Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/42LqmN-0ADCnqITnRDv_wru15gw.roa
File: 42LqmN-0ADCnqITnRDv_wru15gw.roa (raw, json)
Hash identifier: LySQcbwmKcQbvx8AqTVOw0sqbLfTeFsiGd8Z9FDb184=
Subject key identifier: E3:62:EA:98:DF:B4:00:30:A7:A8:84:E7:44:3B:FF:C2:BB:B5:E6:0C
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 18AF
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/42LqmN-0ADCnqITnRDv_wru15gw.roa
Signing time: Tue 17 Mar 2026 11:17:05 +0000
ROA not before: Tue 17 Mar 2026 11:17:05 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 213705
IP address blocks: 119.59.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6319 (0x18af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 17 11:17:05 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=E362EA98DFB40030A7A884E7443BFFC2BBB5E60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:51:fd:a4:68:61:81:95:9b:44:13:9a:76:
ca:92:89:51:91:63:8a:ed:8c:f4:cb:a0:c8:7f:de:
5e:0b:f6:e3:f4:6b:90:d3:a2:e0:60:7e:b2:ef:fb:
15:2b:89:82:9a:c6:7a:64:fe:9c:0d:54:31:11:50:
20:74:0f:22:7c:b8:5d:22:38:02:7f:da:16:2f:06:
fd:8b:58:39:19:69:e5:7d:65:ec:26:36:0c:48:d9:
9c:8e:c5:4a:4b:fa:dd:c5:88:fe:70:dd:04:7d:f0:
aa:34:1c:87:79:0f:ba:98:8e:36:56:af:3f:44:e0:
66:26:d7:dd:7e:d6:ad:94:23:3c:48:6f:4d:cd:24:
a6:2d:63:30:45:46:7e:58:7f:6d:01:10:5d:34:d0:
d2:cc:ac:b0:c8:8a:83:3a:3a:6e:dd:fa:74:a8:bc:
3c:d5:a2:2a:4d:1d:9c:db:c0:06:7e:2c:7b:93:97:
a8:92:b1:52:f7:cf:43:c1:cf:a6:e5:f9:b6:d6:4a:
49:a8:13:ac:56:55:6c:e2:f2:25:2f:2c:d1:56:95:
f2:00:58:cd:10:23:1e:35:4c:e3:0e:b9:75:90:2b:
b9:c1:68:de:ff:ee:4b:0b:40:de:37:e8:98:d2:62:
7b:78:c9:22:4f:e2:a9:06:c0:82:b9:aa:4a:e9:16:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:EA:98:DF:B4:00:30:A7:A8:84:E7:44:3B:FF:C2:BB:B5:E6:0C
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/42LqmN-0ADCnqITnRDv_wru15gw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.132.0/22
Signature Algorithm: sha256WithRSAEncryption
71:7c:63:b3:77:73:d4:64:bf:63:f0:81:55:84:34:77:64:1b:
f8:f8:de:a7:bb:a5:10:73:c8:7a:db:98:1e:8a:33:52:5b:55:
b0:50:e1:6e:38:ca:22:ca:a6:06:fd:ce:63:fe:3f:0e:24:46:
18:3d:9c:15:17:b2:64:28:01:84:7f:ce:44:94:d1:74:26:fb:
16:95:1e:92:3d:ae:3d:c2:e7:ea:69:7e:ed:45:82:60:12:bd:
6e:43:c0:c0:98:b9:11:65:59:90:18:62:1a:9d:e0:de:2f:71:
85:92:70:a0:4c:27:26:14:3a:03:d7:34:1a:59:4c:69:7b:f9:
e8:58:e8:eb:20:ba:a5:9a:74:a6:86:61:ab:8c:97:69:18:48:
be:5e:72:8e:f9:a1:64:91:b3:9c:99:7e:ab:c7:e3:73:40:20:
2c:ef:cb:0b:d8:11:8a:98:ef:87:88:47:f0:77:31:bc:3a:86:
de:8d:a7:09:c2:aa:61:55:69:82:fd:98:1d:dc:2f:19:b0:50:
ef:04:1e:25:cb:84:4c:e1:12:ce:01:70:00:75:11:64:55:47:
d7:05:42:5a:8d:9d:39:75:e8:e0:0e:4a:1d:44:61:9f:10:02:
de:d5:b1:a2:cb:d5:c8:81:9a:db:b8:05:25:d1:b4:01:0b:56:
fe:f4:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client