Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QsVcPc3iNe9aHSsdSDGZ2PwYI.roa
File: w2QsVcPc3iNe9aHSsdSDGZ2PwYI.roa (raw, json)
Hash identifier: iuttHOrdxKxE2g1TMhtVmBfh299te9fHaeEvq8/2HHA=
Subject key identifier: C3:64:2C:55:C3:DC:DE:23:5E:F5:A1:D2:B1:D4:83:19:9D:8F:C1:82
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0100
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QsVcPc3iNe9aHSsdSDGZ2PwYI.roa
Signing time: Thu 08 May 2025 10:08:06 +0000
ROA not before: Thu 08 May 2025 10:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 10:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3642C55C3DCDE235EF5A1D2B1D483199D8FC182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:ae:02:5a:62:d1:f5:f8:07:48:24:58:1f:
a1:c6:3d:df:24:55:fd:42:78:ab:58:ae:41:f8:cb:
d7:ee:31:f7:5e:da:dc:46:3e:1f:1c:71:b1:5b:43:
58:15:94:dd:3a:30:51:f8:da:00:88:cf:69:e3:4c:
94:8d:aa:59:0c:c0:7c:36:f3:70:aa:13:98:32:69:
0b:06:3e:aa:03:1b:f7:57:ad:1f:aa:ed:c7:b7:e1:
fd:c9:04:91:71:a8:e7:4f:80:e7:7f:02:5b:34:54:
eb:a9:e3:39:62:35:b9:be:4b:10:14:70:a8:82:45:
66:7d:56:f3:06:09:7a:0c:af:35:7e:bd:17:fe:cb:
4f:91:78:2d:86:a4:c6:87:5f:03:a6:77:9d:ae:e0:
d1:66:7c:90:69:5f:af:89:df:ae:cf:7b:30:cd:36:
7e:5e:2d:fa:f0:dd:ae:6d:d6:f9:f2:11:bc:02:84:
17:00:dd:8e:7c:6f:a8:da:2c:c4:57:5b:08:7c:eb:
18:b0:32:d7:3b:1d:7d:a2:7f:c6:a6:82:df:88:99:
21:a9:79:ff:28:ce:3f:e6:e2:d7:74:36:6b:ed:30:
c4:07:1f:3e:3e:be:c1:1a:75:7a:f5:79:67:ef:a5:
30:56:da:16:9f:89:9b:67:d6:fb:77:99:be:21:ea:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:2C:55:C3:DC:DE:23:5E:F5:A1:D2:B1:D4:83:19:9D:8F:C1:82
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QsVcPc3iNe9aHSsdSDGZ2PwYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:b0:7e:42:1a:66:09:18:6a:5b:49:ac:ca:0a:9f:92:a5:e4:
64:e1:6a:8a:f9:9e:e2:55:52:06:1e:5a:50:67:8a:b2:0e:b6:
1f:6e:59:84:0d:dc:ec:4a:7e:49:c7:66:1e:cb:83:e8:2a:9a:
17:c2:17:f4:fe:d8:c5:bc:bf:f8:0f:7a:6b:a3:af:95:b0:98:
ea:a5:cd:5c:f2:5b:20:a5:fc:ec:c3:5f:8b:41:e5:d5:cd:59:
1c:d7:eb:56:11:7d:71:95:d0:1e:00:60:9a:bc:e7:16:42:39:
83:1c:b9:38:40:8d:ab:76:d5:cd:2c:61:c1:b9:c9:a4:bf:66:
47:50:72:7d:ac:36:14:ff:4f:d7:35:f5:8a:8e:7f:b1:30:ad:
d8:b0:00:5a:7c:af:fe:07:a2:10:58:0e:dd:58:59:81:26:5d:
b1:11:91:9e:dc:ac:2a:64:bd:cb:02:b2:4b:c6:51:ae:e9:70:
bc:4d:81:0c:a8:1b:e6:22:60:14:01:b3:32:39:03:65:86:7f:
33:f3:e7:0c:6d:d2:4c:a8:4e:54:01:5a:f7:ef:34:17:22:12:
b1:42:c0:d8:8a:59:e3:aa:ac:bd:c6:91:dc:e6:e2:87:89:21:
4b:21:0e:8e:b6:e9:e0:58:6d:e2:bd:7b:64:0b:ac:ee:ff:c0:
4d:10:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:08 2025 by rpki-client