:53:9c:95:6e:fa:0e:36:4f:6b:9a:ac:78:f7:
84:e7:18:1d:e3:7f:6e:95:06:14:25:cb:eb:cc:c5:
1b:87:0a:50:d7:ec:3c:99:0f:b0:1c:bf:a0:77:43:
a3:f2:55:c2:67:c7:a3:ef:af:31:76:80:03:ef:17:
0b:6c:05:e3:14:e2:d4:34:0b:99:09:95:cf:d9:93:
63:32:2b:25:b5:21:54:30:17:98:94:92:81:03:ec:
a2:fe:f8:33:70:87:97:4a:a0:4f:94:96:f2:17:c6:
77:d5:42:1d:87:21:0e:84:94:01:9c:94:cc:7f:69:
87:f8:bc:ed:ed:e1:9a:85:88:7d:7e:89:73:a5:75:
44:60:99:0b:85:5f:8b:7f:57:6b:23:03:de:18:0d:
36:f7:6b:22:4a:83:e7:05:5b:ec:d4:90:6c:3e:77:
83:08:aa:3d:45:29:4e:f3:2f:d9:4b:f8:8e:28:50:
90:39:75:64:70:55:df:4e:99:29:d5:64:ac:89:ac:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:99:35:7F:93:1E:BE:CA:79:0F:D9:3B:2D:2A:01:89:7A:16:08:EA
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/yJk1f5Mevsp5D9k7LSoBiXoWCOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/18
Signature Algorithm: sha256WithRSAEncryption
52:04:21:38:ac:5c:6a:d1:59:18:d1:68:09:30:e8:fe:c1:9c:
fe:41:f8:d6:31:fb:6c:bf:4d:37:43:a8:dd:61:3a:86:1a:f8:
ff:77:5b:4c:68:3b:f5:d7:66:60:24:c3:da:7e:40:f1:62:7b:
ea:05:09:2d:50:f0:ff:d9:c2:a4:c8:d3:83:96:f4:51:2c:70:
67:54:97:a6:53:45:35:10:36:5f:96:a1:fc:a6:73:87:82:0a:
f4:79:da:c5:b7:0d:47:5b:ad:ee:ce:ed:23:32:25:18:66:d3:
ec:ec:69:a1:af:00:f1:e6:fd:e5:03:29:a3:24:0a:10:2c:fa:
f9:de:ab:5c:50:3c:fc:17:bc:2e:af:70:88:63:e3:89:7d:06:
be:d5:75:16:68:94:d0:73:29:2e:ce:d5:eb:3a:51:49:d4:96:
6a:b1:48:ce:0b:ed:d8:0c:9a:e0:92:5d:c5:2d:64:2d:dc:98:
09:ae:90:ee:e7:ca:73:01:53:b9:bd:1d:38:cd:41:5f:1a:33:
83:83:eb:74:78:38:97:9a:ca:b1:44:e2:b3:b6:62:ad:b1:3a:
f9:5b:25:a8:03:fb:3f:74:0d:48:31:2f:53:25:70:bc:69:7b:
eb:ae:27:06:63:7a:c4:0d:f3:68:7a:86:6e:f4:a1:e8:09:73:
b6:f6:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:23:47 2026 by rpki-client