Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8H-dKJ3D9ztBBTft9UZMA4CRMTM.roa
File: 8H-dKJ3D9ztBBTft9UZMA4CRMTM.roa (raw, json)
Hash identifier: xantUnz7laaiuCF6kfof4zJUsrRLGK/aJCYJT+mPWJM=
Subject key identifier: F0:7F:9D:28:9D:C3:F7:3B:41:05:37:ED:F5:46:4C:03:80:91:31:33
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AC4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8H-dKJ3D9ztBBTft9UZMA4CRMTM.roa
Signing time: Wed 11 Jun 2025 18:39:47 +0000
ROA not before: Wed 11 Jun 2025 18:39:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6852 (0x1ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 18:39:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F07F9D289DC3F73B410537EDF5464C0380913133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:7a:89:2b:03:93:74:31:91:ea:21:71:04:
87:f3:75:05:5f:d1:cb:e2:76:d4:b3:23:d4:be:f5:
7c:fc:18:a3:ea:42:0a:79:97:c5:13:d4:7c:65:31:
67:9a:84:49:7b:6b:b6:1f:37:36:1f:24:07:7e:32:
b5:66:bc:3f:9a:e5:83:dc:50:d6:89:5b:f7:7d:c1:
17:2a:ef:69:4e:90:89:3e:d5:95:5d:b5:52:28:71:
92:fe:36:37:77:f3:7d:ed:25:a2:c6:98:e4:00:e1:
3e:63:3f:fb:4f:b0:e3:56:d1:f7:30:d6:c6:a5:84:
03:3c:8a:6f:db:7f:db:ac:b2:7c:be:0e:10:83:dc:
2c:a1:2f:35:9b:99:5c:df:20:a8:c3:cd:ca:c7:5b:
0c:1c:c2:07:f6:bb:3e:19:93:67:58:e0:b3:82:ce:
d0:be:d9:8f:b0:44:c2:c5:8b:0b:42:53:cb:de:e2:
76:47:02:a2:26:6e:52:b8:f3:a4:2e:5e:c5:53:33:
ac:a4:56:c3:5b:ca:1e:44:63:67:78:06:91:95:c9:
00:0c:5e:53:c5:39:36:4d:4c:42:18:af:15:2c:76:
7b:0f:61:25:0f:85:72:fd:30:3e:7f:df:82:61:3a:
10:f6:29:59:8b:02:62:23:3d:51:25:8d:53:9a:69:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:9D:28:9D:C3:F7:3B:41:05:37:ED:F5:46:4C:03:80:91:31:33
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8H-dKJ3D9ztBBTft9UZMA4CRMTM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:e5:75:02:69:4a:a8:16:88:ea:1e:a2:f3:d9:85:ab:5a:7e:
9b:57:98:92:b2:52:a8:72:47:da:c9:3b:15:38:ce:aa:39:e4:
af:03:6e:57:cd:23:3b:b9:1d:9b:19:8d:04:3a:d0:10:a0:08:
8b:89:6d:78:e8:1d:aa:6d:1e:72:1d:b5:26:41:8b:ca:bf:19:
cc:61:85:d1:1a:17:95:8a:ba:68:3b:1f:a6:74:19:4f:d4:49:
f9:0a:b2:9d:e7:f7:08:9b:3d:e6:96:e0:6c:20:d1:7c:26:d2:
c7:04:da:b7:61:82:e5:51:1a:1b:08:cf:52:3c:34:33:15:ff:
fb:fd:04:46:36:25:bd:75:f9:2a:ec:5d:7b:96:fc:bf:5b:58:
18:8b:c3:37:2b:75:48:ed:e9:04:46:c3:e3:f3:4b:42:4f:91:
42:14:a0:98:db:76:74:ac:d8:32:41:8c:1a:46:06:92:8c:98:
1c:45:c5:e8:d9:0e:b6:ae:74:3f:a3:80:fb:38:62:05:5a:fe:
39:01:97:72:9a:91:1e:dd:1f:96:f4:ed:74:19:59:a1:5a:6e:
68:22:3e:a7:b1:65:1c:d4:26:50:00:8a:06:e7:a5:5c:99:2e:
f3:05:4b:7a:f8:39:70:df:3b:e2:24:99:6a:92:cc:b5:65:fc:
6a:c2:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:30:32 2025 by rpki-client