Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IDIQrA6J6ood-O84yleGijHyHsM.roa
File: IDIQrA6J6ood-O84yleGijHyHsM.roa (raw, json)
Hash identifier: Jh/L+EEXLQiNgNCJZ52uzlJ+5oWUbRsknwc/DBQMGEY=
Subject key identifier: 20:32:10:AC:0E:89:EA:8A:1D:F8:EF:38:CA:57:86:8A:31:F2:1E:C3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04FC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IDIQrA6J6ood-O84yleGijHyHsM.roa
Signing time: Tue 13 May 2025 17:37:57 +0000
ROA not before: Tue 13 May 2025 17:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 17:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=203210AC0E89EA8A1DF8EF38CA57868A31F21EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:61:91:7c:68:de:fd:fc:e4:bd:6a:15:34:
5c:6b:a7:1c:c0:dd:3b:36:13:c2:03:09:38:bb:ba:
36:03:fe:31:65:60:89:9b:89:2c:b6:3f:75:ab:41:
d5:a7:ec:23:99:10:63:95:b0:fd:ca:f0:7b:e9:aa:
fa:a3:c3:e4:44:14:db:14:c5:e3:5a:2c:84:e5:56:
6c:82:aa:b9:36:95:0e:d4:81:8f:9f:73:ff:98:0b:
e8:fa:b1:77:fe:02:16:ca:ce:66:7b:bc:dc:2f:a0:
24:82:c9:55:03:06:10:9c:06:62:89:0b:7a:a1:bb:
e8:ff:62:ab:f9:09:76:87:d0:dc:99:4d:85:0e:c3:
59:b6:e9:36:d9:47:98:ea:ed:32:f3:53:ed:46:39:
13:48:eb:96:b9:fc:3c:09:8d:4b:c9:d7:d5:d4:48:
79:44:29:cb:c2:2f:eb:23:66:d1:84:0c:96:90:a3:
05:f6:44:63:69:df:c4:1a:f0:3a:3e:47:e4:c7:16:
4e:a0:75:12:24:3e:55:71:09:e7:2a:fc:d3:28:02:
cc:16:8e:da:34:13:1f:6b:ad:68:d2:ac:a3:00:92:
6c:97:8f:f0:65:f0:45:02:dc:b4:d3:a5:8a:8b:2b:
13:07:09:25:8f:22:ee:2b:5c:b6:81:33:43:3e:ba:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:32:10:AC:0E:89:EA:8A:1D:F8:EF:38:CA:57:86:8A:31:F2:1E:C3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IDIQrA6J6ood-O84yleGijHyHsM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:d3:f0:15:f1:31:06:6d:7e:a0:1b:cc:3e:b3:d2:e2:70:54:
16:7b:9f:a3:b3:31:13:25:e7:18:2e:eb:b0:e1:86:3e:6c:7a:
2c:42:4f:d4:65:f7:ee:92:03:12:3f:85:52:c3:41:dc:fd:3c:
a2:18:15:84:fe:bf:fe:1b:c1:24:b7:99:8f:9a:a7:8d:2f:34:
f1:a1:7e:c7:77:0c:a1:a2:e5:11:1d:7a:13:dd:1d:94:05:a1:
c5:45:c6:e8:9c:43:24:86:13:2b:aa:af:66:4e:8c:d5:5e:1f:
ad:1f:3c:7f:44:20:d2:25:f5:82:4a:3a:93:cc:2e:4f:5e:78:
f0:5d:23:6e:7e:e9:11:cc:ab:11:1b:1f:bd:d4:60:56:2e:20:
be:e5:14:1c:c7:13:94:36:9a:87:f9:4b:6c:f0:3b:e4:a2:ff:
97:f7:a2:b6:b3:fe:82:0f:f1:b9:6a:61:79:86:83:e2:55:b5:
ed:82:58:5b:6f:8b:77:82:b5:c3:7b:a1:22:7f:93:8d:60:4e:
bc:32:9b:49:4b:aa:e0:b8:05:a8:9e:60:ab:79:41:8d:c8:8d:
37:48:2c:3e:04:fe:31:90:34:a5:ad:85:3f:da:af:5e:3a:fc:
17:59:a4:39:22:5e:18:d3:1a:a2:11:5c:6e:3e:14:50:09:d5:
30:6d:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:35:51 2025 by rpki-client