Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1eHvayWB_h9GBPNrHvBWv3IIIRU.roa
File: 1eHvayWB_h9GBPNrHvBWv3IIIRU.roa (raw, json)
Hash identifier: 6pDX43ezSf3jk4Zeni/IqaLOR0pSO82pTH/BGs1nfqc=
Subject key identifier: D5:E1:EF:6B:25:81:FE:1F:46:04:F3:6B:1E:F0:56:BF:72:08:21:15
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07D0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1eHvayWB_h9GBPNrHvBWv3IIIRU.roa
Signing time: Sat 17 May 2025 12:08:07 +0000
ROA not before: Sat 17 May 2025 12:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 12:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D5E1EF6B2581FE1F4604F36B1EF056BF72082115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:12:b9:e7:1a:cd:75:62:27:cd:9f:e1:6a:
f3:7c:23:61:4e:f7:42:d9:fe:b2:9f:f1:68:16:3d:
ca:8f:c4:db:b1:36:3a:e5:e6:2f:2e:aa:36:99:1a:
bf:22:7a:eb:8a:25:a4:70:5d:2f:65:42:ca:bc:28:
61:e9:2d:1a:2e:8f:5d:42:65:46:ef:dd:51:53:c5:
c4:cf:c7:a5:55:c3:2e:e4:49:b1:e8:9f:de:29:07:
cb:aa:7a:c1:aa:ba:01:fa:49:b9:b6:fd:13:1e:dd:
86:40:21:31:39:12:20:7b:2c:24:66:30:00:6d:fb:
fa:c7:61:8c:d7:49:a3:f3:5c:6a:90:fa:66:64:89:
c7:46:e1:1f:92:48:c1:8d:12:82:b5:06:e0:8c:cb:
72:50:0b:ef:91:27:51:1f:1e:7d:99:4d:bc:cf:da:
15:00:63:1b:7a:c8:49:8e:c4:ee:20:6a:d9:1e:0c:
e0:b6:a8:44:f9:e2:cd:6d:3b:73:3d:99:65:07:5b:
ed:06:ca:f7:57:b7:6f:80:5a:9f:38:c1:27:f1:21:
0f:41:d0:2b:06:38:4c:ce:64:28:49:4e:e2:92:78:
b1:b1:6d:f9:73:da:a3:ad:0f:84:4c:47:95:b2:c5:
e5:8a:a1:ba:82:da:8c:a5:be:b8:cb:b6:d5:63:4b:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:EF:6B:25:81:FE:1F:46:04:F3:6B:1E:F0:56:BF:72:08:21:15
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1eHvayWB_h9GBPNrHvBWv3IIIRU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:08:f2:ff:6b:9e:09:a6:fb:0c:fb:40:77:fd:c1:1d:06:84:
7e:95:3c:54:56:16:3b:87:04:56:6b:74:31:34:61:7d:20:29:
74:99:cc:d4:c9:1f:ae:76:a6:38:40:40:a4:31:f7:41:82:2a:
dd:88:51:b4:7d:24:67:e7:af:b4:24:99:71:74:5f:0b:f6:1c:
27:70:5f:25:9a:f6:59:dc:8e:55:0e:01:03:9d:d6:27:bd:fe:
fd:51:19:ec:80:8d:eb:3e:17:f0:68:de:c2:6a:dc:79:a3:82:
21:77:9b:22:43:af:aa:bf:a3:cf:95:6f:20:85:e9:4e:c8:67:
2c:65:66:0b:16:be:23:6e:a0:df:18:89:8e:ad:b4:17:d8:da:
51:bb:9b:f7:52:1e:93:36:6d:48:1f:29:0b:20:3d:a4:af:01:
27:06:89:86:c7:30:f0:d3:45:d9:31:82:3e:b0:de:ef:45:8a:
dc:fc:ee:cf:fe:0a:c8:36:6d:94:50:81:ac:4b:07:4a:12:b3:
75:d8:81:a8:c2:6c:e5:ec:a7:5a:b4:eb:de:30:eb:f0:bb:40:
d9:27:bf:80:bb:9c:60:0b:41:a9:09:e6:ab:f7:5e:91:a4:19:
96:0d:ec:cd:97:17:b7:48:ed:a6:1d:51:67:e9:99:af:4c:07:
d0:f4:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:19:49 2025 by rpki-client