Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nd_mIr1QoAwqfCvUKVsxLIF1gc4.roa
File: Nd_mIr1QoAwqfCvUKVsxLIF1gc4.roa (raw, json)
Hash identifier: 8u7Ya9TFnvzRRKmxRLuQyuZ6sWp+eGopvXjniM0R9Rg=
Subject key identifier: 35:DF:E6:22:BD:50:A0:0C:2A:7C:2B:D4:29:5B:31:2C:81:75:81:CE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09FC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nd_mIr1QoAwqfCvUKVsxLIF1gc4.roa
Signing time: Tue 20 May 2025 09:38:15 +0000
ROA not before: Tue 20 May 2025 09:38:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2556 (0x9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 09:38:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=35DFE622BD50A00C2A7C2BD4295B312C817581CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:98:22:77:5e:17:17:81:e8:79:c4:70:25:
7c:07:ff:2a:d3:d9:77:97:76:b0:c4:9c:24:c6:cd:
a0:bc:c1:46:ee:5c:55:06:c6:4c:f6:b1:0c:74:19:
92:59:c9:df:91:b8:9a:38:d9:59:b0:79:19:a7:6f:
48:80:0f:ed:1d:07:45:b3:b2:e1:c5:97:38:8d:ae:
cc:29:1c:73:4a:aa:0f:b4:2e:6c:a4:a3:86:6f:1e:
8c:f6:ea:e8:a7:98:2a:17:a7:e4:d4:26:b1:59:4a:
be:90:86:64:8f:db:84:70:a8:1b:ab:ac:07:b6:bb:
fc:2a:9a:6e:4e:50:bf:cc:dd:54:25:ec:f6:13:51:
b5:0a:fb:72:5e:e7:af:2f:be:ae:0c:cd:2c:69:da:
c6:56:09:10:01:55:c9:dd:20:4e:91:fd:9f:69:e6:
5a:a6:7b:4b:19:74:28:de:b2:39:0e:45:97:37:27:
cd:e8:5c:9c:f3:da:91:c3:5f:f6:5a:f3:12:89:50:
2d:a3:07:23:23:70:21:cd:2b:78:c8:71:a7:c6:d0:
07:81:cf:6d:b0:66:86:c7:2f:bd:36:93:c8:22:f1:
fe:72:73:50:e3:1e:e7:00:04:80:25:1d:22:90:7b:
ac:83:68:21:11:d8:01:55:fd:1b:77:4f:aa:31:a4:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:E6:22:BD:50:A0:0C:2A:7C:2B:D4:29:5B:31:2C:81:75:81:CE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nd_mIr1QoAwqfCvUKVsxLIF1gc4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:96:5a:28:0a:c8:e6:90:6b:a9:f6:50:22:38:57:48:a0:60:
9b:bc:f2:72:53:b6:1e:4f:e4:20:22:55:bb:59:c0:8a:a2:4c:
61:e7:aa:fa:1b:3c:6d:48:a8:32:1e:0e:ad:ae:51:1e:bc:a6:
84:14:ba:67:a3:e5:b9:bb:87:a4:01:d7:1a:b9:1e:93:3a:f7:
eb:09:9e:c2:57:c2:8f:8d:9e:03:87:50:b8:f9:d9:04:7f:9a:
a7:f9:3f:a2:7f:24:70:e3:e1:5e:da:e4:93:7e:16:e5:b7:27:
68:48:b7:07:9d:f8:55:b3:59:6f:68:22:75:26:87:77:58:8c:
6a:c4:5a:42:94:fc:67:66:ff:6e:6d:78:00:bb:a8:a2:c8:5f:
b5:66:ec:9a:49:cc:57:6b:e4:61:64:b4:42:80:f5:fa:fc:17:
d0:89:30:b4:8d:d9:9f:e9:bf:3c:54:8e:85:ff:19:ee:26:0e:
e9:2c:ce:a6:de:5c:0c:e6:39:5b:4c:cc:d8:3f:1e:c2:cf:eb:
a7:2a:3f:4f:f7:5b:d4:3c:0e:ab:b7:54:d9:c6:28:22:35:ca:
c5:7a:f5:8f:c9:47:c1:8d:0b:1a:e4:5a:38:d4:7f:0e:fe:8a:
21:13:c6:e0:b9:c6:51:5c:bb:fb:08:a4:ba:56:8b:b5:30:e4:
d4:e5:cf:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjAw
OTM4MTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDM1REZFNjIyQkQ1MEEw
MEMyQTdDMkJENDI5NUIzMTJDODE3NTgxQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYR5gid14XF4HoecRwJXwH/yrT2XeXdrDEnCTGzaC8wUbuXFUG
xkz2sQx0GZJZyd+RuJo42VmweRmnb0iAD+0dB0WzsuHFlziNrswpHHNKqg+0Lmyk
o4ZvHoz26uinmCoXp+TUJrFZSr6QhmSP24RwqBurrAe2u/wqmm5OUL/M3VQl7PYT
UbUK+3Je568vvq4MzSxp2sZWCRABVcndIE6R/Z9p5lqme0sZdCjesjkORZc3J83o
XJzz2pHDX/Za8xKJUC2jByMjcCHNK3jIcafG0AeBz22wZobHL702k8gi8f5yc1Dj
HucABIAlHSKQe6yDaCER2AFV/Rt3T6oxpMxnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNd/mIr1QoAwqfCvUKVsxLIF1gc4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9OZF9tSXIxUW9Bd3FmQ3ZV
S1ZzeExJRjFnYzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADSWWigKyOaQa6n2UCI4V0igYJu88nJTth5P
5CAiVbtZwIqiTGHnqvobPG1IqDIeDq2uUR68poQUumej5bm7h6QB1xq5HpM69+sJ
nsJXwo+NngOHULj52QR/mqf5P6J/JHDj4V7a5JN+FuW3J2hItwed+FWzWW9oInUm
h3dYjGrEWkKU/Gdm/25teAC7qKLIX7Vm7JpJzFdr5GFktEKA9fr8F9CJMLSN2Z/p
vzxUjoX/Ge4mDukszqbeXAzmOVtMzNg/HsLP66cqP0/3W9Q8Dqu3VNnGKCI1ysV6
9Y/JR8GNCxrkWjjUfw7+iiETxuC5xlFcu/sIpLpWi7Uw5NTlz1I=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:54 2025 by rpki-client