Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uayd1zHv-6xDPkjhnGnim5a_Ngo.roa
File: uayd1zHv-6xDPkjhnGnim5a_Ngo.roa (raw, json)
Hash identifier: Qa5omksXNpPfH0O3U6z1EaJqKpJ3COmLqP3xTRf4n4M=
Subject key identifier: B9:AC:9D:D7:31:EF:FB:AC:43:3E:48:E1:9C:69:E2:9B:96:BF:36:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0320
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uayd1zHv-6xDPkjhnGnim5a_Ngo.roa
Signing time: Sun 11 May 2025 06:07:50 +0000
ROA not before: Sun 11 May 2025 06:07:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 06:07:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B9AC9DD731EFFBAC433E48E19C69E29B96BF360A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c0:46:3a:dc:f6:f0:65:46:31:db:70:b1:f9:
a4:b2:e2:32:64:e5:8a:cd:0a:58:9b:78:59:ca:dd:
cd:52:fb:37:9d:93:c6:04:22:0b:49:bf:5a:0c:b6:
72:b9:85:24:01:e1:60:71:a6:08:7c:f6:b1:ba:53:
7b:4a:f5:5a:37:f8:39:cd:a0:96:2a:53:f4:e6:40:
18:72:51:46:00:d7:db:50:9f:30:ab:94:16:32:aa:
ae:c5:bd:a5:7a:b3:f3:ca:41:a1:d9:f8:df:ee:7f:
04:82:53:1d:36:0d:e5:59:6a:be:67:3b:59:ea:16:
72:4d:a2:e9:97:d4:18:18:cb:28:aa:a1:8a:72:f9:
23:58:88:47:e7:21:f9:2c:18:45:f9:69:87:5a:e2:
2c:7a:e9:40:a1:23:8b:bf:f1:fc:af:03:b1:59:af:
36:72:ba:74:fa:bc:29:5e:db:de:f4:52:e9:26:ab:
ca:e0:cd:41:7d:0d:f0:ae:45:43:6e:f4:67:9a:d4:
c6:75:b4:ac:37:16:68:2a:a0:40:87:b8:d1:55:a7:
ac:fe:76:ae:f5:b6:30:57:90:84:2a:33:df:07:d4:
18:15:35:dc:bd:20:ea:94:31:7d:76:f2:38:8e:1c:
bd:78:23:26:a8:64:ac:81:1c:e5:27:c1:02:07:93:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:9D:D7:31:EF:FB:AC:43:3E:48:E1:9C:69:E2:9B:96:BF:36:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uayd1zHv-6xDPkjhnGnim5a_Ngo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:29:75:03:fd:97:cd:91:8c:8f:c5:42:6d:a2:e9:0b:79:ff:
6f:7d:f1:97:d0:cc:4f:5c:08:99:93:a0:4d:cc:fd:9e:ac:4c:
f0:6c:19:81:3c:2e:48:5a:3a:85:35:a6:6d:f5:65:c0:b6:bc:
47:ed:64:fa:68:ae:dd:6a:10:07:9a:41:f5:e6:4e:5a:1a:46:
54:7d:6d:29:10:89:10:cb:83:90:35:64:09:69:69:b7:d4:41:
cd:eb:54:e7:7a:42:43:7f:5c:ca:60:71:0f:21:b0:4d:f6:21:
43:f7:f4:2b:c1:0e:89:f9:f9:69:10:7f:c7:c6:97:d0:a1:a2:
50:72:ed:40:45:d2:f2:2a:53:39:30:73:0c:3f:41:5a:bc:14:
25:af:fe:e2:7e:3b:19:10:21:5d:70:1a:db:b2:2f:68:25:a5:
e8:3a:47:89:ad:c1:f6:53:e8:5e:17:f0:49:26:aa:90:1c:8a:
8e:c7:96:ff:ad:fd:a9:81:0d:7f:b8:a8:a3:05:e2:48:90:6e:
50:c0:c4:7a:41:e2:0b:c9:75:9e:9d:25:6b:22:89:8a:4a:34:
41:9e:2e:5f:23:3e:00:2b:7b:f6:dd:08:f1:04:f4:0e:64:de:
a8:f4:2d:95:c7:64:ac:4b:be:66:fb:70:4a:34:f0:e0:67:7e:
68:e7:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:42:50 2025 by rpki-client