Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NnWhxnQwF7Sjk-N62j5XbdR_fJs.roa
File: NnWhxnQwF7Sjk-N62j5XbdR_fJs.roa (raw, json)
Hash identifier: 9wlK8iqcv4CLraNJM7h/ZGNGf3BY0Ol4Dqqzp10xS7A=
Subject key identifier: 36:75:A1:C6:74:30:17:B4:A3:93:E3:7A:DA:3E:57:6D:D4:7F:7C:9B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2210
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NnWhxnQwF7Sjk-N62j5XbdR_fJs.roa
Signing time: Sat 21 Jun 2025 23:41:48 +0000
ROA not before: Sat 21 Jun 2025 23:41:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8720 (0x2210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 23:41:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3675A1C6743017B4A393E37ADA3E576DD47F7C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:42:15:fb:78:24:e2:56:65:01:46:7c:ab:
71:43:82:cb:e4:35:89:50:93:d0:98:43:f6:6e:91:
e2:f3:96:52:37:cb:cb:15:63:7a:59:8b:8e:04:87:
d6:8f:be:22:d7:a3:38:50:14:e3:9b:ed:1d:d7:75:
5f:31:e1:35:72:cc:91:c3:8f:92:84:44:86:22:25:
0c:86:f0:a8:f5:d7:1f:2b:d5:3c:87:60:b8:ee:fe:
19:07:71:68:2f:1a:79:05:21:ac:78:79:0a:42:33:
15:20:d6:43:b7:67:c2:ed:37:58:e5:ef:7f:65:8d:
7e:01:d5:f4:f2:99:b7:98:eb:ce:fb:d8:cb:22:c4:
8b:c5:fa:5d:3b:a1:90:d5:46:09:4b:5c:86:dc:5d:
2b:13:4d:05:02:98:00:6c:4c:20:74:2f:3b:c8:9c:
59:c2:fc:03:e7:31:40:15:74:f9:d1:04:8f:15:59:
6d:86:79:d0:bd:ec:f9:7c:47:eb:9f:04:d2:ed:b1:
62:e6:46:59:fb:bb:f4:94:3f:3b:83:6a:e6:62:95:
72:06:4f:0a:82:b2:44:c3:47:03:4b:63:cd:ec:9f:
7d:3a:d8:43:5f:71:7b:93:a4:76:cc:ec:ec:e0:30:
03:46:e5:f2:6f:08:7a:34:ac:d2:e0:c0:41:b3:2a:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:75:A1:C6:74:30:17:B4:A3:93:E3:7A:DA:3E:57:6D:D4:7F:7C:9B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NnWhxnQwF7Sjk-N62j5XbdR_fJs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:f5:9b:f8:b1:83:6e:c4:89:87:b9:cc:ee:a5:3e:10:7b:c5:
2c:f1:7b:f4:72:cb:ba:c9:c1:40:1d:f7:62:c6:88:88:a6:b0:
9e:8a:78:aa:fe:45:46:f5:71:f0:ac:c3:74:c2:6f:a3:2f:ae:
fb:a8:90:cd:86:c3:0b:13:ef:70:32:84:ef:dc:08:57:50:14:
16:ba:31:3a:d0:24:8b:ac:73:29:77:ae:a2:63:ab:f0:0f:9b:
04:9e:51:fd:57:df:83:77:5c:b9:65:41:31:81:58:c1:72:81:
f1:45:e2:87:ad:5f:ef:8b:3c:f5:29:c5:47:e5:99:48:ed:0b:
6a:35:ad:9d:ca:7a:56:73:2f:61:3f:f9:da:f3:9a:c8:ef:56:
3a:83:89:3d:5c:1a:3c:18:1c:87:a0:5c:5b:d9:45:9e:92:01:
02:36:ad:8d:c8:ee:d4:9d:e7:11:75:02:5b:70:cc:ad:33:fc:
e3:be:5f:72:36:ab:ef:36:42:d4:56:3f:01:8d:9f:7e:d2:07:
09:30:a7:c1:ab:ab:ee:ab:24:29:89:21:58:d1:e2:d6:f0:67:
ef:bc:f7:0c:56:1a:2e:99:81:f2:d5:9e:b6:14:f4:50:bc:c2:
4a:21:7d:87:83:bf:8a:50:d8:53:1e:6b:92:59:9b:4d:91:26:
99:3c:ba:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjEy
MzQxNDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDM2NzVBMUM2NzQzMDE3
QjRBMzkzRTM3QURBM0U1NzZERDQ3RjdDOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCf4EIV+3gk4lZlAUZ8q3FDgsvkNYlQk9CYQ/ZukeLzllI3y8sV
Y3pZi44Eh9aPviLXozhQFOOb7R3XdV8x4TVyzJHDj5KERIYiJQyG8Kj11x8r1TyH
YLju/hkHcWgvGnkFIax4eQpCMxUg1kO3Z8LtN1jl739ljX4B1fTymbeY68772Msi
xIvF+l07oZDVRglLXIbcXSsTTQUCmABsTCB0LzvInFnC/APnMUAVdPnRBI8VWW2G
edC97Pl8R+ufBNLtsWLmRln7u/SUPzuDauZilXIGTwqCskTDRwNLY83sn3062ENf
cXuTpHbM7OzgMANG5fJvCHo0rNLgwEGzKkovAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNnWhxnQwF7Sjk+N62j5XbdR/fJswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ObldoeG5Rd0Y3U2prLU42
Mmo1WGJkUl9mSnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAAT1m/ixg27EiYe5zO6lPhB7xSzxe/Ryy7rJ
wUAd92LGiIimsJ6KeKr+RUb1cfCsw3TCb6MvrvuokM2GwwsT73AyhO/cCFdQFBa6
MTrQJIuscyl3rqJjq/APmwSeUf1X34N3XLllQTGBWMFygfFF4oetX++LPPUpxUfl
mUjtC2o1rZ3KelZzL2E/+drzmsjvVjqDiT1cGjwYHIegXFvZRZ6SAQI2rY3I7tSd
5xF1AltwzK0z/OO+X3I2q+82QtRWPwGNn37SBwkwp8Grq+6rJCmJIVjR4tbwZ++8
9wxWGi6ZgfLVnrYU9FC8wkohfYeDv4pQ2FMea5JZm02RJpk8ugw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:31 2025 by rpki-client