Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa
File: 9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa (raw, json)
Hash identifier: d7L3XIHDR4TUXtb6XUZbNFGDJkyjahNy6E7vA1H4a6Y=
Subject key identifier: F4:B5:10:A0:EB:FA:D1:B1:50:10:16:C9:D1:16:6B:53:FA:91:F6:A6
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1650
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa
Signing time: Mon 08 Sep 2025 09:24:02 +0000
ROA not before: Mon 08 Sep 2025 09:24:02 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 13335
IP address blocks: 42.201.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5712 (0x1650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Sep 8 09:24:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=F4B510A0EBFAD1B1501016C9D1166B53FA91F6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:4f:96:af:43:f2:01:25:32:00:b3:bf:b4:
47:5e:a6:70:43:ce:fb:c0:ed:26:58:b7:ba:6b:28:
af:a3:67:12:8a:e3:7a:ce:2c:44:07:1f:85:0d:be:
71:c2:e4:d7:65:e2:21:be:a7:8f:c0:94:99:b6:33:
c5:ef:d6:59:3e:d9:8a:da:2f:18:5c:17:58:11:66:
e4:8a:db:62:dd:dd:98:56:2d:bf:42:40:53:a2:30:
44:eb:73:03:88:73:6e:18:de:9b:74:da:5f:99:b1:
07:01:c0:3d:e3:af:86:f6:7c:ce:1d:34:96:b1:31:
65:7a:e4:fb:9f:5b:86:c9:4d:ff:c3:4c:4c:f4:a4:
fc:8b:ec:8f:5f:3f:53:64:16:f9:9a:a9:0c:11:97:
f9:df:dd:4a:9d:23:e6:6d:5a:e8:6e:2b:57:af:d6:
ba:f0:16:8a:0a:07:66:ca:a4:d3:cc:12:78:12:7d:
05:e9:22:9f:d3:62:a5:49:e5:d9:b9:6a:1a:2e:10:
39:d0:78:3e:8b:37:ca:37:f1:4f:9b:bc:7c:4a:22:
de:f2:0a:e2:99:71:39:77:49:e5:50:98:3f:ab:33:
71:dc:53:5d:ff:b6:3a:c7:45:d2:06:13:45:73:eb:
78:07:63:0c:f4:8c:2a:30:0b:10:dc:54:27:c9:a6:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:10:A0:EB:FA:D1:B1:50:10:16:C9:D1:16:6B:53:FA:91:F6:A6
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/9LUQoOv60bFQEBbJ0RZrU_qR9qY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.8.0/21
Signature Algorithm: sha256WithRSAEncryption
02:fb:70:ff:e4:01:b8:23:a4:2b:89:52:3b:a6:f7:c1:28:36:
f6:f2:c7:31:9b:3c:ae:59:9b:e1:48:94:f8:23:8b:96:34:d9:
91:7e:f4:be:45:a9:e6:d1:91:46:36:64:bc:2d:d8:cc:6b:bf:
62:6b:b3:04:02:80:4f:df:40:8e:a1:81:62:21:9f:97:ce:d4:
e9:97:d3:e7:d9:24:74:bb:0b:86:a6:62:65:f9:79:71:0b:56:
16:0b:d2:c4:1a:07:ad:6d:14:1c:52:e5:62:af:48:0e:7b:6b:
f2:e9:2c:93:51:ac:63:03:57:b8:14:21:7f:ff:bf:2c:d2:91:
1a:48:81:eb:78:af:df:78:db:37:15:e5:c7:b9:44:78:8e:c7:
02:04:b9:8c:60:2a:42:da:45:f7:05:be:46:ae:ca:5a:56:76:
4a:06:f5:24:49:ca:de:25:e5:95:83:b5:20:9a:f6:6f:0b:45:
d2:3e:8f:b2:4a:44:41:d0:1f:5f:c9:32:0d:17:fc:79:1f:59:
87:35:77:32:92:19:e8:88:6f:c1:6c:96:c7:4f:fd:59:93:9f:
98:af:6e:d6:c6:33:d6:56:b9:7c:77:d0:52:82:51:eb:d3:89:
ff:66:1a:b1:9d:98:86:22:77:bc:c9:2a:fd:33:74:7d:68:52:
58:46:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:31 2025 by rpki-client