Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3dkD-pv6H0DdEj1Q8uyYSCmuleg.roa
File: 3dkD-pv6H0DdEj1Q8uyYSCmuleg.roa (raw, json)
Hash identifier: gMMp2QftZ8CQQe4OWT0hfvsCXgxAKGfEmDgQwBT93no=
Subject key identifier: DD:D9:03:FA:9B:FA:1F:40:DD:12:3D:50:F2:EC:98:48:29:AE:95:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A6C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3dkD-pv6H0DdEj1Q8uyYSCmuleg.roa
Signing time: Wed 11 Jun 2025 07:40:30 +0000
ROA not before: Wed 11 Jun 2025 07:40:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6764 (0x1a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 07:40:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DDD903FA9BFA1F40DD123D50F2EC984829AE95E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a8:c3:b7:4b:80:db:f4:d6:b9:b0:00:a8:
6b:bf:e9:27:30:d4:36:59:ce:f1:fb:32:45:8b:fd:
57:fc:04:b7:56:88:b1:cc:a0:f4:77:a3:cb:8d:29:
8f:99:97:bf:12:16:7a:a1:dc:cc:15:f2:13:ff:4d:
33:49:9b:05:a8:39:a6:24:88:a8:dc:87:d7:e5:95:
ef:16:38:2b:a1:f9:da:10:e6:b3:35:fa:75:55:26:
f4:46:11:31:0f:81:4b:68:68:55:4f:63:11:42:c1:
ac:0a:af:c4:77:37:31:90:bc:de:9e:6d:5e:c2:17:
31:fe:8c:fe:1f:f0:5d:fe:38:84:23:3e:fd:06:0f:
26:a3:e8:42:36:3e:15:69:7c:3e:5b:a7:af:26:2d:
9a:75:d5:b9:aa:53:25:39:a3:32:14:4e:44:64:2f:
d4:79:fb:e1:42:b2:94:56:8c:16:c1:3d:fe:f5:7c:
ef:7d:e3:23:fc:1b:17:36:2a:04:61:77:2d:fd:71:
66:12:8b:d7:74:b1:9b:9f:5f:09:26:32:9d:2c:b8:
d8:38:db:73:74:af:6c:42:2b:53:12:e8:ff:56:e2:
03:b5:b1:8f:96:6b:1f:26:1d:32:23:df:e7:d9:5b:
af:76:58:b3:5f:b8:ff:d9:d5:e9:a6:3f:a6:67:84:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:03:FA:9B:FA:1F:40:DD:12:3D:50:F2:EC:98:48:29:AE:95:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3dkD-pv6H0DdEj1Q8uyYSCmuleg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:26:33:f1:28:c7:c9:ef:65:a2:70:96:0a:1d:87:ae:48:37:
2b:b2:4a:b5:32:39:b1:7d:c2:e5:4c:3c:c2:4f:f1:8b:73:e5:
bf:23:d5:78:0b:31:9a:c8:4a:5a:76:dc:0b:da:6b:f8:9f:ba:
ea:c3:6e:03:23:be:20:43:d8:b5:28:a9:b8:14:31:db:05:0a:
14:8e:cb:9a:dc:77:ef:a1:ea:f8:d6:99:ff:dc:f1:77:a8:98:
df:eb:18:90:d8:4a:0e:02:d9:f6:65:6f:41:2b:cb:21:3e:bb:
8a:fc:7e:a5:db:49:21:7b:21:97:b3:1e:d4:74:a4:0a:0d:eb:
9e:81:34:4c:39:02:f5:b4:a7:b0:2a:6c:ea:77:5f:b6:1d:fb:
dd:41:2f:b6:5d:cb:bb:d0:0a:b0:ed:28:b5:17:4d:63:87:ff:
43:a5:a0:9c:11:0f:68:bf:77:e2:64:7b:ec:97:2a:1c:82:b5:
e2:ec:01:86:97:32:f2:59:4b:ad:8e:50:4d:28:a9:1b:95:50:
50:80:93:9c:c8:1e:53:ba:64:f4:5b:bc:f2:33:66:fb:51:29:
c1:d8:89:c6:60:32:ae:bd:ae:42:25:e5:07:18:c9:9a:3e:27:
d2:d6:4e:46:63:c0:2c:93:43:1f:f4:fa:c1:b8:b6:4d:2d:bc:
34:85:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:45 2025 by rpki-client