Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nq_RALatoKQVqDIC9nO4YdxMn3k.roa
File: Nq_RALatoKQVqDIC9nO4YdxMn3k.roa (raw, json)
Hash identifier: GQHmjlAJai7GJ6QRrcLrYDrBXL8C2Qrpo2XvdmwUHXM=
Subject key identifier: 36:AF:D1:00:B6:AD:A0:A4:15:A8:32:02:F6:73:B8:61:DC:4C:9F:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A08
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nq_RALatoKQVqDIC9nO4YdxMn3k.roa
Signing time: Tue 10 Jun 2025 19:09:46 +0000
ROA not before: Tue 10 Jun 2025 19:09:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6664 (0x1a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 19:09:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=36AFD100B6ADA0A415A83202F673B861DC4C9F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:38:3a:55:f1:ea:f4:17:4a:37:95:71:dc:
0b:18:71:4f:f0:82:fe:50:ff:50:39:3c:14:45:51:
73:a2:0b:1a:0b:8c:f5:fe:95:97:d7:4d:bc:28:6d:
06:4a:ee:13:06:fe:02:6c:58:e7:5c:56:fc:0d:4e:
54:37:e0:f5:55:4f:5a:c3:98:be:99:8c:92:34:93:
dd:f0:cb:78:52:e8:7b:b0:90:9e:c7:59:f7:44:6b:
6a:2b:4b:55:58:0d:f0:74:84:d4:38:70:43:1d:8b:
b5:f3:c0:03:09:94:f6:59:97:b5:64:5c:75:bf:7d:
74:71:78:c2:2e:8d:1b:b0:c9:4f:c2:4d:6d:37:05:
da:9b:60:1b:4a:f1:d5:e4:0a:e8:29:99:86:fa:09:
ad:50:47:6b:67:04:fc:b4:e8:fb:e8:f5:2c:89:4e:
2e:48:ca:cf:0f:89:e5:c1:95:28:d3:cc:50:ed:9e:
95:ca:fa:47:64:36:d7:d6:e5:61:fd:07:db:9f:91:
86:46:14:7d:b2:2d:70:81:bd:f5:41:43:60:ac:98:
e6:e9:9c:60:01:65:6a:ad:cc:ba:a8:bc:c6:96:f9:
90:76:f1:b4:e3:34:b1:0b:9e:7f:cc:40:4a:0f:69:
7a:36:7f:49:19:8b:27:99:9f:40:67:6c:0c:9f:fd:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:D1:00:B6:AD:A0:A4:15:A8:32:02:F6:73:B8:61:DC:4C:9F:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nq_RALatoKQVqDIC9nO4YdxMn3k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:b1:f5:2b:af:0a:62:80:01:f7:58:c8:fc:6d:ae:4f:a8:32:
44:eb:2d:67:68:c0:c4:9d:0f:18:ec:df:af:19:1a:95:67:bb:
b7:f9:2d:95:59:52:cc:01:bb:19:5c:dc:1d:f8:ec:42:30:ee:
0c:f6:9e:68:47:47:34:42:ea:e3:ff:d5:a0:9b:46:0c:af:af:
28:9c:f3:6e:ba:ec:97:23:c5:a8:e8:6a:c8:be:a0:f4:de:e8:
6f:79:d4:23:ba:04:48:b4:89:71:2e:1f:4e:26:ef:25:7a:1d:
0f:5d:97:64:74:7c:cc:de:2f:53:d1:ed:71:90:e3:e3:60:5d:
af:a0:ee:74:be:1f:2e:38:be:a0:91:64:a3:bb:f9:31:f6:4e:
b2:a3:d3:01:e4:8b:44:ae:a5:5b:1a:26:0c:ca:43:d0:2e:34:
b2:69:df:bc:2e:ca:6d:f7:4f:bf:1d:d4:79:6a:e3:38:c7:ba:
03:84:2c:22:83:73:78:90:e6:6c:50:d0:b8:b6:21:5f:42:f6:
39:ed:14:c8:4b:bd:01:6a:22:01:81:12:59:0c:99:78:b0:2c:
aa:36:86:41:0b:0d:2b:ef:96:03:4f:bf:b6:b2:f9:17:07:b1:
a3:6d:b2:a7:14:4a:34:cf:7b:55:e8:bd:46:bb:c2:77:61:21:
26:a9:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:53:59 2025 by rpki-client