Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/v3Gp6iZqO4bjR7ndyblXEjcC6mU.roa
File: v3Gp6iZqO4bjR7ndyblXEjcC6mU.roa (raw, json)
Hash identifier: FekIGqmCuhrcTewURRMhVvfKel9D043sobjYIEz8eJA=
Subject key identifier: BF:71:A9:EA:26:6A:3B:86:E3:47:B9:DD:C9:B9:57:12:37:02:EA:65
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1870
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/v3Gp6iZqO4bjR7ndyblXEjcC6mU.roa
Signing time: Thu 05 Mar 2026 12:17:09 +0000
ROA not before: Thu 05 Mar 2026 12:17:09 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 19793
IP address blocks: 124.42.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 5 12:17:09 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BF71A9EA266A3B86E347B9DDC9B957123702EA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:e0:b5:9f:29:b9:99:7d:2f:50:51:50:d9:
3e:64:2e:db:e5:b5:78:bb:79:02:d9:aa:b6:79:cc:
30:99:88:fc:d0:f4:ed:8e:72:88:f5:10:1c:8a:63:
a8:96:8d:ad:8c:aa:21:f8:f2:16:2b:29:a5:ec:84:
7f:f5:89:b8:58:59:43:09:ac:c7:ff:5a:62:d2:60:
cc:8f:6b:22:6b:6c:78:75:59:32:69:fe:cc:39:ac:
cc:59:af:42:c3:68:7a:69:dc:a3:b3:1c:ae:13:20:
4a:de:5e:e5:27:3f:13:59:5f:4b:12:44:50:65:4b:
34:ff:2f:0e:52:e2:7f:03:82:7e:f4:eb:a2:bd:73:
2f:57:72:2c:aa:9e:92:42:19:0d:eb:40:ec:40:9c:
6d:bd:ab:c0:5e:fb:45:4a:26:93:c9:ac:8f:82:27:
9d:54:31:77:9f:f0:25:93:d8:41:62:c1:f4:84:1c:
1e:0c:55:59:e8:42:eb:a7:ac:17:54:54:a3:fa:a5:
a5:a0:9e:48:a8:c2:a2:3f:f5:db:ef:7f:e7:51:b9:
34:dc:c2:94:fd:96:4b:a2:67:00:a4:9c:14:0b:ae:
7f:ae:78:14:c2:f0:92:f5:95:07:70:a3:2f:89:51:
9e:23:54:67:5b:77:2f:9b:e9:69:42:b3:d6:96:5a:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:A9:EA:26:6A:3B:86:E3:47:B9:DD:C9:B9:57:12:37:02:EA:65
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/v3Gp6iZqO4bjR7ndyblXEjcC6mU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.42.132.0/22
Signature Algorithm: sha256WithRSAEncryption
82:a1:c6:1d:5c:fa:62:3c:8a:e2:3e:28:f6:c2:53:75:32:64:
7d:1f:ce:3c:4d:ca:77:e1:52:45:60:46:64:31:8c:24:0b:3c:
d6:3e:c8:00:e2:1f:68:03:b9:ff:df:be:b1:66:3b:95:aa:bf:
c6:54:43:c4:6a:94:7a:4e:c5:50:4e:df:92:75:8f:57:e1:f8:
3c:c6:3d:a6:3f:e5:2f:6b:4e:61:c6:e3:0a:9c:75:34:be:4d:
14:24:2f:e2:c1:d5:cf:34:c2:7b:54:d1:d2:ae:81:a0:98:e7:
28:a3:ca:6b:39:89:a5:fc:36:e8:17:8f:09:ed:61:6f:6d:87:
63:88:52:cf:40:ca:31:23:95:f6:14:a2:bb:af:50:52:b9:fe:
c3:9b:a7:0c:24:65:98:7a:a7:bb:9e:8e:8c:6f:a6:ae:4b:36:
54:7d:65:82:3e:b5:42:c2:ae:28:2c:66:fc:29:31:e2:c5:fa:
27:c7:ad:c3:cb:67:5e:88:9c:6b:b1:3e:ba:73:3c:e2:9f:72:
4e:a6:ee:44:92:8e:d3:f1:a7:08:03:63:3c:15:87:f1:de:88:
fc:da:4d:7a:a6:8d:00:37:bf:23:e6:6b:37:6a:c4:43:6a:e3:
49:a0:13:8c:7d:c1:e1:2e:09:42:32:8c:fb:fe:5a:cb:fc:69:
ad:67:b5:88
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNjAzMDUx
MjE3MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEJGNzFBOUVBMjY2QTNC
ODZFMzQ3QjlEREM5Qjk1NzEyMzcwMkVBNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmUeC1nym5mX0vUFFQ2T5kLtvltXi7eQLZqrZ5zDCZiPzQ9O2O
coj1EByKY6iWja2MqiH48hYrKaXshH/1ibhYWUMJrMf/WmLSYMyPayJrbHh1WTJp
/sw5rMxZr0LDaHpp3KOzHK4TIEreXuUnPxNZX0sSRFBlSzT/Lw5S4n8Dgn7066K9
cy9XciyqnpJCGQ3rQOxAnG29q8Be+0VKJpPJrI+CJ51UMXef8CWT2EFiwfSEHB4M
VVnoQuunrBdUVKP6paWgnkiowqI/9dvvf+dRuTTcwpT9lkuiZwCknBQLrn+ueBTC
8JL1lQdwoy+JUZ4jVGdbdy+b6WlCs9aWWi8xAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUv3Gp6iZqO4bjR7ndyblXEjcC6mUwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3YzR3A2aVpxTzRialI3
bmR5YmxYRWpjQzZtVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ8KoQwDQYJKoZIhvcNAQELBQADggEBAIKhxh1c+mI8iuI+KPbCU3UyZH0fzjxN
ynfhUkVgRmQxjCQLPNY+yADiH2gDuf/fvrFmO5Wqv8ZUQ8RqlHpOxVBO35J1j1fh
+DzGPaY/5S9rTmHG4wqcdTS+TRQkL+LB1c80wntU0dKugaCY5yijyms5iaX8NugX
jwntYW9th2OIUs9AyjEjlfYUoruvUFK5/sObpwwkZZh6p7uejoxvpq5LNlR9ZYI+
tULCrigsZvwpMeLF+ifHrcPLZ16InGuxPrpzPOKfck6m7kSSjtPxpwgDYzwVh/He
iPzaTXqmjQA3vyPmazdqxENq40mgE4x9weEuCUIyjPv+Wsv8aa1ntYg=
-----END CERTIFICATE-----
Generated at Mon Jun 22 07:41:15 2026 by rpki-client