Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oQeT6p90KC-SA7s0PQ3WyqZ7-Fo.roa
File: oQeT6p90KC-SA7s0PQ3WyqZ7-Fo.roa (raw, json)
Hash identifier: olbGUt88828+agMjiKDlfkfL/veyhveXmMv4rO1zKtI=
Subject key identifier: A1:07:93:EA:9F:74:28:2F:92:03:BB:34:3D:0D:D6:CA:A6:7B:F8:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C9C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oQeT6p90KC-SA7s0PQ3WyqZ7-Fo.roa
Signing time: Fri 23 May 2025 21:38:31 +0000
ROA not before: Fri 23 May 2025 21:38:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 21:38:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A10793EA9F74282F9203BB343D0DD6CAA67BF85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:91:ca:95:a3:ab:a1:df:76:2d:3f:a7:39:
f5:ca:ea:7d:77:04:bc:7f:2f:e5:44:2c:67:85:f5:
95:e7:25:9a:52:63:9f:8c:2d:7d:47:57:65:20:85:
7a:67:65:8f:e3:27:0d:3c:7b:63:c7:7a:85:5f:d7:
bd:e7:47:45:00:2d:c4:01:e0:6f:18:57:1c:c3:36:
10:23:3a:94:47:62:81:2d:ae:d5:d2:9f:ef:36:ab:
c2:1b:d7:c4:82:59:b1:0f:8c:94:fc:91:b5:e1:0b:
bf:1d:ab:cf:d1:01:b6:0b:e4:5f:3b:62:83:91:08:
98:ec:ad:03:d8:b7:52:4b:9c:e7:4f:e0:d8:22:10:
84:95:2a:7e:b0:95:cb:43:48:de:b6:65:8f:77:69:
35:16:b2:c5:f9:97:8f:37:24:0f:9a:9e:b7:23:06:
fb:98:b8:7c:0c:99:f4:f0:7d:c8:93:58:17:28:c6:
38:ad:ac:d7:f6:d2:1b:e6:5c:a4:a1:c2:ba:b5:57:
f2:b0:8d:1d:09:7f:85:47:c9:a0:17:12:e0:ab:ce:
b1:9c:b3:3f:2e:61:d6:e9:6a:9b:84:16:37:1a:d8:
a0:1a:67:1c:60:fb:d4:d6:ce:d8:cf:f9:bc:ea:50:
52:b2:ef:39:a7:5e:5a:c7:4e:54:ec:9e:cd:87:50:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:07:93:EA:9F:74:28:2F:92:03:BB:34:3D:0D:D6:CA:A6:7B:F8:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oQeT6p90KC-SA7s0PQ3WyqZ7-Fo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:87:cf:c2:6d:f6:59:2d:d2:d8:ea:3a:15:b8:f4:93:d6:66:
e6:36:c3:84:c4:b4:6c:48:f8:1c:0b:9b:89:b4:c6:c8:55:ea:
4f:69:5b:94:d7:a5:75:30:8e:09:7a:a6:dc:d8:5f:be:83:c5:
c4:87:47:26:f3:db:3d:e7:3e:ca:04:78:ef:8b:d5:6d:03:4b:
0d:95:e3:6c:19:ce:7f:53:f4:9e:4b:97:cb:f9:a2:65:68:fb:
60:aa:eb:60:4f:c5:d7:e5:0c:0d:4b:b9:fd:78:e2:0f:f7:ea:
6e:e9:26:dc:c9:be:58:8e:53:10:09:e6:1a:aa:1f:96:4c:84:
2c:0a:07:22:8f:59:3f:22:1b:7a:ee:0b:5a:03:04:a2:7a:6d:
08:0e:4e:61:47:44:56:7b:71:06:aa:ad:84:c2:36:6d:c8:93:
bf:fc:3f:8a:12:2d:74:8b:17:72:5c:e6:92:c0:42:17:35:b7:
4b:f7:f3:07:d6:eb:fb:8b:b2:2e:d8:7f:8b:96:e9:d8:34:72:
cb:e7:c7:ad:e6:24:45:a9:b7:3b:e7:b0:2c:ed:c2:aa:d4:93:
3b:a6:a1:49:b2:cc:fa:a2:9b:32:a7:6f:2b:57:80:77:3f:17:
fa:15:c9:63:99:f2:d2:de:83:e0:8b:94:75:87:11:98:0a:cc:
77:bd:0f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:26:05 2025 by rpki-client