Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa
File: 3utxk1tgtYo6xDcnTDWIBqyNtow.roa (raw, json)
Hash identifier: Z6TXaegC/+4UdxNY6jIZkPqsj2iHG/OlQPrAafdFzcY=
Subject key identifier: DE:EB:71:93:5B:60:B5:8A:3A:C4:37:27:4C:35:88:06:AC:8D:B6:8C
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 20B4
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa
Signing time: Sat 13 Sep 2025 03:05:51 +0000
ROA not before: Sat 13 Sep 2025 03:05:51 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4515
IP address blocks: 123.49.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8372 (0x20b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Sep 13 03:05:51 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=DEEB71935B60B58A3AC437274C358806AC8DB68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:3a:45:a6:05:58:26:3d:da:23:03:e2:be:
74:c6:b3:c0:a2:10:ca:a9:5c:de:07:86:0d:9a:7a:
15:0b:60:75:3f:9f:82:d3:91:31:19:c9:02:f1:4c:
81:85:a0:7e:5b:99:85:a8:f3:f4:b3:fd:fc:c5:95:
40:b4:2a:93:0c:1a:16:ad:a8:ff:fe:b8:9b:d3:3e:
79:98:cd:bd:da:42:2e:34:a8:32:8b:e2:e5:6f:6e:
c1:44:9a:2b:89:63:77:0f:41:55:65:2c:12:34:46:
75:9e:f4:d2:8f:49:a9:ab:75:4e:aa:88:f9:1f:de:
05:6f:f0:31:22:99:ff:d2:23:bf:2e:31:d5:0f:9e:
8c:7f:44:34:83:bd:1d:c0:df:e5:d4:13:3f:8c:d3:
70:4b:aa:b8:6d:52:13:df:fa:04:b8:90:0e:96:6c:
b0:bc:41:b7:50:7f:d4:00:f3:7e:11:18:40:01:0a:
08:68:2c:4e:d9:26:a3:10:86:8b:7a:c9:99:d5:1d:
25:bd:c9:ed:05:76:74:da:2b:e7:ae:45:af:a4:64:
c4:9e:37:70:ae:43:95:5f:6e:58:1c:f5:8c:9d:bc:
35:23:ba:cb:0d:a1:61:7d:47:1d:95:72:97:64:54:
1a:9f:ef:e3:7a:50:d2:27:71:9a:63:76:21:c8:1d:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:71:93:5B:60:B5:8A:3A:C4:37:27:4C:35:88:06:AC:8D:B6:8C
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/3utxk1tgtYo6xDcnTDWIBqyNtow.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6c:52:da:f4:ec:83:e1:e2:2d:8a:a2:97:72:05:54:44:08:
5f:a0:4d:6a:19:ab:eb:fe:aa:c2:7b:06:71:0f:21:66:12:c3:
7e:90:6b:d5:14:21:2d:8c:cd:ea:e5:eb:76:d6:50:d4:bf:42:
2c:8a:63:cb:0a:49:0a:7a:28:fb:04:7f:39:ad:8d:76:bc:42:
37:ba:cc:40:15:89:1b:af:1a:c4:d5:d5:3b:bf:0a:32:30:ce:
6f:3e:76:50:7a:67:1c:80:dc:2b:1c:f5:a9:4d:02:a6:9d:1d:
e0:06:11:1d:7c:61:d4:a0:3d:86:fc:58:b0:b6:c9:8b:8c:5e:
31:35:28:ac:db:2d:87:34:ec:9d:2c:f3:f9:72:d5:63:18:dd:
1b:77:ef:c7:9a:02:fc:04:48:37:71:2e:19:68:b3:9a:1c:85:
7e:da:4a:ae:1c:b0:06:42:1b:db:ef:8d:59:e7:2b:20:54:4f:
a8:b8:48:97:07:7a:d6:f2:c0:7a:88:15:a5:1a:c4:dc:03:fe:
3a:d7:22:fa:92:f2:b8:37:66:58:1d:fe:86:bd:4d:78:fc:45:
5a:b3:97:a8:cb:91:1f:0f:b0:ce:ec:fb:87:4d:d8:0b:01:fc:
df:90:96:0a:01:7d:49:e7:01:b8:5a:a1:f2:80:64:85:a1:f6:
cc:df:10:b1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICILQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4
ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yNTA5MTMw
MzA1NTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERFRUI3MTkzNUI2MEI1
OEEzQUM0MzcyNzRDMzU4ODA2QUM4REI2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOcjpFpgVYJj3aIwPivnTGs8CiEMqpXN4Hhg2aehULYHU/n4LT
kTEZyQLxTIGFoH5bmYWo8/Sz/fzFlUC0KpMMGhatqP/+uJvTPnmYzb3aQi40qDKL
4uVvbsFEmiuJY3cPQVVlLBI0RnWe9NKPSamrdU6qiPkf3gVv8DEimf/SI78uMdUP
nox/RDSDvR3A3+XUEz+M03BLqrhtUhPf+gS4kA6WbLC8QbdQf9QA834RGEABCgho
LE7ZJqMQhot6yZnVHSW9ye0FdnTaK+euRa+kZMSeN3CuQ5Vfblgc9YydvDUjussN
oWF9Rx2VcpdkVBqf7+N6UNIncZpjdiHIHSQ/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU3utxk1tgtYo6xDcnTDWIBqyNtowwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL
qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvM3V0eGsxdGd0WW82
eERjblREV0lCcXlOdG93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHsx8TANBgkqhkiG9w0BAQsFAAOCAQEAPWxS2vTsg+HiLYqil3IFVEQIX6BN
ahmr6/6qwnsGcQ8hZhLDfpBr1RQhLYzN6uXrdtZQ1L9CLIpjywpJCnoo+wR/Oa2N
drxCN7rMQBWJG68axNXVO78KMjDObz52UHpnHIDcKxz1qU0Cpp0d4AYRHXxh1KA9
hvxYsLbJi4xeMTUorNsthzTsnSzz+XLVYxjdG3fvx5oC/ARIN3EuGWizmhyFftpK
rhywBkIb2++NWecrIFRPqLhIlwd61vLAeogVpRrE3AP+Otci+pLyuDdmWB3+hr1N
ePxFWrOXqMuRHw+wzuz7h03YCwH835CWCgF9SecBuFqh8oBkhaH2zN8QsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:46 2025 by rpki-client