Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NtkemEYHFNJVqwYFMw0vl0C28b0.roa
File: NtkemEYHFNJVqwYFMw0vl0C28b0.roa (raw, json)
Hash identifier: Ya/B8xeV2ijp7x28gmH+IA+l/flkbIu6rRMC+xqblOY=
Subject key identifier: 36:D9:1E:98:46:07:14:D2:55:AB:06:05:33:0D:2F:97:40:B6:F1:BD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DA8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NtkemEYHFNJVqwYFMw0vl0C28b0.roa
Signing time: Sun 25 May 2025 07:08:36 +0000
ROA not before: Sun 25 May 2025 07:08:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 07:08:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=36D91E98460714D255AB0605330D2F9740B6F1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:b7:ef:f4:52:f9:3a:85:01:ea:5e:19:f4:
19:95:03:70:bc:38:cd:fd:0b:4e:8c:9b:dc:82:87:
d4:dd:dc:56:51:ea:ec:7b:e2:46:ca:7c:4f:c9:22:
ab:d6:7b:9c:aa:08:b5:43:84:10:4b:72:f9:12:2c:
73:22:91:bf:c0:0b:af:63:d9:3f:3e:35:9f:eb:e4:
ce:a7:e3:57:cd:e7:fe:34:0f:b7:ca:62:51:33:79:
81:e7:eb:29:d7:f7:13:e6:6c:bb:4c:d4:2a:e4:88:
51:4f:94:f2:e8:e0:ab:4e:57:41:b5:f6:11:fa:52:
41:a2:b4:16:73:09:d7:19:3a:3f:bb:f2:69:54:fe:
22:f7:47:84:b8:a3:b1:2a:4e:33:62:49:e1:70:71:
44:c1:64:25:20:fd:e9:fe:01:57:0b:bc:3d:e3:bb:
d3:8d:6e:dd:8d:fb:96:ee:7c:b8:a3:81:b5:91:a4:
cf:35:64:10:8a:51:ec:92:90:d4:2a:9f:98:30:55:
11:1c:0c:65:10:61:21:1a:a8:8e:bb:ae:1d:2d:d9:
a6:0d:6e:f7:26:40:40:f6:5b:f3:7c:d1:68:cf:e7:
c4:a6:fe:b3:49:61:a7:0e:71:52:42:7f:98:bf:f4:
e6:62:96:fb:fa:ac:04:95:e4:69:28:7c:4b:b2:de:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:1E:98:46:07:14:D2:55:AB:06:05:33:0D:2F:97:40:B6:F1:BD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NtkemEYHFNJVqwYFMw0vl0C28b0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:4f:cc:e6:76:70:25:c6:12:5d:8e:0f:6c:f3:69:34:93:42:
84:8a:81:ac:f2:b7:e8:30:be:8d:13:af:96:a3:57:22:4b:eb:
9b:9b:9a:fe:1e:d4:af:3c:ad:4c:ad:f9:fb:34:82:ab:ca:94:
90:d9:d9:e2:0c:84:ea:d9:a8:3b:b7:64:d7:b6:3a:3d:95:71:
be:5c:90:a2:9a:8e:eb:8d:3b:43:b6:42:a1:45:46:a9:53:21:
b0:34:e3:7a:d9:30:37:cc:9a:81:e3:f5:0b:1f:ae:c2:8c:b5:
2e:f7:d2:61:ef:9e:61:8f:5a:e9:3f:f0:9a:7d:cc:e2:53:b6:
39:71:6d:e7:56:8e:9f:fa:54:ec:05:e0:75:0d:0e:6e:13:1f:
27:c2:42:7d:9f:31:9e:8f:b5:52:62:be:ce:28:93:d2:4c:07:
57:de:66:b2:cf:5e:7f:c6:7b:e0:96:d6:1f:97:e4:66:b1:44:
b3:4e:f6:89:80:f5:09:f2:fd:4d:fc:d8:93:1b:96:43:fb:ef:
ad:78:1a:0d:bf:19:81:f2:b9:fa:1a:40:2d:bb:85:fb:25:36:
82:37:04:9b:12:56:9e:20:74:e5:27:7a:e3:77:df:0a:88:84:
3b:17:0c:83:ab:c6:9f:71:63:bc:69:d5:7f:bf:55:03:21:a7:
94:da:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:28 2025 by rpki-client