Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nh4zECo2mPCWRoxEVxYhPEz_-3Y.roa
File: Nh4zECo2mPCWRoxEVxYhPEz_-3Y.roa (raw, json)
Hash identifier: VcsRH6INt7eWbZFv3pe71Ydp8F8wTsIzQSdFHkmYZi8=
Subject key identifier: 36:1E:33:10:2A:36:98:F0:96:46:8C:44:57:16:21:3C:4C:FF:FB:76
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0974
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nh4zECo2mPCWRoxEVxYhPEz_-3Y.roa
Signing time: Mon 19 May 2025 16:38:11 +0000
ROA not before: Mon 19 May 2025 16:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 16:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=361E33102A3698F096468C445716213C4CFFFB76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:0d:17:7f:40:21:f8:1a:2c:d2:39:fc:bd:
93:fe:2f:54:47:a6:3f:0c:9e:ff:3d:bc:2c:a8:53:
c7:c1:b2:9f:63:c6:0b:c0:6b:82:28:19:cb:ff:f6:
e7:6a:b4:06:e7:4c:65:90:9a:08:5f:9f:ca:78:9a:
cd:49:0d:6a:bc:d8:27:37:1f:39:cd:ef:bb:a9:1a:
23:00:70:f6:e3:f7:68:ac:89:80:8d:fc:c7:72:81:
87:94:d9:35:88:d2:3b:35:7d:0b:de:1a:c3:5b:fd:
c3:8c:ec:07:c3:7f:27:14:01:c6:76:71:42:2f:60:
7e:bc:c2:50:80:56:fa:e0:bb:cc:24:40:27:40:b4:
95:b8:d7:65:72:b1:dc:04:d6:a1:3d:e6:a0:14:93:
7d:20:50:1a:e8:64:f1:db:d6:b9:65:2b:38:3c:f7:
60:0d:f7:ab:75:1a:d3:3d:12:64:70:69:6c:21:2b:
54:e0:60:94:bb:ef:3e:f8:a1:a6:74:d8:12:d4:68:
56:ab:06:33:ef:bc:f1:34:69:cb:0f:58:f5:88:83:
02:34:34:5b:fe:b5:83:42:af:73:74:d7:7a:82:99:
44:d8:6c:cf:cd:82:c1:97:c2:f1:1b:1a:0c:e8:48:
17:04:63:21:9b:e3:72:15:64:a1:18:63:aa:0b:5a:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:33:10:2A:36:98:F0:96:46:8C:44:57:16:21:3C:4C:FF:FB:76
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nh4zECo2mPCWRoxEVxYhPEz_-3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:8c:21:14:13:5c:7e:1e:75:1e:6a:c6:a9:e5:5b:c3:d1:a8:
00:6f:48:3f:2a:a6:36:8d:67:ae:48:06:30:ed:e1:48:8b:90:
7b:22:93:de:46:9a:8a:4e:31:07:13:66:e7:74:99:98:04:64:
d8:b0:03:c3:35:d8:be:72:50:97:41:10:f1:e2:0a:f0:0b:d2:
ee:50:4a:ff:16:a7:55:d2:c7:70:2d:68:a9:c7:19:05:e5:52:
56:7b:86:dd:6f:13:3b:60:01:df:28:a1:33:2c:ec:aa:c5:66:
da:11:de:a9:78:e6:a4:d3:df:75:06:37:4b:bc:90:71:02:3a:
cc:23:07:79:14:4e:31:dc:02:a0:28:e5:47:6c:ae:b9:7e:46:
c7:8d:2d:e6:14:34:88:f0:b2:de:2d:ee:bf:83:cb:20:d1:6c:
a8:ed:c4:d5:4d:1e:bb:9c:cf:ab:27:83:20:66:8d:8c:8d:68:
d3:a9:d5:f9:4f:60:50:bf:c1:90:54:b2:45:9a:a1:27:a3:37:
ff:9f:f2:a4:59:63:5b:d5:11:9b:3d:fc:a7:5e:87:f8:1b:90:
d9:b6:ca:65:0d:d0:ae:b9:fb:94:ed:fe:f9:80:92:3b:b8:ae:
e0:c4:00:8c:5d:a7:2e:f9:03:24:aa:75:99:3b:f4:62:c0:95:
46:bb:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:37 2025 by rpki-client