Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9H6zLhd10EM4XxS5XX7fP-diY.roa
File: 9j9H6zLhd10EM4XxS5XX7fP-diY.roa (raw, json)
Hash identifier: EdkUmjaiv559EXEaysrbYj3WZ6cEAcIkkyvrXxkfFqM=
Subject key identifier: F6:3F:47:EB:32:E1:77:5D:04:33:85:F1:4B:95:D7:ED:F3:FE:76:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DD8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9H6zLhd10EM4XxS5XX7fP-diY.roa
Signing time: Sun 25 May 2025 13:08:33 +0000
ROA not before: Sun 25 May 2025 13:08:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3544 (0xdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 13:08:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F63F47EB32E1775D043385F14B95D7EDF3FE7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:aa:ab:4f:1e:7e:4a:a6:b2:e6:db:ce:f6:
12:da:48:04:26:6a:dd:c3:40:17:74:03:b3:cf:5c:
81:0d:18:6c:dc:89:9c:c6:ed:ff:01:07:68:b2:5b:
d7:e5:71:7a:0e:c0:c6:cd:f8:a3:f8:e1:00:80:52:
70:1f:da:f2:fe:87:a8:80:48:e3:8a:1b:4d:33:e7:
96:e3:ff:c7:14:72:44:25:dd:15:24:b2:0d:e0:60:
56:11:e2:ff:11:d7:e4:93:86:b5:f4:c8:2d:60:95:
e7:d2:02:b8:e5:10:95:ac:3b:31:45:a9:fc:8f:e5:
38:fc:2c:4a:ce:40:bd:9f:e7:3c:6d:98:cf:15:79:
35:66:fe:c3:e4:b0:57:c9:b1:1a:96:4a:59:3d:4d:
fa:8e:b1:3c:37:62:ec:bf:54:3a:43:50:98:1d:9e:
47:f2:ab:cc:8f:a4:e1:14:b7:c6:45:61:26:0f:9f:
a3:c2:1f:88:f1:fc:83:8c:5d:39:69:a2:eb:33:9b:
89:7f:5a:3b:0f:0b:d8:22:b5:86:11:9a:1d:07:e5:
9c:ed:d6:87:dd:83:84:68:13:a5:ee:95:27:42:8a:
c3:f0:d4:31:35:3e:95:91:62:83:e4:04:ac:cb:fb:
74:87:8b:b4:8d:d0:b0:1a:00:da:8a:eb:de:5b:e0:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:47:EB:32:E1:77:5D:04:33:85:F1:4B:95:D7:ED:F3:FE:76:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9H6zLhd10EM4XxS5XX7fP-diY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:7f:a6:47:ad:87:dc:70:7e:22:0b:70:29:5b:4e:ff:c5:94:
da:e0:16:7d:73:00:1f:18:dd:be:4e:dc:e0:55:a0:dd:99:b3:
93:ed:2b:47:a7:78:af:cc:d3:72:13:da:cb:12:e4:17:a6:3f:
16:fe:54:40:2b:8b:4b:bf:d1:a4:72:2a:64:46:2e:08:eb:ac:
ea:28:32:16:48:f1:ad:bf:a7:78:80:54:94:6e:d2:81:8e:a8:
a0:88:bd:e2:a3:63:8e:92:87:a2:43:9c:00:1b:38:7d:0a:fb:
66:44:fc:03:9d:52:e8:62:9e:70:c7:77:f3:e1:b8:91:92:41:
56:29:b2:99:1c:7d:e7:49:b6:04:9a:f1:e0:53:d9:dd:63:a2:
9b:24:f8:b1:1f:be:5a:11:bc:1e:f8:23:40:24:99:41:7e:2d:
d0:a6:b2:07:90:2c:d0:b4:0e:c0:d2:a1:e7:fb:22:f6:a4:ea:
7a:b7:89:31:e8:4d:88:ca:e8:ce:f6:2b:ab:64:e1:45:49:5c:
f4:6e:44:0e:d9:4e:1d:96:ae:7a:15:f3:1d:cd:0b:b5:d9:77:
07:5a:b6:78:f8:9d:72:7d:7f:f3:f0:fa:c0:06:f8:0c:78:49:
58:d7:2e:c8:20:a6:8d:54:80:68:7a:8a:61:aa:68:cf:01:b7:
50:e4:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:14 2025 by rpki-client