Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/n8xpmlh-h4UEs6CuVTExHwTQcdg.roa
File: n8xpmlh-h4UEs6CuVTExHwTQcdg.roa (raw, json)
Hash identifier: NxebuqPtPFSsCUC9D4DmW8uWPMGm62lZEZO7BsvqGb4=
Subject key identifier: 9F:CC:69:9A:58:7E:87:85:04:B3:A0:AE:55:31:31:1F:04:D0:71:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01BC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/n8xpmlh-h4UEs6CuVTExHwTQcdg.roa
Signing time: Fri 09 May 2025 09:37:45 +0000
ROA not before: Fri 09 May 2025 09:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 09:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9FCC699A587E878504B3A0AE5531311F04D071D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:eb:4a:56:77:eb:41:98:26:b4:23:23:c4:
fd:b1:32:61:06:3c:2c:86:d1:1c:60:19:c1:ea:25:
ac:6b:a5:71:62:4e:40:fc:f4:3f:b4:d7:dc:dd:e0:
60:3d:d7:a2:09:93:09:ec:39:b8:ac:a7:60:51:29:
e3:9f:26:92:b6:53:77:b1:13:13:d2:f1:0f:45:10:
a3:ad:46:7e:24:84:a8:03:28:19:47:3c:7e:f0:3f:
55:1c:17:13:52:d6:1e:c9:23:94:bd:c0:23:3a:ea:
f2:d6:bd:f2:69:d1:6d:b2:a6:a2:c7:cf:7c:bd:ab:
ab:36:cc:11:7a:f0:cf:ac:1c:ab:e0:ed:0c:7d:57:
d5:a8:dd:f8:d1:e9:1e:54:38:fc:3e:51:fc:60:9d:
a3:68:32:ab:39:b9:92:59:23:8f:0b:5f:28:c8:dc:
5a:09:7f:08:ea:c6:d6:4a:ef:1e:db:b4:01:6d:ab:
4d:3f:64:ff:80:b3:a3:cc:e0:ad:92:a5:a0:c4:3b:
82:4c:13:11:2a:cd:8c:20:d3:fa:97:7d:24:a5:36:
ee:8d:c1:30:46:e6:48:1b:f3:da:3a:13:89:de:c3:
69:a5:83:5f:2d:ce:9a:d3:fc:66:8d:96:38:f5:8a:
89:e9:af:b5:f6:cd:2e:9b:a8:c0:a2:79:92:94:39:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CC:69:9A:58:7E:87:85:04:B3:A0:AE:55:31:31:1F:04:D0:71:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/n8xpmlh-h4UEs6CuVTExHwTQcdg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:82:2d:88:28:5e:93:a4:a4:38:24:9b:8c:94:78:ce:e4:43:
a0:71:66:0f:bc:05:89:3f:e0:c4:db:22:90:86:41:72:cf:a4:
47:14:45:83:87:e9:86:d0:80:02:4a:ab:0a:8e:5e:e7:53:a1:
b7:8b:b1:e7:b8:47:30:e5:8c:dd:5e:fb:fb:78:c9:e7:9b:a4:
8c:bf:c4:68:43:dd:f4:eb:a1:c6:9f:dd:04:23:88:c8:00:57:
a5:1a:ea:08:c0:ad:33:77:a5:31:a7:e0:7f:70:49:c4:e8:30:
29:ed:ff:67:6b:44:a0:85:39:ed:ad:6f:5c:26:39:4b:78:7e:
24:d9:97:1c:0a:bd:86:7d:4a:3c:c7:6c:e8:4b:26:06:47:a0:
a1:74:22:21:17:61:59:3f:d3:02:ab:57:84:e7:13:aa:f6:77:
08:00:6d:a4:60:f2:56:54:16:5b:a7:82:4b:49:1d:7c:b6:8e:
ec:61:f2:11:54:86:88:8b:48:74:25:0b:8a:ae:5f:ac:83:2f:
b0:0d:ec:f1:4c:e8:c7:59:66:55:fa:58:ae:9c:03:1e:94:7b:
bf:c8:95:25:22:75:95:74:cb:bc:da:3c:d6:16:6b:8a:6a:4d:
06:9d:85:6f:64:e8:7f:a3:b0:0d:71:80:12:ce:13:fb:1c:bc:
a9:0b:4d:d6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw
OTM3NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlGQ0M2OTlBNTg3RTg3
ODUwNEIzQTBBRTU1MzEzMTFGMDREMDcxRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyletKVnfrQZgmtCMjxP2xMmEGPCyG0RxgGcHqJaxrpXFiTkD8
9D+019zd4GA916IJkwnsObisp2BRKeOfJpK2U3exExPS8Q9FEKOtRn4khKgDKBlH
PH7wP1UcFxNS1h7JI5S9wCM66vLWvfJp0W2ypqLHz3y9q6s2zBF68M+sHKvg7Qx9
V9Wo3fjR6R5UOPw+UfxgnaNoMqs5uZJZI48LXyjI3FoJfwjqxtZK7x7btAFtq00/
ZP+As6PM4K2SpaDEO4JMExEqzYwg0/qXfSSlNu6NwTBG5kgb89o6E4new2mlg18t
zprT/GaNljj1ionpr7X2zS6bqMCieZKUOdqFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUn8xpmlh+h4UEs6CuVTExHwTQcdgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9uOHhwbWxoLWg0VUVzNkN1
VlRFeEh3VFFjZGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAFeCLYgoXpOkpDgkm4yUeM7kQ6BxZg+8BYk/
4MTbIpCGQXLPpEcURYOH6YbQgAJKqwqOXudTobeLsee4RzDljN1e+/t4yeebpIy/
xGhD3fTrocaf3QQjiMgAV6Ua6gjArTN3pTGn4H9wScToMCnt/2drRKCFOe2tb1wm
OUt4fiTZlxwKvYZ9SjzHbOhLJgZHoKF0IiEXYVk/0wKrV4TnE6r2dwgAbaRg8lZU
FlungktJHXy2juxh8hFUhoiLSHQlC4quX6yDL7AN7PFM6MdZZlX6WK6cAx6Ue7/I
lSUidZV0y7zaPNYWa4pqTQadhW9k6H+jsA1xgBLOE/scvKkLTdY=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:19 2025 by rpki-client