Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/uJfhWDEc16HcHG0TXn_RSJRH734.roa
File: uJfhWDEc16HcHG0TXn_RSJRH734.roa (raw, json)
Hash identifier: oDRx3Ccl2FR99H742CkBZ1WcMO+dWd4QKXk1y8yHa2g=
Subject key identifier: B8:97:E1:58:31:1C:D7:A1:DC:1C:6D:13:5E:7F:D1:48:94:47:EF:7E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1871
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/uJfhWDEc16HcHG0TXn_RSJRH734.roa
Signing time: Thu 05 Mar 2026 12:17:09 +0000
ROA not before: Thu 05 Mar 2026 12:17:09 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 19793
IP address blocks: 124.42.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6257 (0x1871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 5 12:17:09 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=B897E158311CD7A1DC1C6D135E7FD1489447EF7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:17:8a:c0:fa:7c:b1:e1:d9:f2:38:8e:42:
37:39:8c:d8:fe:5a:9d:45:e9:1a:f1:1e:89:9b:e8:
a0:21:53:88:e1:c8:89:30:65:39:10:1c:59:ad:5b:
fd:d0:bf:36:0e:5a:3c:f3:53:a6:d3:0c:c2:60:3c:
67:74:0f:73:30:29:a7:0b:43:db:ef:4f:23:f7:5e:
34:e8:d6:0f:11:ea:e4:80:5b:a7:3b:49:9a:c5:9e:
bd:7c:93:ca:63:2a:7e:f0:46:c8:19:42:3b:0d:04:
17:55:23:72:59:65:6f:41:60:ad:46:be:fa:39:ae:
2e:39:8e:ba:54:bf:a2:79:4b:cf:7e:36:6d:84:f9:
9b:4f:fb:07:80:0b:64:a2:40:67:17:be:1b:46:58:
5d:b0:31:15:6f:bb:0d:48:73:1e:5d:4e:f5:63:f2:
d1:d0:28:5e:55:4c:58:27:a8:47:d6:5a:aa:4a:e4:
75:d5:4f:11:31:49:1a:f0:12:33:86:79:81:00:62:
d9:a9:9d:48:4b:3f:85:08:89:ef:e3:a5:03:25:73:
24:61:53:a9:48:a0:d9:f5:ba:24:56:ca:de:33:ab:
ed:be:6e:aa:f1:70:f6:de:da:37:f2:a2:60:e3:70:
1e:31:08:8e:3f:ea:5f:11:c1:e9:3e:cd:59:19:95:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:E1:58:31:1C:D7:A1:DC:1C:6D:13:5E:7F:D1:48:94:47:EF:7E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/uJfhWDEc16HcHG0TXn_RSJRH734.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.42.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:46:69:29:29:60:63:00:6a:78:8f:8a:7b:e0:24:40:8f:1c:
2f:fc:08:68:18:cb:cc:23:26:f0:51:60:0a:70:6a:03:fa:a5:
7f:6e:84:fc:aa:7c:5a:2d:41:93:6b:56:d1:0e:73:4f:40:f2:
0c:7b:f5:38:9b:2e:43:e3:ab:ea:83:e8:4a:fc:16:57:31:8c:
10:6e:11:04:ae:b3:b2:04:a9:2f:51:0a:3a:6f:34:48:82:82:
ac:c3:41:64:b7:53:c6:d7:8c:5e:b2:c0:7c:f5:40:30:20:8a:
0e:eb:eb:69:9c:78:76:b6:a6:e0:e0:af:f2:4c:dc:01:d5:38:
fa:65:b2:be:f0:a7:dc:a5:e9:00:62:e2:58:fa:37:b6:ba:0e:
e6:9a:e1:0f:ec:df:07:a3:bf:53:f7:6a:19:86:89:86:78:c0:
5e:27:a9:1b:08:f5:bb:56:e9:18:53:35:d1:f2:cc:94:57:cf:
cb:9f:2c:c8:ef:3c:24:0d:4a:30:d3:19:35:c4:6a:4e:a9:d2:
f7:2a:ce:03:4e:6d:fa:b2:95:29:c6:54:71:8b:1f:8f:ec:1f:
83:fb:7b:47:a7:92:0b:f6:e5:31:12:27:bf:91:a5:de:6f:5c:
80:8d:1c:f0:6b:3e:95:da:72:f5:22:05:bb:41:14:af:ce:3b:
11:e5:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client