Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YH1g4FVjJut43siVWx9A6b6EFeo.roa
File: YH1g4FVjJut43siVWx9A6b6EFeo.roa (raw, json)
Hash identifier: eb++R8OfIlBJfMs85hbqtXeonWCpNHRKqESlqiDpSGU=
Subject key identifier: 60:7D:60:E0:55:63:26:EB:78:DE:C8:95:5B:1F:40:E9:BE:84:15:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1790
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YH1g4FVjJut43siVWx9A6b6EFeo.roa
Signing time: Sat 07 Jun 2025 12:10:18 +0000
ROA not before: Sat 07 Jun 2025 12:10:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6032 (0x1790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 12:10:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=607D60E0556326EB78DEC8955B1F40E9BE8415EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:3b:02:03:18:aa:48:68:7b:77:2d:85:e2:
d7:d9:83:8b:1a:b8:56:97:43:88:28:0d:80:0f:fd:
1f:e4:39:bf:15:79:cb:e1:65:93:b7:e4:59:cc:03:
c6:0d:de:67:c7:81:65:59:a4:4a:9c:73:4a:3a:25:
82:5a:fb:98:81:42:5c:ab:c6:3f:03:49:53:c4:ef:
a7:3d:1d:a0:97:36:a8:74:77:cb:2f:05:08:df:5b:
e3:e1:2c:1e:ed:86:54:55:8b:5b:6b:34:e8:e2:bb:
7a:24:4c:39:15:98:4a:e3:19:70:f4:ee:ec:33:4d:
7d:e6:29:ba:4e:2b:2f:d5:bc:50:51:23:37:5e:5e:
32:1c:c7:29:5a:a9:8f:58:fc:5a:3e:00:10:0e:1e:
ba:47:77:31:f0:38:df:d3:53:3e:e6:d9:6a:d4:ed:
20:7b:f0:20:7c:34:ca:45:0e:ed:66:bd:2f:bc:7c:
d1:af:ff:3b:35:44:5c:97:bc:75:82:50:6b:bb:71:
c0:44:33:96:51:4f:3e:74:8d:5c:4d:e8:d1:8f:b0:
80:b0:ac:6c:15:85:48:2d:e7:1d:0e:0b:f5:b8:4d:
13:ae:ec:48:1f:a4:1c:1b:91:5c:dd:d0:ad:74:37:
1c:f7:35:06:c5:33:49:a0:86:1b:ea:be:e9:79:e3:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:60:E0:55:63:26:EB:78:DE:C8:95:5B:1F:40:E9:BE:84:15:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YH1g4FVjJut43siVWx9A6b6EFeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:5c:a8:86:03:81:84:c3:ca:f7:63:74:7b:a5:c3:5a:e2:d3:
10:18:ae:ff:c0:07:23:8b:96:97:67:63:2d:d4:41:2d:b4:08:
1d:82:22:b8:02:b2:52:4d:78:dd:97:47:07:00:c9:9b:66:19:
26:ef:44:da:5a:7f:0c:d9:4f:bf:cc:1b:4a:d6:63:ae:e9:69:
9e:0a:f3:43:91:8e:48:da:21:19:92:d6:53:46:2b:7c:77:2f:
27:3e:4b:13:b4:ae:03:32:b9:9e:4e:06:42:38:99:33:b3:a8:
b6:84:8b:d3:c5:48:7e:b1:a6:2e:fd:21:53:45:5c:09:e9:bb:
a0:c2:15:16:3f:89:df:5c:d6:20:69:31:77:60:eb:4a:cd:66:
2c:19:70:02:c2:ba:b7:db:85:f8:fe:f3:be:e3:c7:73:9b:73:
ee:4a:dc:73:e3:58:0d:e8:a6:57:76:21:5b:5b:34:a7:a3:2e:
2c:83:8e:f4:10:22:95:21:23:5b:1f:56:50:c3:e1:d7:b2:dd:
c8:b4:70:3f:7f:70:dd:61:09:16:cb:6d:30:ee:c2:d6:f2:7a:
d3:65:b6:af:9b:29:e5:f8:f0:c3:02:06:2d:c8:48:f0:ce:4a:
d3:cb:20:c4:87:d1:87:9a:a7:a5:45:42:51:b6:8b:7c:4e:b5:
d6:8c:d8:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcx
MjEwMThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDYwN0Q2MEUwNTU2MzI2
RUI3OERFQzg5NTVCMUY0MEU5QkU4NDE1RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFkzsCAxiqSGh7dy2F4tfZg4sauFaXQ4goDYAP/R/kOb8Vecvh
ZZO35FnMA8YN3mfHgWVZpEqcc0o6JYJa+5iBQlyrxj8DSVPE76c9HaCXNqh0d8sv
BQjfW+PhLB7thlRVi1trNOjiu3okTDkVmErjGXD07uwzTX3mKbpOKy/VvFBRIzde
XjIcxylaqY9Y/Fo+ABAOHrpHdzHwON/TUz7m2WrU7SB78CB8NMpFDu1mvS+8fNGv
/zs1RFyXvHWCUGu7ccBEM5ZRTz50jVxN6NGPsICwrGwVhUgt5x0OC/W4TROu7Egf
pBwbkVzd0K10Nxz3NQbFM0mghhvqvul547zRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYH1g4FVjJut43siVWx9A6b6EFeowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ZSDFnNEZWakp1dDQzc2lW
V3g5QTZiNkVGZW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAItcqIYDgYTDyvdjdHulw1ri0xAYrv/AByOL
lpdnYy3UQS20CB2CIrgCslJNeN2XRwcAyZtmGSbvRNpafwzZT7/MG0rWY67paZ4K
80ORjkjaIRmS1lNGK3x3Lyc+SxO0rgMyuZ5OBkI4mTOzqLaEi9PFSH6xpi79IVNF
XAnpu6DCFRY/id9c1iBpMXdg60rNZiwZcALCurfbhfj+877jx3Obc+5K3HPjWA3o
pld2IVtbNKejLiyDjvQQIpUhI1sfVlDD4dey3ci0cD9/cN1hCRbLbTDuwtbyetNl
tq+bKeX48MMCBi3ISPDOStPLIMSH0Yeap6VFQlG2i3xOtdaM2Ds=
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:54:01 2025 by rpki-client