Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/em93My2qX1td9gnrqpcsja4Saig.roa
File: em93My2qX1td9gnrqpcsja4Saig.roa (raw, json)
Hash identifier: jRbFL2YpBnnY+nywYkZIwMfVDDPfyIGzsfiLKyy4Gac=
Subject key identifier: 7A:6F:77:33:2D:AA:5F:5B:5D:F6:09:EB:AA:97:2C:8D:AE:12:6A:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EA8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/em93My2qX1td9gnrqpcsja4Saig.roa
Signing time: Mon 26 May 2025 15:08:42 +0000
ROA not before: Mon 26 May 2025 15:08:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3752 (0xea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 15:08:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7A6F77332DAA5F5B5DF609EBAA972C8DAE126A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:0a:5e:d4:43:05:c7:74:d1:c8:66:f5:8c:
fe:36:3a:0d:59:17:88:07:f5:90:d4:be:0e:20:7c:
83:0f:bd:a9:9f:c4:92:98:d3:10:6e:43:b0:eb:56:
0b:22:b4:83:d8:28:87:2b:5d:aa:66:52:68:c7:9c:
f7:95:bb:ae:7a:ba:53:04:23:41:42:13:cf:80:a1:
68:a4:d8:17:4e:45:f2:11:90:1e:26:f7:41:70:9e:
97:d4:c2:f6:bf:b5:e5:42:9b:b3:85:26:be:ad:05:
8d:80:38:50:06:b3:7e:54:6c:27:b5:e2:0a:3d:dd:
d4:e6:f8:35:a9:13:30:19:a7:49:9c:66:63:04:02:
6e:f7:b6:38:62:f2:3c:b9:01:5d:e0:66:c8:ce:56:
19:3b:d5:7f:0a:02:7d:21:a1:28:37:8a:b0:17:ef:
39:f9:0b:6c:30:e5:c9:d3:00:b1:3a:bb:a1:0e:40:
b3:0e:81:8b:fb:2e:34:50:f1:b6:cd:18:43:a0:40:
35:5c:72:04:2c:05:f5:49:6b:4d:d0:7b:e3:d2:79:
73:db:2c:8e:7e:06:5b:f8:8f:3a:4d:9e:14:b8:0e:
52:e4:86:3c:0f:e4:ac:f3:3b:fb:e3:41:7b:4f:89:
68:da:f2:7e:42:ce:37:28:17:04:c2:21:df:11:17:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:77:33:2D:AA:5F:5B:5D:F6:09:EB:AA:97:2C:8D:AE:12:6A:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/em93My2qX1td9gnrqpcsja4Saig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:22:cf:0d:8b:00:fd:b8:ef:5d:50:4d:3e:72:13:aa:5e:3a:
44:54:4f:ea:b0:2c:8c:cb:45:55:56:89:ca:47:a3:95:50:64:
1d:4a:bd:6d:96:f6:f4:fe:23:b8:b4:b8:cd:32:df:c8:00:99:
35:0a:46:a9:b3:43:56:25:58:f9:16:3e:6e:f5:64:9a:41:64:
69:c5:ca:f8:40:1d:95:60:a3:61:09:67:45:ee:a2:ec:26:66:
96:2d:64:b7:61:61:ae:da:c2:8a:25:03:e7:8e:58:aa:63:ff:
e9:8d:52:8d:94:7a:ad:53:ab:9a:96:8f:35:0d:af:69:20:59:
c3:bb:d9:40:47:c9:fb:b5:60:fb:a9:2a:4f:8e:c7:eb:11:44:
c5:7a:e6:47:dc:94:c9:ba:16:ba:65:fb:2b:56:2d:6c:a2:c1:
1b:cb:6d:09:0e:99:02:7f:ff:ca:4a:01:93:d2:5a:94:91:ec:
54:93:c6:df:1b:34:d8:2e:42:c1:3a:3d:91:c3:4c:d2:29:2c:
56:7d:ea:e4:77:76:bc:ea:4b:f6:1a:d7:61:be:f4:c8:ad:38:
f9:04:98:ca:17:49:07:06:39:98:34:d2:ef:16:8f:d2:05:01:
9b:be:6a:3a:1e:c4:e0:9a:ff:92:8a:01:93:7b:6e:25:2e:71:
cb:47:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:20:32 2025 by rpki-client