Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jpnrEgXMg5insEmyY3q9W1gJ63k.roa
File: jpnrEgXMg5insEmyY3q9W1gJ63k.roa (raw, json)
Hash identifier: qeqVWLJAZSyQr7KQBJoFewnHTvxJxCDhmszeCZArZ4o=
Subject key identifier: 8E:99:EB:12:05:CC:83:98:A7:B0:49:B2:63:7A:BD:5B:58:09:EB:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 036C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jpnrEgXMg5insEmyY3q9W1gJ63k.roa
Signing time: Sun 11 May 2025 15:37:52 +0000
ROA not before: Sun 11 May 2025 15:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 15:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8E99EB1205CC8398A7B049B2637ABD5B5809EB79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:a4:2d:d6:06:46:c0:44:d4:1d:87:2e:19:
da:c1:da:f6:5b:93:e1:7d:81:45:c5:b2:7c:8b:72:
15:90:86:a9:ad:6c:5e:e6:53:b5:83:1b:cb:43:de:
b3:f7:0d:f0:a4:a6:9a:d3:26:1c:fb:74:cb:da:5e:
5c:02:72:20:1d:e7:3a:43:46:7b:f2:f5:94:7e:2d:
c4:33:73:02:4a:77:4e:0a:32:1e:b5:41:33:fa:ee:
79:ba:21:a3:4b:66:1c:79:96:f2:13:16:8a:9a:56:
96:4b:99:ef:64:1e:c7:08:44:fa:aa:67:26:16:45:
fb:55:6b:8b:05:b1:5f:34:2c:c1:0f:4f:aa:04:d0:
9b:44:f0:7e:0a:75:cf:5e:21:39:3b:ed:b1:7f:2e:
c9:2c:5e:9a:cf:6a:b4:84:e7:6d:54:69:24:b9:c2:
04:92:d2:dc:86:85:23:21:61:04:f1:a3:83:15:f2:
79:56:f0:93:94:39:20:88:83:1e:5d:5c:40:15:c6:
43:e4:23:59:74:86:b0:73:97:44:96:4e:3c:24:f1:
7d:30:49:a9:1a:3c:dc:3e:53:1a:1a:68:ec:7a:b2:
a6:8f:84:77:81:f3:9f:75:b2:33:32:d5:2d:75:c5:
6b:9d:67:aa:05:27:d4:68:a7:71:82:2f:c4:b4:16:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:EB:12:05:CC:83:98:A7:B0:49:B2:63:7A:BD:5B:58:09:EB:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jpnrEgXMg5insEmyY3q9W1gJ63k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:dd:8a:9e:74:c5:2c:95:2d:4d:b6:04:99:3c:69:6c:fb:0f:
82:3b:f0:ed:16:d4:4f:fe:9a:78:d5:7a:4f:ef:e4:e7:34:d3:
83:9c:8f:a5:b1:63:89:3f:94:bf:86:2d:1f:03:d4:11:6f:cf:
f2:7f:60:69:f1:5f:22:53:b4:fc:fd:a0:46:8a:56:a4:69:e4:
31:6e:20:bd:e8:b6:5f:59:a3:66:fc:61:82:58:af:a1:ea:71:
da:e7:6b:8b:cf:54:ca:45:95:6c:3a:99:04:0b:da:2d:56:ab:
b5:cb:53:21:87:ff:cc:6d:94:3b:5b:21:37:15:26:83:42:75:
a2:55:9a:0f:82:17:0b:b3:80:b3:87:26:a2:bb:3b:b4:16:94:
b5:24:0b:aa:b7:be:48:27:e4:8e:98:bf:ca:6d:36:d6:12:2c:
50:d8:08:8f:71:6f:53:3f:88:b1:74:92:5e:ab:e7:12:8d:9d:
0b:b6:4c:f7:81:0b:a4:26:95:90:7d:50:07:83:a1:89:f0:40:
87:f5:06:47:1b:5f:66:b6:77:09:81:2b:13:05:b2:d8:a3:59:
cc:60:fe:a4:07:e9:c1:2a:97:9b:82:c2:c0:ab:f7:45:33:96:
c0:ce:27:26:ca:7f:68:af:2f:25:aa:d9:81:09:cd:b5:67:6e:
b2:4d:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:14:46 2025 by rpki-client