Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/gzhRWYIQIZRCvH3ygrdTSNijACU.roa
File: gzhRWYIQIZRCvH3ygrdTSNijACU.roa (raw, json)
Hash identifier: fCf98p0UpvZBEfDn5Zni096QYIVTu8un4ERhE55YJWU=
Subject key identifier: 83:38:51:59:82:10:21:94:42:BC:7D:F2:82:B7:53:48:D8:A3:00:25
Certificate issuer: /CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Certificate serial: 0EC8
Authority key identifier: A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/gzhRWYIQIZRCvH3ygrdTSNijACU.roa
Signing time: Fri 06 Mar 2026 07:20:49 +0000
ROA not before: Fri 06 Mar 2026 07:20:49 +0000
ROA not after: Sat 09 Jan 2027 08:23:18 +0000
asID: 137753
IP address blocks: 1.118.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A261858370BA6D3979593B509BE5FEB89FF69ABE
Validity
Not Before: Mar 6 07:20:49 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=833851598210219442BC7DF282B75348D8A30025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:13:ba:41:6c:ff:98:ba:5d:ff:6f:68:9d:
2c:3b:b2:5d:c1:18:40:2c:5a:ac:26:cf:2e:76:8a:
b8:2e:0c:64:bb:02:33:1e:8a:9a:ee:d5:20:fb:a7:
3f:26:68:67:04:d8:fb:dc:a0:76:3b:a1:34:df:ac:
e9:36:ff:57:0a:cf:91:58:fc:0c:97:7e:a0:9e:ea:
e3:9d:a9:bd:01:f8:79:ff:49:3a:83:f0:3f:97:3d:
7d:d7:6f:33:f1:71:c8:e4:87:87:09:6c:4f:eb:42:
f3:2b:0d:e2:40:61:ea:01:27:45:00:62:53:0b:da:
c4:6b:ed:61:97:65:69:ea:cb:43:d8:4d:87:f6:c2:
bc:ee:f7:c3:7c:4f:18:23:e8:3d:06:38:71:08:65:
e8:76:08:67:49:11:ab:6c:31:c1:0a:b9:d9:98:fe:
6d:dd:8f:37:17:26:90:11:78:c5:11:39:55:fe:be:
71:fd:4d:52:af:73:7b:50:60:c6:41:fc:3e:51:6b:
a5:d1:b9:d9:02:af:33:1d:86:cf:3e:62:14:c8:80:
13:48:7b:92:d0:22:70:d5:e1:63:a5:b2:7d:93:21:
8c:87:9d:6b:c5:d8:c7:06:34:23:30:b0:df:88:7c:
b5:41:68:2c:6d:15:fc:fb:80:fe:23:f5:4d:aa:05:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:38:51:59:82:10:21:94:42:BC:7D:F2:82:B7:53:48:D8:A3:00:25
X509v3 Authority Key Identifier:
keyid:A2:61:85:83:70:BA:6D:39:79:59:3B:50:9B:E5:FE:B8:9F:F6:9A:BE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/omGFg3C6bTl5WTtQm-X-uJ_2mr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/omGFg3C6bTl5WTtQm-X-uJ_2mr4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/gzhRWYIQIZRCvH3ygrdTSNijACU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.118.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:62:03:e4:8d:a3:8b:31:6a:2e:ea:db:59:b1:b6:ff:be:e8:
ab:6a:8c:71:0e:34:62:70:00:8a:3c:57:f3:a6:07:3c:72:5e:
87:6b:7c:34:4e:62:f7:94:d3:e1:89:56:35:eb:7f:35:c5:5c:
9b:bc:c6:01:cf:36:40:dc:85:68:00:ad:e9:49:6b:a3:bd:cc:
81:d4:48:45:c7:d6:24:3a:d2:63:d0:3c:07:df:10:ab:68:70:
63:d5:97:f2:92:57:9f:dd:7c:3c:8e:71:28:6d:f7:d4:c3:53:
42:9c:64:86:b8:99:e6:c5:2a:e9:4d:29:f3:6c:dd:01:b1:63:
63:51:f5:63:45:c5:3c:b7:9c:1e:f1:a1:13:9d:e7:e4:8c:e3:
cb:0d:af:df:82:90:74:bc:97:51:f2:8b:0e:0e:ee:2e:e5:46:
1a:65:b9:25:15:e3:92:7c:e5:37:aa:57:fc:50:29:83:3c:0f:
57:46:e0:b4:45:ed:dd:30:c9:0d:8b:f8:19:9c:d7:e1:c8:7c:
aa:6a:f9:6f:67:f6:e5:38:24:1d:d6:61:22:73:cd:19:7e:f5:
97:9c:67:2a:40:e8:3c:78:db:d2:c6:ef:f3:d7:27:65:fe:1e:
7b:c5:dd:e1:fb:c6:83:86:b2:2c:5a:70:9b:d5:39:98:77:43:
94:76:ed:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:27:24 2026 by rpki-client