Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/2BIPNxj5-fxzFF-USeyigPu2rSw.roa
File: 2BIPNxj5-fxzFF-USeyigPu2rSw.roa (raw, json)
Hash identifier: mWJH5inTb8mK3oBUBhdNzwDPLkB1LCV4soJbCf3LWx4=
Subject key identifier: D8:12:0F:37:18:F9:F9:FC:73:14:5F:94:49:EC:A2:80:FB:B6:AD:2C
Certificate issuer: /CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Certificate serial: 0EBD
Authority key identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/2BIPNxj5-fxzFF-USeyigPu2rSw.roa
Signing time: Wed 04 Mar 2026 09:18:51 +0000
ROA not before: Wed 04 Mar 2026 09:18:51 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 137753
IP address blocks: 1.118.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3773 (0xebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Validity
Not Before: Mar 4 09:18:51 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D8120F3718F9F9FC73145F9449ECA280FBB6AD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:a9:2e:cc:d2:7e:49:9e:e6:87:97:23:dd:
63:28:75:a2:a0:a3:bd:48:bb:b8:cb:30:31:e8:fa:
df:ca:2d:ed:de:31:39:1c:23:e7:e5:92:ab:4e:4f:
fc:93:95:e8:cb:9a:67:2a:a1:7a:65:7e:bf:9a:70:
7a:d2:99:9e:b7:63:d4:35:ce:5a:c2:d2:af:49:54:
0f:ba:79:18:ab:4b:61:6b:28:23:60:87:03:19:08:
e7:30:b3:d6:4c:22:7d:f1:5b:cc:e0:e8:d3:ef:40:
aa:a5:fe:c5:73:85:38:96:47:30:35:08:b1:99:cd:
aa:20:fa:be:15:be:8d:78:ef:02:fd:32:19:3a:41:
46:5c:36:f0:75:30:7c:49:05:78:2c:75:ef:b6:81:
89:65:0e:2a:7e:00:07:3b:f0:c4:cf:37:e9:05:f9:
88:74:df:0f:43:97:57:c0:59:63:ce:b4:df:b3:b3:
2a:65:13:87:44:4b:70:48:22:4e:f2:2c:20:33:ac:
81:00:79:d6:91:f8:29:cd:3f:9a:80:68:4d:a6:89:
37:5a:d1:97:28:45:f5:07:41:b5:6c:6a:97:46:df:
c3:39:1d:3f:dd:15:57:46:f1:b8:54:1c:e2:38:e3:
71:99:85:ff:59:41:f5:35:33:b7:86:3f:13:b5:b5:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:0F:37:18:F9:F9:FC:73:14:5F:94:49:EC:A2:80:FB:B6:AD:2C
X509v3 Authority Key Identifier:
keyid:A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/2BIPNxj5-fxzFF-USeyigPu2rSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.118.64.0/19
Signature Algorithm: sha256WithRSAEncryption
95:4c:c1:9f:b9:53:f9:49:6d:ab:3d:ef:88:de:27:bb:d8:79:
23:a0:22:ca:f5:c3:cb:16:6c:53:de:2c:7e:70:6e:e1:72:ab:
49:a2:93:d3:36:e9:94:7a:81:87:8e:2e:b6:3c:8d:23:a7:71:
d4:a4:78:85:aa:b3:59:92:44:fa:93:dc:9d:d2:86:6f:c3:fe:
1f:7d:fe:41:0b:4a:04:57:26:42:4d:df:71:25:08:0b:7d:f5:
5e:d6:1e:a8:dd:9d:37:6a:3f:4a:87:13:07:97:77:8d:9c:c1:
82:d5:b4:8e:d2:86:07:9a:b3:32:b0:d2:90:1b:0a:3c:46:ac:
30:bb:0a:ac:05:01:a2:cf:1c:66:e5:1a:57:f0:0d:a2:00:f8:
23:81:8c:3e:86:bf:0f:ae:27:56:21:ce:10:c6:b0:2c:fe:cd:
fb:bd:6a:09:84:04:db:0b:88:a6:07:5c:b9:22:dc:a3:17:ce:
4a:2b:a2:47:e7:66:92:56:95:5c:8f:a2:d8:95:ce:16:d8:09:
71:c9:53:78:70:f5:f0:42:19:5f:95:a5:62:6b:18:64:2e:ab:
24:17:94:89:68:66:79:36:f6:0c:4f:d3:f5:12:1f:2a:3a:1d:
22:b4:1b:14:1c:58:cb:65:38:60:4d:a7:6d:ba:02:e9:e5:5e:
bb:00:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:27:24 2026 by rpki-client