Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fxgF9VgGjTp7u26xq9dXtGG1-U4.roa
File: fxgF9VgGjTp7u26xq9dXtGG1-U4.roa (raw, json)
Hash identifier: rKpGPPIsEt5lDXzENDZlNwfXftNzLvGzGG6rWrszWUU=
Subject key identifier: 7F:18:05:F5:58:06:8D:3A:7B:BB:6E:B1:AB:D7:57:B4:61:B5:F9:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09A4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fxgF9VgGjTp7u26xq9dXtGG1-U4.roa
Signing time: Mon 19 May 2025 22:38:13 +0000
ROA not before: Mon 19 May 2025 22:38:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2468 (0x9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 22:38:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7F1805F558068D3A7BBB6EB1ABD757B461B5F94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:de:fa:33:6c:df:da:ef:fb:c6:c3:d5:49:
eb:ac:89:cc:2b:27:4d:43:7f:3f:62:ef:2a:3e:4a:
39:d5:a5:28:cd:bb:29:a5:a3:45:e5:21:6e:b7:e3:
f1:83:3a:b6:6b:ff:22:50:91:bf:01:0f:f8:e7:8b:
c5:e0:ff:c1:31:6c:d6:4d:d3:46:6c:db:c6:a5:56:
74:2b:90:22:a4:ba:84:05:31:17:93:72:f1:1d:0f:
de:1c:3b:0b:5f:19:6e:7a:45:b7:52:86:41:56:c4:
50:ab:fd:65:a5:5d:0f:e5:73:82:20:be:c0:ef:dd:
fc:89:90:82:ca:ee:fb:d3:cb:fc:44:79:26:12:1d:
30:e1:14:ce:37:29:bb:73:55:5d:06:22:83:d8:27:
d2:4b:6b:a2:dc:1d:11:bf:d7:14:b9:32:86:46:47:
b5:6f:10:de:9f:38:0e:72:88:07:ec:06:a1:77:99:
fe:65:7d:8f:54:45:5b:23:76:ee:6e:ae:b6:67:18:
ea:3f:1b:b9:20:34:65:63:09:62:9a:e7:cb:94:86:
a7:d2:87:fa:5e:72:32:36:f9:ba:f8:c1:da:bf:7d:
d2:02:ae:c0:e6:95:75:24:08:b3:14:0a:c0:b4:25:
64:6d:c0:36:a3:cb:9b:54:37:7e:18:27:2b:8c:53:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:05:F5:58:06:8D:3A:7B:BB:6E:B1:AB:D7:57:B4:61:B5:F9:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fxgF9VgGjTp7u26xq9dXtGG1-U4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:ab:43:d5:d4:6c:e1:c6:b2:27:41:d7:bb:8b:87:ff:b4:b7:
bb:28:f8:86:e1:97:d6:9c:74:f8:89:c6:e0:18:9e:23:18:08:
4e:d9:ae:37:4e:7e:8d:c2:d8:7e:48:6e:f7:48:3b:57:c2:3f:
fe:dd:19:7c:32:fe:67:69:df:52:49:a2:e7:ca:97:10:41:d0:
d8:ee:0e:e9:5d:db:6a:c7:35:ce:d8:2f:13:a0:dc:14:4b:f7:
30:f9:d4:58:89:af:02:7d:fd:1e:72:94:cc:61:11:39:c0:19:
72:13:2f:30:d0:c3:9e:4f:8c:4a:fa:f7:69:ef:88:83:eb:4f:
83:f1:04:65:12:4c:e9:b5:14:e3:d2:dd:64:04:b3:05:21:14:
7d:9b:81:6a:ec:a8:2f:1b:c9:10:00:ed:bd:fd:ab:48:dc:60:
88:65:1b:0d:07:60:8d:39:f6:ac:7f:a7:96:f1:80:49:c2:a4:
8c:eb:82:44:e0:1b:1b:04:38:34:92:98:7a:c6:77:17:33:cf:
38:b7:ea:a8:a5:10:91:07:1f:5c:17:ae:7a:c7:6d:41:2f:39:
63:3c:33:a4:25:96:f4:0e:83:eb:48:04:b3:02:13:d2:73:3e:
52:d2:d6:6d:7b:48:e2:e9:94:c4:3e:22:01:eb:85:22:4a:b3:
e3:58:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:32:26 2025 by rpki-client