Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nzvo_O85LjkHe8-l-MKGBla-JJQ.roa
File: Nzvo_O85LjkHe8-l-MKGBla-JJQ.roa (raw, json)
Hash identifier: whD0ORxOrIBWzKmW1rH+wFE1ROZPjjolXnyuRncmzAY=
Subject key identifier: 37:3B:E8:FC:EF:39:2E:39:07:7B:CF:A5:F8:C2:86:06:56:BE:24:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C30
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nzvo_O85LjkHe8-l-MKGBla-JJQ.roa
Signing time: Fri 23 May 2025 08:08:25 +0000
ROA not before: Fri 23 May 2025 08:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 08:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=373BE8FCEF392E39077BCFA5F8C2860656BE2494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:d1:e8:f3:ba:ed:10:f4:fb:eb:4e:9b:7d:
a4:be:f1:fe:36:a2:73:3a:35:46:e7:df:7a:c9:f7:
b4:9a:fe:ba:c1:20:71:9a:05:67:12:9a:e7:ea:3a:
dc:52:7d:31:86:f7:ff:20:76:be:b7:a9:0f:80:6e:
a8:e6:ae:c9:58:d2:d4:0e:bd:aa:b3:42:86:5f:fe:
e7:26:2c:15:e7:a7:98:84:f7:4d:dd:e6:cb:9e:8b:
4c:15:54:dc:e8:e6:f6:82:4e:72:8c:16:ec:dd:be:
b2:dc:77:c3:97:71:bb:a3:20:b9:37:7d:40:39:f6:
9c:e3:ee:2e:11:34:42:1d:b6:f5:96:d3:04:69:02:
a2:14:67:e6:bd:b0:d6:61:42:22:c2:e2:92:93:67:
a9:13:91:bf:f1:6e:fb:5a:7a:1e:31:e2:57:e1:f1:
50:b8:df:50:f9:e5:8f:7b:3b:d4:b6:15:2c:f3:df:
4a:35:f7:b5:4f:d0:f0:f6:6a:39:eb:a0:4f:f8:1c:
89:99:bf:5a:b2:22:49:d5:4f:50:43:47:6a:1e:2a:
f8:67:f3:f6:bf:56:c8:ec:5e:f6:01:4f:e8:24:bd:
f3:99:7a:91:18:88:ce:1c:9c:72:2d:14:ab:d2:66:
00:a4:3f:18:89:ae:3a:9d:f6:60:d4:ff:d8:91:11:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:E8:FC:EF:39:2E:39:07:7B:CF:A5:F8:C2:86:06:56:BE:24:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nzvo_O85LjkHe8-l-MKGBla-JJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:4e:6e:ab:be:c8:5c:e4:98:04:95:2a:b7:18:c8:cb:99:a3:
f4:2e:84:fd:9f:03:1a:dc:fe:20:6c:95:cd:c6:a1:7b:95:60:
3e:9f:5b:a2:5b:a0:a1:64:c8:62:7a:c1:d8:45:12:3c:a0:84:
39:0e:a2:e8:7b:af:00:41:a2:4b:9a:46:69:f2:28:04:fd:fc:
c0:72:d2:ec:38:25:90:37:98:e6:49:63:52:49:f8:a3:5e:b4:
2d:f4:66:7d:6f:14:fb:8d:50:4a:c8:69:66:ae:a4:6c:bf:69:
d3:97:44:49:71:11:60:b3:81:05:a8:6c:bf:2a:4e:1a:66:51:
02:83:e5:27:00:b1:89:66:9c:5b:b4:97:66:22:25:fe:ba:ad:
05:52:bd:43:24:bb:c5:a2:e9:7a:ae:aa:01:06:ce:7e:49:3e:
f5:22:28:74:af:17:9e:a1:66:34:66:21:b4:98:7e:60:0c:21:
35:27:11:ef:37:bc:a6:7c:da:47:2f:58:ae:8f:ef:06:9a:77:
c4:f0:77:12:ba:d2:f3:1a:b5:9d:c5:a0:6a:da:c7:1b:dd:62:
9e:49:08:7b:39:2d:ab:5e:6b:e5:cd:6e:75:8b:4c:97:ae:1e:
7e:a0:95:b4:50:be:e5:87:ef:d4:3c:6b:38:4f:50:d4:f4:eb:
1e:eb:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:16:06 2025 by rpki-client