Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nqC6sO8uzpqbsxUqt-26Jts0xBI.roa
File: nqC6sO8uzpqbsxUqt-26Jts0xBI.roa (raw, json)
Hash identifier: 5F1WP2ur5ZCn2HfE2ix247aEjK1yGVQjS+IbIEFY04A=
Subject key identifier: 9E:A0:BA:B0:EF:2E:CE:9A:9B:B3:15:2A:B7:ED:BA:26:DB:34:C4:12
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0218
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nqC6sO8uzpqbsxUqt-26Jts0xBI.roa
Signing time: Fri 09 May 2025 21:07:48 +0000
ROA not before: Fri 09 May 2025 21:07:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 21:07:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EA0BAB0EF2ECE9A9BB3152AB7EDBA26DB34C412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:94:8a:18:aa:c4:f3:c9:69:04:8c:83:bf:
98:02:00:43:6d:dc:fb:ea:be:e4:9c:02:42:ad:5c:
c4:d3:98:8c:ed:ec:0c:d0:57:0a:89:e1:b7:91:30:
4e:6f:dc:d4:1a:3d:51:d7:47:87:a6:72:23:45:22:
df:11:9d:fa:c7:fb:32:1d:b1:18:7b:ca:92:3e:3f:
e9:0d:49:b6:ac:f6:d4:19:bd:92:75:ef:cb:90:e0:
21:59:57:39:20:68:27:cd:51:d3:dc:df:50:af:c7:
4f:a2:4d:c9:6b:55:0e:75:39:5e:ad:e6:c0:b6:11:
a5:9c:e2:c9:ba:d7:c1:ff:4f:b3:94:69:7d:11:14:
04:bf:1e:ac:9d:f9:5e:69:36:f3:67:73:16:2e:1d:
e6:c5:47:47:02:5f:49:f0:3c:f7:f6:40:4e:bb:5c:
be:38:f3:18:58:66:c5:5f:b9:d5:99:a7:c1:bd:6b:
2e:ce:b6:1c:1d:fc:ec:29:80:1d:5c:8b:2e:28:a1:
6a:3e:a4:99:b7:e2:15:69:82:19:93:4b:e0:51:ed:
bc:de:c0:80:10:20:0f:6b:bf:75:3a:9c:33:29:ef:
ba:c3:3c:e5:41:1b:c6:5f:14:68:a8:59:39:db:b8:
8d:a0:e1:60:35:0d:5b:dc:c9:a8:d7:c4:ca:6d:00:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:BA:B0:EF:2E:CE:9A:9B:B3:15:2A:B7:ED:BA:26:DB:34:C4:12
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nqC6sO8uzpqbsxUqt-26Jts0xBI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:a9:f7:b4:b6:79:06:ee:35:a5:9e:6c:af:5c:73:0c:22:ee:
d2:81:ec:7d:a6:2a:dc:cd:22:2b:92:9f:9b:cb:34:62:4b:9d:
a8:0e:89:be:3f:d4:9b:5c:d5:7f:a6:44:7a:e3:48:e1:2a:d5:
31:cc:d5:ba:5c:ae:40:dc:f5:a0:40:52:0e:c5:3e:52:37:1b:
d2:c6:cd:b6:3e:71:d0:9f:32:19:ba:2b:8e:51:c0:00:fd:de:
8f:f3:1a:13:59:c0:21:7b:f0:d7:81:08:f7:fe:ea:86:64:8c:
f5:29:fb:59:3a:5b:29:a9:54:40:49:e1:a8:82:34:e9:d7:ab:
b4:8b:d5:7b:55:5d:a5:d3:87:9c:fb:fd:a7:15:8f:13:f0:14:
b7:fc:02:90:9f:d3:e5:4d:6b:cc:e8:ac:de:f1:95:4b:c6:2a:
d7:77:81:d4:9d:6b:80:38:ca:b0:76:59:b1:92:53:91:9a:fc:
2c:76:1a:1d:a0:18:5b:3a:7a:61:52:8c:20:78:c6:c0:c1:8e:
c5:03:2a:76:74:b4:5f:22:be:34:e6:64:a3:c7:9d:43:64:bf:
02:5f:73:e2:d1:78:77:05:7e:e9:05:66:17:6e:67:7c:bd:87:
02:1f:9d:6a:db:6c:ce:73:7f:81:1a:b3:f7:62:0c:6a:0f:7b:
c7:12:16:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:01:57 2025 by rpki-client