Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JiCKZY-gfgmVmp8MptXctGt70RE.roa
File: JiCKZY-gfgmVmp8MptXctGt70RE.roa (raw, json)
Hash identifier: GWxJJKAtLwQosKZEQ/EmaVtwR4u2eg+w4nPPGeTgvNg=
Subject key identifier: 26:20:8A:65:8F:A0:7E:09:95:9A:9F:0C:A6:D5:DC:B4:6B:7B:D1:11
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0838
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JiCKZY-gfgmVmp8MptXctGt70RE.roa
Signing time: Sun 18 May 2025 01:08:07 +0000
ROA not before: Sun 18 May 2025 01:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 01:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=26208A658FA07E09959A9F0CA6D5DCB46B7BD111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:01:e6:ac:2f:2a:b9:a2:09:6d:2a:0d:3d:
44:8b:36:24:9d:a0:bf:97:94:a0:4b:c6:28:b7:b4:
ff:01:5f:da:96:18:10:c9:18:99:08:00:ae:19:f6:
8a:f0:34:f9:49:0c:1f:ca:2c:bc:48:b6:d2:a2:87:
1c:e1:b1:ea:0b:22:36:ad:08:27:20:8f:07:ce:20:
44:fd:a6:50:f6:59:fc:df:ed:32:6d:42:79:3e:66:
dd:a7:a3:98:b3:af:f5:53:9c:05:1b:7f:1a:51:28:
2a:35:7e:16:82:40:49:27:70:07:a9:0c:02:3d:9f:
45:e9:5f:4a:30:50:e5:6a:26:dc:0d:6e:0f:85:8d:
21:09:0a:3f:3a:14:e3:1b:1a:1a:da:9c:5a:ee:f1:
82:c6:28:60:db:f0:65:1c:2a:92:63:1d:f5:c1:64:
7c:da:45:d7:20:4a:38:8d:e3:e8:e0:15:29:59:58:
69:40:76:5f:90:86:7e:02:73:97:eb:cf:5d:0a:aa:
a3:e7:66:87:df:60:b5:28:53:87:36:9b:21:ff:07:
77:55:ea:f5:ff:5e:b0:66:7a:ed:a2:5b:c3:f5:16:
10:5c:5b:b1:a0:ee:f3:7b:34:ce:ce:21:8d:4f:15:
79:e3:cd:30:e3:41:35:08:7b:9f:4c:4d:57:cd:ee:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:8A:65:8F:A0:7E:09:95:9A:9F:0C:A6:D5:DC:B4:6B:7B:D1:11
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JiCKZY-gfgmVmp8MptXctGt70RE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:6e:e2:68:ff:db:79:44:84:b2:60:da:18:bf:6f:cb:b4:02:
14:e9:e7:c7:fd:c4:c0:b1:b8:fa:64:5d:54:49:43:19:c7:c2:
42:4b:d6:94:5b:3f:17:23:cc:2b:ec:97:3b:ac:c6:b2:d2:3e:
23:f9:88:35:5d:ff:90:9e:8b:cd:26:6f:0a:9d:2f:ed:fd:11:
29:a3:25:fa:67:15:7c:72:05:04:e6:af:a1:31:c9:b4:e0:49:
72:f0:d1:35:f6:41:e2:53:fa:7a:37:dc:5a:47:34:e7:b1:07:
a9:2d:b8:78:1d:32:2f:3e:9a:c4:7a:eb:db:e7:7a:05:d8:2b:
d4:22:fb:28:7e:ab:ee:16:fc:66:53:57:1b:a2:d5:41:0f:cd:
c1:60:56:1e:71:a2:e0:72:0d:96:aa:27:2c:96:a6:e9:c7:85:
ec:c6:d7:70:9f:b0:35:52:12:3b:ff:af:42:15:25:ee:bb:c9:
00:53:b4:b7:e3:49:f6:e5:5f:87:81:1f:c2:ba:42:5a:0b:04:
56:dc:b1:1f:8f:19:53:3e:d0:b4:07:d8:42:3e:df:9f:05:7e:
07:41:b0:4a:3e:0d:d5:b4:a6:08:22:28:6c:1e:a7:c5:21:67:
cc:50:b3:5e:6f:55:fc:9b:6f:76:ae:a2:2b:67:48:2c:26:c1:
bc:42:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:17 2025 by rpki-client