Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mlfVqzjYnodyJ7hjASvqIxIKme8.roa
File: mlfVqzjYnodyJ7hjASvqIxIKme8.roa (raw, json)
Hash identifier: 0518cIN8NDiYrV1teHyTKJTcJYp4H9TvnpSFvjVpV6M=
Subject key identifier: 9A:57:D5:AB:38:D8:9E:87:72:27:B8:63:01:2B:EA:23:12:0A:99:EF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E68
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlfVqzjYnodyJ7hjASvqIxIKme8.roa
Signing time: Mon 26 May 2025 07:09:24 +0000
ROA not before: Mon 26 May 2025 07:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 07:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9A57D5AB38D89E877227B863012BEA23120A99EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:44:f4:d5:81:db:a2:43:73:4d:7b:0d:e1:
a4:37:7d:b7:d8:59:41:e5:2c:49:13:6c:85:7b:5e:
31:a6:94:de:00:57:1c:1e:c0:99:4e:84:df:5d:48:
15:2d:36:65:31:c6:d1:1b:2b:dc:ca:c2:90:c6:58:
c3:90:d8:9c:c3:2d:cf:78:fa:61:ae:3a:94:7f:37:
a9:15:15:fa:42:8a:ff:30:ac:b4:21:ae:f7:ba:fb:
e1:71:a5:67:cc:66:72:bf:e0:a4:d3:c7:ab:f0:94:
a6:c6:a6:53:a4:40:ba:86:c5:03:49:d1:bb:f6:2b:
00:7c:56:35:08:e4:46:5d:28:bd:1f:af:50:4d:4c:
94:44:36:66:57:38:a3:51:69:a4:71:37:af:97:71:
6e:b1:c2:e9:26:ed:82:b2:6f:36:b0:df:1c:a2:09:
ad:40:b1:6d:b3:af:dd:f9:72:81:6c:6a:4b:1d:11:
81:f7:bc:b2:6d:44:da:02:15:3e:fa:2f:81:6c:e8:
81:b6:38:f8:87:01:b7:a4:a4:83:48:a1:bc:84:f7:
27:66:c3:11:85:d5:cc:a9:f9:c4:66:f8:58:4a:4e:
5d:4e:93:ac:66:68:bd:24:85:a1:08:1d:ad:1b:87:
d5:a9:d1:d6:36:c6:12:9e:9f:2c:45:de:ec:cb:51:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:D5:AB:38:D8:9E:87:72:27:B8:63:01:2B:EA:23:12:0A:99:EF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mlfVqzjYnodyJ7hjASvqIxIKme8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:cb:57:da:2a:97:aa:20:35:f6:fc:01:90:e0:86:32:08:71:
08:ae:ba:23:54:4c:45:6a:47:ca:d8:45:50:a8:47:dd:0a:4b:
40:c7:a7:61:f4:7b:a9:a7:2c:1e:4d:ef:60:63:3b:ce:e1:ed:
11:f1:9b:fd:a3:8c:e6:c4:6a:db:68:f7:f9:3d:3f:1b:f4:29:
13:28:6e:4d:6f:7b:fb:68:94:67:bb:3a:95:82:f8:74:7d:76:
33:57:73:00:ad:85:dd:e4:1d:83:e4:58:b8:db:2a:cd:21:0a:
d9:61:b0:23:50:bb:0c:a1:90:a5:a0:ca:02:d6:69:af:5c:b4:
b6:dc:72:94:c8:c4:92:c7:7b:11:32:cc:86:b6:5c:9e:ff:e5:
91:ee:9f:e5:04:38:c2:c0:a7:ec:b1:2f:26:ab:56:2f:5d:00:
8f:0a:3d:90:79:55:e5:63:e6:65:b6:c8:00:6a:5d:68:ca:a4:
53:08:e8:b6:a2:50:57:05:69:73:9c:1e:1e:9d:27:b3:d3:58:
b6:f5:5a:e3:20:4a:f1:c6:f6:f0:e3:7d:bf:66:df:3e:80:a3:
0b:c6:35:4a:71:69:bc:09:a2:e3:20:58:45:5b:f2:8f:29:65:
8d:ae:00:00:90:05:6f:02:55:ee:7f:20:17:99:74:33:ab:9b:
f4:a7:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:52 2025 by rpki-client