Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/jW0w7_M_dtKXa21NCN7InMid0Lg.roa
File: jW0w7_M_dtKXa21NCN7InMid0Lg.roa (raw, json)
Hash identifier: O0JtJQCvlQfk5yHtG5/tqNcY5uHBGKeh2acwa33sgSM=
Subject key identifier: 8D:6D:30:EF:F3:3F:76:D2:97:6B:6D:4D:08:DE:C8:9C:C8:9D:D0:B8
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 18AE
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jW0w7_M_dtKXa21NCN7InMid0Lg.roa
Signing time: Tue 17 Mar 2026 11:17:05 +0000
ROA not before: Tue 17 Mar 2026 11:17:05 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 213705
IP address blocks: 119.59.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6318 (0x18ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 17 11:17:05 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=8D6D30EFF33F76D2976B6D4D08DEC89CC89DD0B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:75:1a:6f:be:c6:89:08:2e:25:c1:2b:a1:
9e:41:d2:f7:73:a0:75:e3:43:71:ae:b2:a0:31:54:
0b:f2:41:c2:0a:90:1c:ae:d7:b6:33:e5:93:93:3f:
56:1c:37:d6:d7:44:02:26:ea:03:8b:e8:31:f2:34:
46:63:92:37:b3:e6:02:91:a0:36:70:ce:94:9a:6e:
2c:dd:06:35:6c:01:6e:df:e7:1c:2b:c3:1d:4f:83:
13:3d:ca:d7:e4:5e:91:80:6a:ed:64:eb:28:a8:64:
b3:9c:70:ea:46:81:6f:7e:2a:2c:6a:73:af:6b:a1:
d7:5f:20:54:c3:21:0d:34:2b:04:95:5e:ab:49:42:
13:10:27:bf:7d:18:93:19:18:62:41:9f:de:80:d0:
a2:64:f3:09:63:78:7e:fe:b6:74:57:3e:e3:2b:48:
40:64:44:d8:43:37:21:8b:7b:fd:48:5c:06:42:02:
61:9c:2f:bb:fc:3e:a9:17:69:ea:b2:d0:77:08:06:
ce:9b:0c:b3:8b:09:8b:bf:0c:a1:ca:0c:79:bc:82:
83:71:e0:cf:41:c6:54:d2:d5:33:a8:17:7e:40:66:
3c:76:a6:f1:a3:13:fb:ae:09:98:ce:06:2e:e2:95:
87:17:4a:97:e7:38:7f:29:50:3e:9c:a1:7e:73:4d:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:30:EF:F3:3F:76:D2:97:6B:6D:4D:08:DE:C8:9C:C8:9D:D0:B8
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jW0w7_M_dtKXa21NCN7InMid0Lg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
94:20:19:50:bf:8a:99:3f:a6:6f:24:ca:76:24:4c:71:c6:02:
1a:ea:0f:b1:a9:30:be:0b:30:ab:31:36:76:63:5f:f8:61:f2:
ba:5e:06:4f:06:aa:8a:62:ab:2a:70:1f:8a:95:97:c6:6a:fc:
31:65:7c:8a:84:6e:0b:1f:7d:ef:8f:54:e7:5b:8e:53:84:b4:
0b:d0:53:e0:a9:35:27:ac:20:9d:ba:19:f1:ac:cd:9e:4e:2a:
c8:c5:b4:f8:c2:71:6a:11:74:d7:6d:56:e7:6f:66:52:c3:d2:
72:fd:8a:28:f9:50:2f:b3:45:e1:36:8f:a7:58:0a:f0:ed:d1:
4b:68:7a:e9:95:b2:25:50:71:f2:12:74:3b:51:c2:62:23:4e:
40:35:c0:b6:f6:24:81:a4:56:86:71:96:00:9b:73:bc:cd:88:
8b:80:f2:c0:7e:d0:82:d2:14:0f:97:ac:cd:60:66:e6:3f:ea:
3d:31:9c:85:a5:0c:34:65:5d:ce:de:11:aa:27:c4:a4:99:46:
40:3c:51:26:cb:7d:a6:60:8a:c0:09:6c:96:a2:7a:37:68:f8:
9b:75:31:78:2b:2d:c1:b4:bd:ec:24:a1:56:41:8a:91:25:64:
1b:a6:ad:d3:9e:da:8c:d4:36:a5:45:84:d1:9f:a0:83:d9:9e:
13:8a:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:16 2026 by rpki-client