Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa
File: oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa (raw, json)
Hash identifier: bDn12Zd/NbB2xKis/YT4LYypbfU7J4IDkQPIsGdXDeQ=
Subject key identifier: A1:06:67:E5:99:1E:68:31:09:DE:45:6A:61:67:E4:86:D0:51:64:1C
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 1651
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa
Signing time: Mon 08 Sep 2025 09:24:02 +0000
ROA not before: Mon 08 Sep 2025 09:24:02 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 13335
IP address blocks: 42.201.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Sep 8 09:24:02 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=A10667E5991E683109DE456A6167E486D051641C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:db:6a:d1:89:1f:d4:37:cf:a2:39:3b:ad:
12:ec:5b:19:a0:3a:7a:b2:71:14:19:f8:a4:14:32:
8e:be:f6:ac:fd:ee:72:f0:77:b2:18:e9:3c:4c:15:
3f:9a:c6:ad:e3:8c:49:ae:1c:bb:ac:f2:fb:e4:3f:
13:d6:96:d5:ad:4f:ac:91:0c:84:0f:6a:e2:99:23:
22:42:53:2c:a4:58:f9:dd:16:ec:54:92:ea:1b:92:
32:66:ec:00:67:c9:87:a5:c4:63:cb:ef:a5:8f:a1:
2a:b7:67:66:46:4f:67:7a:34:5d:68:ff:74:50:ef:
e8:30:45:20:b7:d2:ca:80:cb:7b:c9:15:4c:30:87:
69:7e:8e:8a:b0:34:b5:0e:7f:3f:97:8b:d9:4b:6a:
6c:67:c3:41:ae:4d:19:ba:5e:ec:ce:68:23:ff:d4:
2c:fc:34:a9:54:84:d2:04:eb:b7:e4:5a:1f:f9:8d:
fb:64:52:e2:20:c2:1d:a3:e9:6f:97:a4:87:e1:31:
82:95:bf:42:e4:57:7c:3d:38:67:1a:67:a0:a1:57:
46:cb:6c:de:43:4e:e9:03:5d:ad:67:86:b8:b3:7c:
49:1c:5d:42:de:fc:9a:c5:39:7c:67:63:3b:f7:ce:
e2:b5:c4:2a:1d:eb:b9:16:c5:ab:86:63:74:e4:13:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:67:E5:99:1E:68:31:09:DE:45:6A:61:67:E4:86:D0:51:64:1C
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/oQZn5ZkeaDEJ3kVqYWfkhtBRZBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.16.0/20
Signature Algorithm: sha256WithRSAEncryption
65:07:99:be:af:a6:82:8e:ff:61:ff:64:90:83:f7:cb:85:ed:
eb:7b:cf:fb:cb:0c:e6:52:5f:80:2a:97:fb:d1:8c:b8:a4:9f:
ea:b5:83:28:21:9b:1c:25:17:d6:71:83:df:b4:d9:51:21:5a:
7f:3b:b8:ac:af:31:46:4c:d1:c3:fc:16:47:07:05:48:94:78:
06:5a:32:c8:e6:fd:2d:93:db:db:48:be:03:e3:36:e7:f0:77:
99:62:bc:be:bf:76:60:e3:6a:f9:9c:19:ea:d6:c1:d1:d9:e8:
03:d9:28:79:fc:58:8d:6a:cc:07:2a:3f:49:ff:f9:07:1a:56:
50:d8:60:b4:bb:ac:fb:b8:f9:0f:76:2d:e1:0a:38:8c:00:90:
ae:15:2a:24:db:13:d8:25:21:99:ce:3b:85:36:77:3f:13:9f:
a8:36:b7:00:e2:4a:59:a8:dd:f4:ec:2b:ed:ce:94:69:e0:7e:
f5:f1:94:84:39:1b:33:55:c3:eb:f6:c2:04:51:7c:8e:1e:f0:
33:72:8c:0c:6b:b5:e6:e2:08:a1:28:74:ab:37:f8:4d:38:b7:
3d:8e:e6:f8:30:88:86:69:93:75:c4:5d:5e:29:fa:07:2b:09:
3b:8e:ab:87:d3:9d:c8:22:19:57:23:88:53:0a:9e:d0:4c:3c:
12:6a:22:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:29 2025 by rpki-client