Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/f7moXWbcUhjtu9dhsXpce3XUE2I.roa
File: f7moXWbcUhjtu9dhsXpce3XUE2I.roa (raw, json)
Hash identifier: s5IlYa8dYEcoBlSetu2Evmgu2xxKXYZ7xkn0LI7bSPI=
Subject key identifier: 7F:B9:A8:5D:66:DC:52:18:ED:BB:D7:61:B1:7A:5C:7B:75:D4:13:62
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0394
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/f7moXWbcUhjtu9dhsXpce3XUE2I.roa
Signing time: Sun 11 May 2025 20:37:53 +0000
ROA not before: Sun 11 May 2025 20:37:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 20:37:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7FB9A85D66DC5218EDBBD761B17A5C7B75D41362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:aa:a8:1d:47:6c:7e:24:64:47:16:ba:f2:
15:10:0d:c6:93:63:2c:c6:be:2f:a1:3e:4c:ea:24:
33:f9:c3:b0:4e:39:1f:a1:bc:6e:6c:15:d9:2e:84:
c4:cb:8d:d9:92:ab:a8:fa:01:1a:ad:4b:c8:d2:d7:
d3:c8:b8:b2:76:92:79:7e:37:c2:a7:92:95:62:95:
01:d4:d3:82:0e:7f:91:0e:b5:3b:d0:26:bd:a8:a9:
5c:0b:22:37:15:24:f8:10:65:8f:a6:d8:30:1e:75:
4f:82:2c:3c:e8:6e:3f:17:18:84:6e:fc:c8:39:2d:
61:a6:db:a6:44:ba:4e:4b:45:6a:66:c8:e7:ab:fb:
53:11:cd:32:ba:53:af:a9:2d:58:81:25:b0:c4:d3:
81:c3:4c:d5:98:8d:b2:ad:f8:33:ef:6f:eb:f9:4a:
01:4f:0f:c9:9b:5f:36:89:fa:77:e3:b4:88:2b:df:
00:43:9a:a9:78:2a:39:d4:64:e7:01:98:c7:59:f7:
ee:f0:f1:d4:53:51:ac:bd:4e:ea:f6:0d:12:73:59:
0b:73:43:c8:d9:e1:1c:91:83:1d:12:b0:b7:6e:45:
c8:61:ea:7f:69:18:d4:63:98:53:91:33:71:58:93:
5a:bc:87:c8:34:9d:13:96:1a:ff:fc:96:d9:57:5d:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:A8:5D:66:DC:52:18:ED:BB:D7:61:B1:7A:5C:7B:75:D4:13:62
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/f7moXWbcUhjtu9dhsXpce3XUE2I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:fe:6f:48:b2:74:44:2e:79:67:92:84:d1:5a:e5:92:b5:b3:
94:87:96:ad:09:bd:6a:41:32:67:ba:fc:51:f3:a0:30:5c:a1:
4d:ec:d7:71:73:8d:9c:f1:db:c9:aa:c5:1d:6d:1f:e9:75:d3:
80:df:7a:3c:9d:68:86:15:da:20:4f:cb:09:0f:05:db:3c:e9:
42:9c:f8:86:9a:3d:5f:d6:18:7f:3c:13:a8:65:9c:fa:88:e1:
c8:5d:50:91:41:ba:96:32:78:01:57:4e:3e:05:ce:a2:ac:37:
e4:25:24:d8:ed:83:0d:95:fd:1c:c3:f1:8d:1c:8c:fc:f4:28:
f8:d9:56:f0:4c:64:0b:90:ac:3e:ee:53:de:28:c0:87:f6:ff:
64:13:8a:0b:f7:97:87:ad:36:c8:ac:1e:a0:f3:c1:ac:43:81:
cd:c1:1a:f3:92:ee:82:92:23:ba:0f:be:97:b1:83:84:9a:62:
1d:73:e3:71:17:9f:10:e0:1f:a6:f2:6a:fe:fa:c8:00:c3:be:
97:29:08:3c:91:55:ac:cf:c3:33:12:7f:84:ca:53:12:af:32:
21:ed:90:56:ed:d1:6e:03:a5:1c:18:ce:73:df:3b:61:21:31:
b3:06:9e:3d:66:c2:b3:74:5c:68:27:d2:ad:29:b9:2a:fa:57:
bc:e3:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:57 2025 by rpki-client