Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1082/1BaPXImToIuFK4BWNNtuYSr1xSs.roa
File: 1BaPXImToIuFK4BWNNtuYSr1xSs.roa (raw, json)
Hash identifier: 0kFs+yiHRiw9WM1kz8pmSH14HDb/suhbncCkEWRjlzg=
Subject key identifier: D4:16:8F:5C:89:93:A0:8B:85:2B:80:56:34:DB:6E:61:2A:F5:C5:2B
Certificate issuer: /CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Certificate serial: 17D1
Authority key identifier: 03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/1BaPXImToIuFK4BWNNtuYSr1xSs.roa
Signing time: Tue 14 Oct 2025 03:16:49 +0000
ROA not before: Tue 14 Oct 2025 03:16:49 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 134765
IP address blocks: 43.254.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6097 (0x17d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03C2468111EA1C54EF8B3CCDEFAE516C309A6EC8
Validity
Not Before: Oct 14 03:16:49 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=D4168F5C8993A08B852B805634DB6E612AF5C52B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:b7:5e:14:e9:71:35:fc:00:ec:c9:02:fd:
93:4a:cb:88:78:6a:cb:a0:09:94:2d:dc:e0:aa:59:
97:a3:f8:58:27:87:b7:b8:83:1f:02:c3:e0:52:3b:
a5:45:14:55:ac:b3:92:8f:5b:7e:f6:19:6b:ae:47:
b6:75:72:09:5a:ba:bc:41:16:f8:0a:27:9d:a4:85:
e3:53:f7:24:bf:5f:0b:18:e0:76:92:f0:be:6a:9c:
a8:8c:11:2b:93:8e:62:66:d9:9a:68:96:d8:40:5c:
75:ba:df:43:55:26:72:00:ef:2e:23:30:a0:fc:d5:
df:0b:3c:e7:80:03:ff:f6:19:76:c4:6f:f6:d9:a4:
00:2d:03:6a:96:f1:05:46:93:6e:a9:08:cb:df:1e:
ca:24:04:41:29:35:34:75:1a:15:31:1b:a2:48:10:
23:e4:c6:5b:60:22:6a:cc:57:5f:d6:29:ea:d2:44:
9d:52:f7:22:50:bd:1c:63:98:94:8b:ba:c2:79:2b:
dd:9a:20:88:fa:e9:e8:ce:38:a3:ab:9a:2c:e5:c1:
49:da:fb:05:c4:d5:78:d2:9d:ad:81:43:a3:fd:9d:
8e:5e:e8:60:98:e7:96:8a:51:42:90:8a:74:b3:f7:
30:0f:ec:10:df:43:81:dc:34:98:59:b3:ad:aa:3b:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:8F:5C:89:93:A0:8B:85:2B:80:56:34:DB:6E:61:2A:F5:C5:2B
X509v3 Authority Key Identifier:
keyid:03:C2:46:81:11:EA:1C:54:EF:8B:3C:CD:EF:AE:51:6C:30:9A:6E:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/A8JGgRHqHFTvizzN765RbDCabsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8JGgRHqHFTvizzN765RbDCabsg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1082/1BaPXImToIuFK4BWNNtuYSr1xSs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.252.0/22
Signature Algorithm: sha256WithRSAEncryption
09:e7:06:ee:7f:76:0f:04:91:09:ae:77:38:68:a3:a9:a5:28:
68:b3:7a:7d:f1:95:da:85:62:94:98:e4:16:cb:f0:ca:d9:91:
9b:65:24:0b:97:28:5e:eb:d8:0c:7b:c8:b3:e5:0d:04:c5:28:
1f:f6:09:5f:96:6e:91:e5:7d:4a:bb:f2:ee:87:e7:8a:26:d6:
29:44:ce:26:b9:77:5b:30:0d:7b:49:f2:00:ce:89:f8:b7:c4:
79:87:f5:b8:66:cc:34:28:d2:5f:de:a5:2b:e2:cb:ac:ee:15:
ee:11:4f:d8:40:d9:39:34:3f:10:94:9d:44:b7:03:a4:c0:e7:
57:13:cc:7a:12:15:2c:33:d8:54:a0:42:6b:40:45:b7:d8:45:
ef:17:6d:83:26:27:f1:1d:d5:c2:76:92:18:d9:4b:04:d7:86:
47:40:a0:06:4a:18:26:1e:28:98:60:35:6a:e3:09:11:bb:25:
71:e0:89:ae:e4:79:88:20:91:29:0b:44:17:89:06:65:10:75:
a4:65:52:7a:be:83:b0:cd:45:b2:67:3f:bf:dd:7e:ed:36:1b:
71:d2:f3:de:f2:b4:7c:11:d7:cb:c6:64:f7:97:40:4f:8b:84:
8d:8e:6a:f6:75:5c:9a:34:dd:b3:55:f1:06:23:d9:9e:f9:33:
58:e5:d4:a6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICF9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDND
MjQ2ODExMUVBMUM1NEVGOEIzQ0NERUZBRTUxNkMzMDlBNkVDODAeFw0yNTEwMTQw
MzE2NDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ0MTY4RjVDODk5M0Ew
OEI4NTJCODA1NjM0REI2RTYxMkFGNUM1MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/obdeFOlxNfwA7MkC/ZNKy4h4asugCZQt3OCqWZej+Fgnh7e4
gx8Cw+BSO6VFFFWss5KPW372GWuuR7Z1cglaurxBFvgKJ52kheNT9yS/XwsY4HaS
8L5qnKiMESuTjmJm2ZpolthAXHW630NVJnIA7y4jMKD81d8LPOeAA//2GXbEb/bZ
pAAtA2qW8QVGk26pCMvfHsokBEEpNTR1GhUxG6JIECPkxltgImrMV1/WKerSRJ1S
9yJQvRxjmJSLusJ5K92aIIj66ejOOKOrmizlwUna+wXE1XjSna2BQ6P9nY5e6GCY
55aKUUKQinSz9zAP7BDfQ4HcNJhZs62qO1zTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU1BaPXImToIuFK4BWNNtuYSr1xSswHwYDVR0jBBgwFoAUA8JGgRHqHFTvizzN
765RbDCabsgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTA4
Mi9BOEpHZ1JIcUhGVHZpenpONzY1UmJEQ2Fic2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0E4SkdnUkhxSEZUdml6ek43NjVSYkRDYWJzZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwODIvMUJhUFhJbVRvSXVG
SzRCV05OdHVZU3IxeFNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv+/DANBgkqhkiG9w0BAQsFAAOCAQEACecG7n92DwSRCa53OGijqaUoaLN6
ffGV2oVilJjkFsvwytmRm2UkC5coXuvYDHvIs+UNBMUoH/YJX5ZukeV9Srvy7ofn
iibWKUTOJrl3WzANe0nyAM6J+LfEeYf1uGbMNCjSX96lK+LLrO4V7hFP2EDZOTQ/
EJSdRLcDpMDnVxPMehIVLDPYVKBCa0BFt9hF7xdtgyYn8R3VwnaSGNlLBNeGR0Cg
BkoYJh4omGA1auMJEbslceCJruR5iCCRKQtEF4kGZRB1pGVSer6DsM1Fsmc/v91+
7TYbcdLz3vK0fBHXy8Zk95dAT4uEjY5q9nVcmjTds1XxBiPZnvkzWOXUpg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:51:45 2025 by rpki-client