Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hf_IADUXjlc4ALFHEoA0RcHkzsU.roa
File: hf_IADUXjlc4ALFHEoA0RcHkzsU.roa (raw, json)
Hash identifier: OJPnWaNK/t9qSx7bK/4j5TsztblPKkqicgODldP5gCY=
Subject key identifier: 85:FF:C8:00:35:17:8E:57:38:00:B1:47:12:80:34:45:C1:E4:CE:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C34
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hf_IADUXjlc4ALFHEoA0RcHkzsU.roa
Signing time: Fri 13 Jun 2025 16:40:39 +0000
ROA not before: Fri 13 Jun 2025 16:40:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7220 (0x1c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 16:40:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=85FFC80035178E573800B14712803445C1E4CEC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:17:6d:ec:c0:da:2d:13:ba:fa:b5:07:d9:
c6:a3:10:27:28:e6:c3:0a:51:9d:6d:ef:b3:c3:c4:
df:fe:c8:fd:14:3f:44:3b:44:7d:7b:37:06:25:36:
c3:35:e9:21:f4:08:fb:cc:a5:a8:8d:72:27:3f:47:
0f:60:27:1a:c3:44:06:b6:da:b6:32:fc:b4:f6:05:
44:9e:0e:73:26:95:32:63:26:d0:2b:36:ea:c0:39:
99:ed:f4:16:bd:1a:ed:68:4d:8a:d6:15:96:e8:e1:
d6:8a:1f:a6:16:c8:66:8f:0a:17:b4:31:c8:5a:be:
16:2d:d0:9c:f2:0e:bd:a6:4f:b6:cd:1a:24:17:dd:
92:96:4e:4d:2b:28:76:f1:18:0e:ed:8e:0e:1a:07:
a9:2a:06:96:1c:1e:0f:47:79:e8:c2:bf:83:b9:9d:
fb:87:fb:78:cd:4c:46:c4:e7:17:1f:90:4d:5c:2c:
88:b7:f9:f1:d0:88:e2:82:c6:54:5d:35:ef:28:85:
3f:e4:41:65:16:84:78:8e:69:08:7e:b0:f5:c5:17:
9d:ca:c0:9b:57:c5:a1:76:77:32:e4:d8:95:65:d8:
4a:4c:ce:a8:df:6c:75:05:b3:51:fa:65:52:e8:78:
1e:df:e8:4f:54:75:be:c9:5e:8d:37:ea:95:db:c2:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:C8:00:35:17:8E:57:38:00:B1:47:12:80:34:45:C1:E4:CE:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hf_IADUXjlc4ALFHEoA0RcHkzsU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:62:c7:a2:34:17:44:d1:10:5a:47:fc:84:71:c7:16:59:ab:
ec:bf:28:c2:c5:90:27:88:70:e4:0e:9a:57:a5:95:4b:90:32:
4f:46:a6:62:3e:c4:7f:b6:fd:0c:01:66:89:f6:89:40:14:f0:
ac:57:ff:27:8e:05:dc:fa:9c:35:48:66:f3:a3:b2:62:bc:cd:
b9:53:4a:f1:46:04:3d:af:0d:b0:63:f3:fa:ce:b5:90:09:8b:
07:4a:f3:89:11:ac:2c:1f:74:d5:d4:5c:40:00:31:a6:ea:a6:
18:75:65:04:b8:5e:02:04:cf:1c:eb:46:5e:3a:c7:00:53:fb:
00:8e:df:1b:7e:b9:f9:49:d8:03:c1:a1:f2:1f:eb:d2:68:d1:
03:7c:1d:7b:a2:85:64:63:01:01:9f:0b:9f:03:61:a6:67:b6:
ee:fe:a5:96:f0:06:06:59:13:d2:13:6e:41:c4:45:f4:6d:a4:
97:5c:9f:94:0d:c9:0f:e5:9e:f7:6a:e9:66:42:02:9f:3f:0a:
2c:92:3c:92:57:35:34:a7:5b:40:e7:34:66:6a:61:71:c0:1f:
29:bd:c8:c2:39:f2:84:bd:8a:53:ce:20:f8:54:92:5a:57:f9:
bd:1a:76:04:55:07:66:7f:06:9b:5b:0a:87:89:6e:8b:12:a4:
81:a0:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:40 2025 by rpki-client