Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QibN95tLsa91KGGNM_JkW_krM.roa
File: w2QibN95tLsa91KGGNM_JkW_krM.roa (raw, json)
Hash identifier: 7s85YliBYs31/PMJr6R70ryfATJxYn2lcKOSR3auGVk=
Subject key identifier: C3:64:22:6C:DF:79:B4:BB:1A:F7:52:86:18:D3:3F:26:45:BF:92:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CA4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QibN95tLsa91KGGNM_JkW_krM.roa
Signing time: Sat 14 Jun 2025 06:39:54 +0000
ROA not before: Sat 14 Jun 2025 06:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7332 (0x1ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 06:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C364226CDF79B4BB1AF7528618D33F2645BF92B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:ae:a7:c8:1c:29:90:cd:12:8d:88:1f:c6:
b9:d3:f1:a0:b6:9d:4e:bd:fa:24:06:57:47:d9:3f:
39:9f:8a:32:6f:83:ea:f0:15:cf:a2:5b:96:80:7d:
0a:e9:73:bd:93:f1:85:92:93:24:aa:56:c7:b7:fa:
53:f9:44:18:8d:f6:00:b0:b0:75:8f:0d:f8:32:95:
ba:f6:7e:7c:e8:0c:41:76:b3:d7:15:b1:da:e7:0c:
fe:73:f8:64:e7:57:af:e7:f7:16:38:09:4d:fc:e0:
1d:e2:bb:0a:92:11:80:b2:ef:be:01:6f:c3:6e:cb:
e0:60:5c:28:bb:30:26:1e:1e:d6:4c:b1:8f:cd:da:
1a:ac:d0:a3:37:48:37:3e:94:88:ce:04:26:52:24:
99:6e:bd:79:d5:da:f7:ba:8e:b3:ef:83:a7:dd:3a:
6b:71:67:14:21:85:b4:db:c8:07:d2:6a:2b:0c:a7:
aa:78:1f:9e:50:8e:8b:8c:be:bd:c0:59:38:fb:1c:
5d:e2:e6:10:0d:ea:60:bf:c9:c0:d6:f1:34:b2:f9:
f1:37:c8:3c:da:75:20:68:d3:ac:59:b0:04:aa:05:
24:09:8e:f9:d4:19:4d:19:ac:46:66:56:5c:e3:90:
90:36:7d:18:08:2b:d6:bf:ab:6a:3f:f4:d4:0a:f2:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:22:6C:DF:79:B4:BB:1A:F7:52:86:18:D3:3F:26:45:BF:92:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w2QibN95tLsa91KGGNM_JkW_krM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:65:82:e2:04:2f:6e:9c:2e:c9:c9:ff:aa:01:bd:35:65:c1:
71:12:99:61:33:5e:9e:82:55:0f:db:d8:25:6e:22:00:f5:2a:
71:51:8c:f6:dd:bf:2e:41:d4:77:06:e3:3f:d6:66:6c:22:c9:
7e:16:1b:5d:43:21:69:24:62:5e:9d:f6:25:e4:5e:a6:4a:66:
08:00:6a:8e:9b:13:89:6e:b9:4d:39:81:f3:f7:61:62:c9:f2:
0c:18:54:86:a2:43:3c:62:9f:c4:f9:d9:f3:90:69:26:31:f3:
7c:f6:e1:68:36:a1:fc:03:50:3e:3e:6c:20:64:15:55:f1:44:
d2:31:87:c0:8a:4d:01:5a:bd:d2:fa:a9:ed:2d:02:8a:81:53:
c0:3f:35:b4:3c:20:2d:41:0f:ae:5b:c0:48:3f:a3:0a:90:5a:
ec:65:59:63:c1:29:6b:15:62:e1:23:4b:a1:d5:f1:83:e0:f0:
ad:a4:9c:16:e0:7e:c5:c8:ce:2a:dc:9c:45:da:ce:3f:c4:f6:
20:27:0d:59:7d:58:0f:3f:08:ef:9d:f0:cc:f9:5e:0c:7a:9b:
46:c0:c8:0f:88:56:b5:12:a6:44:28:eb:05:9e:3b:e6:48:d4:
24:c9:e4:b4:a6:72:fb:ac:35:a1:6d:04:8d:5b:9c:9f:91:62:
ea:12:b9:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTQw
NjM5NTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMzNjQyMjZDREY3OUI0
QkIxQUY3NTI4NjE4RDMzRjI2NDVCRjkyQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUD66nyBwpkM0SjYgfxrnT8aC2nU69+iQGV0fZPzmfijJvg+rw
Fc+iW5aAfQrpc72T8YWSkySqVse3+lP5RBiN9gCwsHWPDfgylbr2fnzoDEF2s9cV
sdrnDP5z+GTnV6/n9xY4CU384B3iuwqSEYCy774Bb8Nuy+BgXCi7MCYeHtZMsY/N
2hqs0KM3SDc+lIjOBCZSJJluvXnV2ve6jrPvg6fdOmtxZxQhhbTbyAfSaisMp6p4
H55QjouMvr3AWTj7HF3i5hAN6mC/ycDW8TSy+fE3yDzadSBo06xZsASqBSQJjvnU
GU0ZrEZmVlzjkJA2fRgIK9a/q2o/9NQK8uFRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw2QibN95tLsa91KGGNM/JkW/krMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93MlFpYk45NXRMc2E5MUtH
R05NX0prV19rck0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAEdlguIEL26cLsnJ/6oBvTVlwXESmWEzXp6C
VQ/b2CVuIgD1KnFRjPbdvy5B1HcG4z/WZmwiyX4WG11DIWkkYl6d9iXkXqZKZggA
ao6bE4luuU05gfP3YWLJ8gwYVIaiQzxin8T52fOQaSYx83z24Wg2ofwDUD4+bCBk
FVXxRNIxh8CKTQFavdL6qe0tAoqBU8A/NbQ8IC1BD65bwEg/owqQWuxlWWPBKWsV
YuEjS6HV8YPg8K2knBbgfsXIzircnEXazj/E9iAnDVl9WA8/CO+d8Mz5Xgx6m0bA
yA+IVrUSpkQo6wWeO+ZI1CTJ5LSmcvusNaFtBI1bnJ+RYuoSudA=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:54 2025 by rpki-client