Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4pyc54FqyDAXDBdJ6UIbEFaBbwg.roa
File: 4pyc54FqyDAXDBdJ6UIbEFaBbwg.roa (raw, json)
Hash identifier: CBzfudPrSHTJ8PMqcbYNKskqXwYhE6h2Foz1lC76qmo=
Subject key identifier: E2:9C:9C:E7:81:6A:C8:30:17:0C:17:49:E9:42:1B:10:56:81:6F:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B28
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4pyc54FqyDAXDBdJ6UIbEFaBbwg.roa
Signing time: Wed 21 May 2025 23:09:03 +0000
ROA not before: Wed 21 May 2025 23:09:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 23:09:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E29C9CE7816AC830170C1749E9421B1056816F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:ac:a3:bd:82:5f:cd:ab:92:99:4a:fe:6b:
3b:fc:aa:4a:68:92:86:8c:84:3b:4e:6e:e1:a3:d1:
c5:3f:c7:86:ed:ef:57:8c:65:62:3b:02:e1:6c:f2:
4c:4c:8f:a6:a0:c7:6d:34:a2:99:cd:14:2b:45:04:
56:66:99:43:cc:54:55:29:b1:29:6e:2b:f9:bd:f3:
eb:97:1f:2f:84:5d:10:72:4b:7c:cd:fc:81:0c:60:
e6:b9:14:06:c4:44:04:75:24:40:e3:7e:13:66:ef:
74:be:b3:40:93:91:b3:a5:c3:0f:31:34:64:29:bb:
f3:c4:16:2b:71:5c:67:9e:5e:ba:4e:89:6b:57:1c:
5e:2d:f1:7a:23:92:17:64:aa:9e:ab:9b:68:1c:67:
52:bd:6a:34:0b:f3:e9:d1:29:81:8e:87:15:fd:5b:
5e:30:6a:8f:28:cc:5f:ef:50:64:8e:88:f7:a6:64:
0d:63:58:08:db:a7:b5:06:3a:48:0c:9e:4c:0b:10:
65:69:14:0f:21:74:ae:dc:9d:a7:fc:5e:75:f7:65:
cc:0e:06:9f:52:3a:7a:1f:71:56:cb:3d:dd:e1:f0:
3b:a7:94:80:ce:63:fc:cc:14:92:7b:98:a9:db:7f:
fc:14:25:ff:40:39:14:27:a0:28:e6:2c:8e:a0:89:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:9C:E7:81:6A:C8:30:17:0C:17:49:E9:42:1B:10:56:81:6F:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4pyc54FqyDAXDBdJ6UIbEFaBbwg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:7e:45:49:37:c9:a4:9f:58:2e:2e:48:74:53:2b:02:d0:14:
89:c8:5f:6f:1c:38:6e:ab:0e:3a:5b:96:0a:9d:38:19:54:4d:
cc:19:55:94:98:1a:3f:7f:d9:b0:e2:2e:13:e6:ba:7a:00:77:
76:38:dc:0f:fb:42:bc:60:ca:a4:90:fd:bb:e6:48:0b:55:19:
68:39:de:a3:9e:f2:5b:5b:94:51:d3:9d:55:8d:6f:b1:2f:20:
67:31:c4:b7:86:7c:d6:ef:89:1c:af:51:88:60:61:82:53:7f:
39:e5:b8:8a:5e:b2:a7:0f:01:4c:b1:75:eb:6f:d0:38:28:dc:
e8:57:86:75:27:43:c7:d1:3d:61:e5:ee:4f:8d:f4:f2:30:cc:
06:ed:21:43:a4:be:06:71:4f:7b:53:93:9d:fd:b6:3f:f9:c6:
ec:d4:d6:b0:5c:12:1c:fe:5b:2d:b6:85:bc:8e:81:a9:b4:c8:
5e:36:a3:de:00:b3:03:53:41:29:77:7c:b5:2c:f9:f6:22:0b:
95:9d:d9:60:29:cd:43:d6:b4:2c:b0:45:00:ba:31:b6:d6:06:
23:7b:ba:c5:38:83:69:67:33:74:c1:3a:a9:12:d2:1d:91:bd:
5f:fc:1d:0f:31:e5:72:fa:f2:e8:33:2b:7a:25:0a:51:56:c1:
a4:a9:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:15 2025 by rpki-client