Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kNAfjJBKWBCLsTzfF1FNrhYkU68.roa
File: kNAfjJBKWBCLsTzfF1FNrhYkU68.roa (raw, json)
Hash identifier: tQlo2RR8ttwxWvfFyp9TRlqVWCdN0sk+cDYV3OKSz9s=
Subject key identifier: 90:D0:1F:8C:90:4A:58:10:8B:B1:3C:DF:17:51:4D:AE:16:24:53:AF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 079C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kNAfjJBKWBCLsTzfF1FNrhYkU68.roa
Signing time: Sat 17 May 2025 05:38:07 +0000
ROA not before: Sat 17 May 2025 05:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 05:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=90D01F8C904A58108BB13CDF17514DAE162453AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:af:e7:e0:21:99:fc:89:83:4e:b7:c2:d0:
ca:08:60:99:63:6f:51:9b:57:89:77:4c:df:ae:f6:
72:36:ec:72:6b:f5:fa:fe:f7:5c:6c:d6:9a:4e:b3:
06:ac:b3:04:68:fa:e8:2c:c6:97:cb:57:a7:fb:da:
81:e7:8a:41:c7:88:64:f2:84:6d:0d:35:ce:c9:d8:
37:24:1d:66:b8:c7:73:8f:3f:4d:3e:1b:fa:a1:d2:
f7:f4:ce:93:68:8a:68:62:86:7f:22:13:16:b6:71:
61:78:79:7f:42:55:c5:ac:c2:68:f3:d6:d3:fd:0c:
9d:d4:da:25:f5:01:92:0c:e6:3d:1c:72:16:6a:6c:
ac:35:31:d5:30:b8:d2:d7:f7:6d:65:3a:33:fd:74:
22:b7:f0:1e:c4:75:ce:d0:23:c5:47:c2:63:37:06:
85:ef:e7:2b:7d:3f:15:b7:27:35:d4:78:cd:88:a5:
d7:60:3b:e1:f0:7d:93:90:8c:d8:f2:f4:1c:c8:f1:
13:73:d8:6a:15:36:7e:0b:a8:40:61:8b:7e:3e:85:
b0:c7:72:07:ef:99:f9:24:5a:98:b1:4a:61:46:f1:
43:da:8a:64:7c:77:29:83:cc:7e:51:b5:2d:ab:84:
64:61:92:55:6b:30:08:c6:c3:67:4b:48:ad:f0:5a:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:1F:8C:90:4A:58:10:8B:B1:3C:DF:17:51:4D:AE:16:24:53:AF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kNAfjJBKWBCLsTzfF1FNrhYkU68.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:89:77:74:9c:ab:e8:7a:57:0c:d6:e3:8d:f0:bb:54:86:42:
6a:22:33:b0:52:6c:ee:32:6c:27:63:da:c7:d8:3b:b0:c8:79:
80:29:42:48:27:c4:d1:c6:c8:86:f2:5d:36:ce:d0:2c:54:b3:
e1:d2:bc:85:ab:b9:d9:e9:c9:19:73:f0:2a:8c:c6:03:dd:d1:
23:83:57:16:8c:ee:58:58:82:45:34:c0:1e:da:91:29:89:ea:
e3:e0:ff:01:8c:33:65:2e:91:e4:2a:d0:ed:8e:f4:f2:c0:2f:
72:fe:07:78:50:9d:46:d4:ba:d5:00:55:e4:6d:9a:ba:24:72:
8d:43:66:83:ed:08:ed:f7:12:b0:90:78:80:d6:17:cd:3b:2e:
7d:19:81:e2:79:b8:d2:7d:df:25:23:6e:f5:bb:02:f2:77:d6:
fb:53:f0:c8:73:d1:e1:70:2e:97:85:71:9c:43:3f:19:97:c5:
43:f4:f1:01:26:1f:fd:6d:12:31:22:2c:79:9c:aa:8f:4e:6f:
1d:74:b1:9a:c7:f7:da:d5:23:83:d2:09:2c:1b:30:2b:68:e2:
bb:36:34:0a:8c:6c:24:41:ad:57:48:02:0b:03:91:ee:94:ad:
f9:f2:e5:8d:36:09:ea:05:53:e9:56:24:eb:76:3f:8b:07:21:
95:04:f1:ad
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
NTM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkwRDAxRjhDOTA0QTU4
MTA4QkIxM0NERjE3NTE0REFFMTYyNDUzQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Sa/n4CGZ/ImDTrfC0MoIYJljb1GbV4l3TN+u9nI27HJr9fr+
91xs1ppOswasswRo+ugsxpfLV6f72oHnikHHiGTyhG0NNc7J2DckHWa4x3OPP00+
G/qh0vf0zpNoimhihn8iExa2cWF4eX9CVcWswmjz1tP9DJ3U2iX1AZIM5j0cchZq
bKw1MdUwuNLX921lOjP9dCK38B7Edc7QI8VHwmM3BoXv5yt9PxW3JzXUeM2Ipddg
O+HwfZOQjNjy9BzI8RNz2GoVNn4LqEBhi34+hbDHcgfvmfkkWpixSmFG8UPaimR8
dymDzH5RtS2rhGRhklVrMAjGw2dLSK3wWun9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkNAfjJBKWBCLsTzfF1FNrhYkU68wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9rTkFmakpCS1dCQ0xzVHpm
RjFGTnJoWWtVNjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABKJd3Scq+h6VwzW443wu1SGQmoiM7BSbO4y
bCdj2sfYO7DIeYApQkgnxNHGyIbyXTbO0CxUs+HSvIWrudnpyRlz8CqMxgPd0SOD
VxaM7lhYgkU0wB7akSmJ6uPg/wGMM2UukeQq0O2O9PLAL3L+B3hQnUbUutUAVeRt
mrokco1DZoPtCO33ErCQeIDWF807Ln0ZgeJ5uNJ93yUjbvW7AvJ31vtT8Mhz0eFw
LpeFcZxDPxmXxUP08QEmH/1tEjEiLHmcqo9Obx10sZrH99rVI4PSCSwbMCto4rs2
NAqMbCRBrVdIAgsDke6Urfny5Y02CeoFU+lWJOt2P4sHIZUE8a0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:21 2025 by rpki-client