
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
File: NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa (raw, json)
Hash identifier: e+m4e4I9crI0rPD+IWKnxpMY/JydOXyK2JvvXwOuvN8=
Subject key identifier: 35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 164E
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
Signing time: Mon 08 Sep 2025 09:24:01 +0000
ROA not before: Mon 08 Sep 2025 09:24:01 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 13335
IP address blocks: 45.250.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5710 (0x164e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Sep 8 09:24:01 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=3540213A9F6B11D6C26F0701A9167506A62302DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:cb:52:f7:92:e0:82:9a:a6:5e:3f:27:a5:
01:51:ab:2e:3c:db:2b:7b:d3:f3:45:55:b0:56:d7:
80:f7:3e:a9:51:b8:5a:b7:d1:aa:6c:9d:e7:90:2b:
c8:2b:0e:3c:c2:2d:bd:ef:cb:bf:71:19:72:3f:cd:
0b:01:7f:54:6c:c5:c6:99:bf:68:83:40:19:ee:15:
04:a5:a6:d1:a4:fb:44:77:67:b6:e3:a3:0d:f9:14:
56:08:1c:3d:9f:bb:1a:a6:47:6f:08:7a:53:22:cc:
7f:de:89:49:fc:d4:f4:e3:59:ed:ca:83:62:c3:03:
4a:73:4e:8d:4a:d5:98:a1:a2:d5:ac:3b:75:19:11:
66:bd:e8:74:d0:93:f0:10:c1:2d:80:c0:38:d8:f9:
aa:85:0f:c5:eb:1f:9f:82:15:e8:52:c7:38:f8:cb:
7a:d7:57:15:64:51:dc:87:73:6b:ae:f2:e2:98:1b:
0b:04:63:b2:d1:3e:18:94:79:ff:13:7e:8b:52:4a:
72:a0:36:0d:47:a6:f3:ab:3b:6a:34:e9:c7:d0:f8:
f5:fd:63:07:e2:bb:e4:8c:7d:21:3c:e8:59:40:20:
07:67:6f:cb:a0:6a:dd:b4:56:ba:d8:30:9b:97:0f:
f6:37:35:54:5a:59:e2:9c:4f:c9:20:61:c1:cf:10:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:64:85:1e:c5:88:c1:92:e2:cd:84:ee:04:76:0a:18:c1:df:
39:1d:58:ef:97:eb:e7:1b:3e:01:59:f2:51:b1:cb:96:db:8f:
1a:3d:86:23:b3:e5:9b:02:75:c5:9a:24:8a:82:aa:b8:8d:1b:
18:d1:c5:cd:d4:f1:49:c9:1f:a7:74:eb:5c:07:4b:69:d6:01:
2d:98:2f:92:02:8d:7b:71:81:d0:79:e2:cb:ba:d4:2c:90:19:
cc:ea:f6:5f:d3:34:ea:8b:36:97:cc:0a:7f:03:e9:5e:b9:b9:
19:84:4e:32:bb:d9:4f:4b:23:e9:5d:38:77:2a:35:7d:64:da:
2f:38:78:49:4a:02:16:aa:4f:10:7e:0c:a4:03:87:45:4b:6f:
76:7b:ff:15:6f:bf:ea:40:98:5a:5f:2f:4f:20:e8:e0:54:46:
d4:fc:d6:3b:9a:e8:3b:f5:83:bd:4d:3f:80:d6:96:ff:b2:8e:
33:eb:57:ba:14:ba:8f:67:fa:f9:0f:50:2f:bb:8b:f7:93:df:
8e:82:00:73:f2:ce:c5:d2:11:a2:36:9c:fa:b8:41:85:ad:2f:
7c:bd:82:de:cf:de:7a:76:2f:72:09:07:a7:68:0e:99:97:64:
77:11:db:85:b2:26:61:01:0f:22:23:e2:a3:63:2a:17:19:68:
2a:26:57:f2
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw
OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNTA5MDgw
OTI0MDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1NDAyMTNBOUY2QjEx
RDZDMjZGMDcwMUE5MTY3NTA2QTYyMzAyREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbGctS95LggpqmXj8npQFRqy482yt70/NFVbBW14D3PqlRuFq3
0apsneeQK8grDjzCLb3vy79xGXI/zQsBf1RsxcaZv2iDQBnuFQSlptGk+0R3Z7bj
ow35FFYIHD2fuxqmR28IelMizH/eiUn81PTjWe3Kg2LDA0pzTo1K1ZihotWsO3UZ
EWa96HTQk/AQwS2AwDjY+aqFD8XrH5+CFehSxzj4y3rXVxVkUdyHc2uu8uKYGwsE
Y7LRPhiUef8TfotSSnKgNg1HpvOrO2o06cfQ+PX9Ywfiu+SMfSE86FlAIAdnb8ug
at20VrrYMJuXD/Y3NVRaWeKcT8kgYcHPEFDbAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUNUAhOp9rEdbCbwcBqRZ1BqYjAtswHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R
7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2
OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvTlVBaE9wOXJFZGJD
YndjQnFSWjFCcVlqQXRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi36mDANBgkqhkiG9w0BAQsFAAOCAQEAsGSFHsWIwZLizYTuBHYKGMHfOR1Y
75fr5xs+AVnyUbHLltuPGj2GI7PlmwJ1xZokioKquI0bGNHFzdTxSckfp3TrXAdL
adYBLZgvkgKNe3GB0Hniy7rULJAZzOr2X9M06os2l8wKfwPpXrm5GYROMrvZT0sj
6V04dyo1fWTaLzh4SUoCFqpPEH4MpAOHRUtvdnv/FW+/6kCYWl8vTyDo4FRG1PzW
O5roO/WDvU0/gNaW/7KOM+tXuhS6j2f6+Q9QL7uL95PfjoIAc/LOxdIRojac+rhB
ha0vfL2C3s/eenYvcgkHp2gOmZdkdxHbhbImYQEPIiPio2MqFxloKiZX8g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:10:11 2025 by rpki-client