Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/Qarsn0SFZp-jXqjdjHp8xWuEzEg.roa
File: Qarsn0SFZp-jXqjdjHp8xWuEzEg.roa (raw, json)
Hash identifier: 9snnBN75k1CQvLqGwu+2hcS4JN6xZnU9DN0vTWHvyqM=
Subject key identifier: 41:AA:EC:9F:44:85:66:9F:A3:5E:A8:DD:8C:7A:7C:C5:6B:84:CC:48
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 2099
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/Qarsn0SFZp-jXqjdjHp8xWuEzEg.roa
Signing time: Sat 13 Sep 2025 03:09:55 +0000
ROA not before: Sat 13 Sep 2025 03:09:55 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 23724
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8345 (0x2099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Sep 13 03:09:55 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=41AAEC9F4485669FA35EA8DD8C7A7CC56B84CC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:5b:18:e6:a2:5c:a3:8e:89:65:55:26:d0:
ea:c8:f3:50:46:cb:7e:76:9b:a5:84:de:fc:2e:58:
ac:d5:bc:f8:f4:5b:d9:cf:c5:61:ee:4c:59:7b:66:
e4:ad:65:9d:0a:df:92:30:36:67:ee:20:d3:14:8f:
52:49:cd:2a:7f:2a:ac:09:24:7c:a8:24:eb:0e:20:
13:0b:74:7d:c7:55:b4:1e:69:ae:00:59:5f:a8:b7:
36:30:ae:cc:b1:13:73:8d:85:ce:37:57:87:94:ab:
06:c2:6b:27:2e:3d:1d:55:93:30:6e:68:38:38:db:
1f:ca:6c:ed:7e:c9:1d:ba:89:cd:b6:ee:37:53:b0:
60:71:3b:4e:c8:2a:12:b1:a4:d5:bf:d7:02:52:3d:
44:7c:d2:75:42:8e:5a:a3:86:f2:e3:a7:e7:af:f9:
9f:22:de:da:0f:c9:aa:c1:9a:3f:ac:cd:b9:07:fc:
cb:3c:a5:3d:64:c1:3f:b2:8f:e4:ad:be:6c:71:94:
a6:83:30:0b:7c:66:e6:fa:d0:46:f0:3f:53:51:14:
e9:11:26:00:3e:9c:97:3f:98:af:06:ed:b3:bd:41:
19:9c:fa:0e:b5:78:9c:a2:d0:da:d7:03:db:0f:aa:
91:11:90:47:43:cf:1c:8c:ae:97:5e:12:28:16:51:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:EC:9F:44:85:66:9F:A3:5E:A8:DD:8C:7A:7C:C5:6B:84:CC:48
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/Qarsn0SFZp-jXqjdjHp8xWuEzEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
40:d4:60:b3:49:32:c0:da:32:b0:0e:ab:67:a5:b3:85:85:88:
f4:28:2d:ce:51:67:ce:dd:26:5c:a9:83:c5:a3:6e:d5:79:7e:
e4:85:87:d3:e5:0c:77:6a:39:61:c2:1b:65:cb:4e:26:09:ca:
8a:fc:d0:75:b6:5a:0d:f2:93:90:ad:c7:df:35:46:66:2b:70:
95:7a:80:41:ae:37:07:57:1c:03:55:17:85:56:dc:67:2a:18:
d4:3f:ed:3d:d4:1f:66:8e:25:6b:7e:e6:0e:b9:4b:71:83:d0:
b9:10:a8:32:df:c6:06:45:0f:1f:06:a3:a4:a3:b6:3c:0f:c3:
5d:f9:a3:a7:41:5d:1a:09:bd:87:54:b9:a6:a9:d7:66:18:01:
6a:f4:ff:9f:6b:7f:71:97:31:db:d3:64:a7:e0:eb:40:bc:06:
08:f0:09:4a:12:b0:f4:94:8f:1a:1e:e1:51:88:8c:ca:4d:c1:
59:59:63:03:b0:44:03:12:37:48:2b:7a:be:31:cc:96:2a:04:
b4:6e:ed:1b:23:c8:b2:b5:34:7b:ca:77:9c:ae:bb:5d:5c:f1:
be:f7:6f:1d:f2:13:92:46:09:2b:1b:78:fd:05:f9:5c:7f:cf:
9c:08:18:1e:aa:79:bc:da:ad:32:db:cf:be:fe:9e:10:36:3e:
01:4e:c2:7e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICIJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNF
NzdGMzdCM0I5Mzg1MDgzNUJBQTMwRUU4RkMxMkQ1NUY4NzA1NDAeFw0yNTA5MTMw
MzA5NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQxQUFFQzlGNDQ4NTY2
OUZBMzVFQThERDhDN0E3Q0M1NkI4NENDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqn1sY5qJco46JZVUm0OrI81BGy352m6WE3vwuWKzVvPj0W9nP
xWHuTFl7ZuStZZ0K35IwNmfuINMUj1JJzSp/KqwJJHyoJOsOIBMLdH3HVbQeaa4A
WV+otzYwrsyxE3ONhc43V4eUqwbCaycuPR1VkzBuaDg42x/KbO1+yR26ic227jdT
sGBxO07IKhKxpNW/1wJSPUR80nVCjlqjhvLjp+ev+Z8i3toPyarBmj+szbkH/Ms8
pT1kwT+yj+StvmxxlKaDMAt8Zub60EbwP1NRFOkRJgA+nJc/mK8G7bO9QRmc+g61
eJyi0NrXA9sPqpERkEdDzxyMrpdeEigWUVirAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUQarsn0SFZp+jXqjdjHp8xWuEzEgwHwYDVR0jBBgwFoAUg+d/N7O5OFCDW6ow
7o/BLVX4cFQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYx
L2ctZF9ON081T0ZDRFc2b3c3b19CTFZYNGNGUS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZy1kX043TzVPRkNEVzZvdzdvX0JMVlg0Y0ZRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTYxL1FhcnNuMFNGWnAtalhx
amRqSHA4eFd1RXpFZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAPTm1gwDQYJKoZIhvcNAQELBQADggEBAEDUYLNJMsDaMrAOq2els4WFiPQoLc5R
Z87dJlypg8WjbtV5fuSFh9PlDHdqOWHCG2XLTiYJyor80HW2Wg3yk5Ctx981RmYr
cJV6gEGuNwdXHANVF4VW3GcqGNQ/7T3UH2aOJWt+5g65S3GD0LkQqDLfxgZFDx8G
o6SjtjwPw135o6dBXRoJvYdUuaap12YYAWr0/59rf3GXMdvTZKfg60C8BgjwCUoS
sPSUjxoe4VGIjMpNwVlZYwOwRAMSN0grer4xzJYqBLRu7RsjyLK1NHvKd5yuu11c
8b73bx3yE5JGCSsbeP0F+Vx/z5wIGB6qebzarTLbz77+nhA2PgFOwn4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:23 2025 by rpki-client