Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NNCbRaDMPVTExdOc0dT0upWPj08.roa
File: NNCbRaDMPVTExdOc0dT0upWPj08.roa (raw, json)
Hash identifier: sPptg075HAp2kgM2Y+T43PpomzXOd20uUfJj3Y7Nvjg=
Subject key identifier: 34:D0:9B:45:A0:CC:3D:54:C4:C5:D3:9C:D1:D4:F4:BA:95:8F:8F:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BC4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NNCbRaDMPVTExdOc0dT0upWPj08.roa
Signing time: Fri 13 Jun 2025 02:46:25 +0000
ROA not before: Fri 13 Jun 2025 02:46:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7108 (0x1bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 02:46:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=34D09B45A0CC3D54C4C5D39CD1D4F4BA958F8F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:20:b3:a8:39:e1:d4:5a:c6:b3:0b:92:d7:
8e:bc:3c:ef:18:ce:8b:9a:9b:9a:22:de:12:fa:a6:
af:c5:98:8d:a3:44:71:c3:4f:98:51:fa:8c:b6:f6:
69:82:dd:7b:b1:74:a8:bf:75:68:bd:cc:37:5c:1c:
02:41:79:ac:ab:2e:21:6a:84:f1:5f:66:dd:b1:77:
fe:2a:d0:90:87:c5:0e:21:63:2c:b4:80:fd:f8:3e:
0f:74:24:b0:f7:4b:09:01:33:0c:be:3b:9d:f8:62:
f7:5b:c1:72:29:75:7e:52:94:fc:06:cf:8a:2e:9c:
2f:e1:09:40:37:19:38:51:4f:f2:cb:c6:e0:80:34:
92:f3:3a:2e:84:8c:b3:95:26:59:80:aa:d0:e6:02:
32:a1:f3:48:8e:42:bc:1c:6f:3e:02:34:d7:1b:dc:
dd:24:07:44:c4:4c:0d:e7:fb:4a:7f:c1:f8:ee:c8:
0c:29:e2:34:cc:bf:05:4c:26:2b:88:50:ef:8e:5c:
d9:1b:a5:48:cf:4c:36:67:17:2e:4f:cb:f5:ef:47:
d4:d5:b8:1c:07:69:c6:78:c8:9d:ed:f4:98:e1:49:
04:f4:b4:49:1a:f4:bc:97:da:20:87:41:d8:d7:11:
ac:bb:88:9b:56:be:1b:26:a1:0d:bb:f9:de:57:1c:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D0:9B:45:A0:CC:3D:54:C4:C5:D3:9C:D1:D4:F4:BA:95:8F:8F:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NNCbRaDMPVTExdOc0dT0upWPj08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:ec:05:87:b1:35:af:4f:f0:57:31:26:c1:23:19:d2:40:cd:
2c:20:02:e7:2e:5c:8f:f8:21:9d:b9:43:c4:8b:97:ed:6e:e0:
90:2d:37:c5:0b:d8:9c:e0:98:4b:cb:e7:cb:b8:1d:98:0d:4a:
7b:8c:9a:78:fd:a6:90:ff:68:8b:1e:43:57:94:f2:ff:f3:32:
df:ca:7e:8a:ce:9a:1e:56:2d:f6:7c:b3:f7:17:18:85:6e:62:
01:08:11:18:4c:12:cc:cc:8a:42:ea:3b:cf:06:d5:0a:a0:ca:
95:1c:8b:2c:e6:d5:4c:6f:5a:6f:ee:65:70:0a:fb:03:3d:27:
ed:6f:16:89:fa:54:ef:16:63:34:3f:7c:e9:49:dd:8c:f8:2e:
67:c3:ba:35:a9:35:0a:2c:82:5f:e9:3c:f2:d6:66:97:aa:15:
7b:27:4e:3c:a3:3e:fb:20:76:29:56:23:be:ce:a2:91:4b:96:
be:16:38:73:50:1f:f5:fd:28:f1:44:d8:fc:16:24:68:ea:66:
f4:41:4f:0f:f8:34:07:0a:0a:0e:a7:af:d9:95:76:0e:18:22:
9d:b7:16:84:74:42:17:c4:0f:8f:ee:d2:3e:7a:cd:3c:96:2e:
03:fe:73:ff:2a:36:4d:62:4a:e4:e7:19:d1:f5:aa:6e:49:08:
05:0a:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:26:12 2025 by rpki-client