Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/q_tm1UzbO2lIMDERMuCn21rf2B0.roa
File: q_tm1UzbO2lIMDERMuCn21rf2B0.roa (raw, json)
Hash identifier: V0Ci1IVjWw8+DPxxJP1tWOZKbsg0+aj8xhhKel1lG40=
Subject key identifier: AB:FB:66:D5:4C:DB:3B:69:48:30:31:11:32:E0:A7:DB:5A:DF:D8:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EF0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q_tm1UzbO2lIMDERMuCn21rf2B0.roa
Signing time: Tue 27 May 2025 00:09:32 +0000
ROA not before: Tue 27 May 2025 00:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3824 (0xef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 00:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ABFB66D54CDB3B694830311132E0A7DB5ADFD81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:f5:9d:79:ee:9c:a5:d3:84:f2:85:30:99:
4d:e0:89:9a:cb:b7:a9:99:af:b6:53:e6:53:d5:58:
60:f9:67:37:48:b1:e8:a0:f7:1b:57:b8:cf:48:e3:
7d:6c:ab:8b:37:25:72:0a:aa:2f:eb:27:36:db:fc:
ed:ba:5c:77:69:09:97:f3:7a:f3:0a:2f:f7:2c:58:
9c:63:94:13:03:7d:e4:ce:b7:10:ee:d0:0c:5c:86:
bb:e5:d0:c0:fd:24:fc:99:bf:93:11:1a:af:4e:94:
d4:0e:95:29:42:ff:19:56:b1:1d:6d:75:4f:7d:4b:
c7:1c:c3:0c:c3:5b:8d:34:af:53:f6:05:fc:9a:75:
28:0c:30:7b:4b:51:2b:a7:d7:1c:65:7f:93:cf:96:
da:ae:a3:3e:72:89:3d:e2:9e:96:f5:cf:af:90:d4:
7d:35:a6:d8:01:e7:c4:1e:74:37:84:48:b8:1e:1c:
b8:8c:94:20:73:2e:65:55:45:9c:94:22:fb:b9:f2:
4a:4c:5c:f6:8c:29:a8:37:15:7f:53:0d:b2:8b:55:
b6:2d:4f:fa:5d:01:63:79:dc:9e:75:77:a3:a6:29:
88:b9:d8:cd:a3:5a:72:c6:3c:64:3c:a8:16:34:04:
d3:b4:72:61:f7:db:cc:d0:bc:df:25:0e:2f:4c:02:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:66:D5:4C:DB:3B:69:48:30:31:11:32:E0:A7:DB:5A:DF:D8:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q_tm1UzbO2lIMDERMuCn21rf2B0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:40:b4:ab:30:73:3e:38:04:60:cb:f9:c7:bd:9a:be:5a:66:
42:d5:21:c9:3e:11:e3:c1:57:46:a2:e4:b4:ba:0b:b3:6e:34:
9a:06:49:a9:d2:05:2d:4a:fb:bd:28:99:d1:64:aa:61:f6:a5:
66:e0:84:76:85:23:f5:a9:03:6f:8f:43:44:9f:6a:f2:2d:13:
69:58:e7:4a:82:a4:28:21:b8:2e:a6:73:f7:8a:6a:7c:88:57:
d1:61:6d:22:ea:71:bd:bc:1b:0e:25:27:2c:c9:e6:d0:48:ab:
3e:ae:22:af:fb:77:83:b7:a5:d0:93:8f:80:d3:ff:e9:d9:6e:
22:7b:30:74:34:80:10:38:9a:b0:51:54:8e:99:01:9b:0e:ad:
e8:01:8b:9f:e4:8f:39:b7:2d:77:44:c3:7f:53:d9:13:74:80:
7a:3d:e7:60:c8:41:8d:9c:78:9d:ed:db:7f:d4:63:8e:48:47:
30:5c:2e:5e:0a:78:74:b0:0f:ec:25:ba:d8:b7:e6:d6:53:eb:
b1:64:f2:3c:a9:05:e1:43:c3:e8:43:c8:4c:1b:d6:39:90:8c:
c8:a2:00:e0:f8:fa:d7:10:88:bb:55:77:c9:34:b2:70:13:38:
bc:67:b0:32:1e:44:a5:e9:f6:af:31:c5:61:68:8a:b3:af:cb:
f0:e5:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:57:41 2025 by rpki-client