Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wNQPucV9eDYMJbeII97lskshzMg.roa
File: wNQPucV9eDYMJbeII97lskshzMg.roa (raw, json)
Hash identifier: Qi6uFOsYLjOOSOfJ8sEweRQasDMoGkv6iekvx/CNx94=
Subject key identifier: C0:D4:0F:B9:C5:7D:78:36:0C:25:B7:88:23:DE:E5:B2:4B:21:CC:C8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0180
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wNQPucV9eDYMJbeII97lskshzMg.roa
Signing time: Fri 09 May 2025 02:07:45 +0000
ROA not before: Fri 09 May 2025 02:07:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 02:07:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C0D40FB9C57D78360C25B78823DEE5B24B21CCC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:03:2e:e8:24:ae:08:9a:b1:a5:f2:1a:f2:
4e:fc:da:81:f2:72:c4:f7:9f:d6:33:6f:b2:b3:5f:
b0:0d:d4:04:bb:5f:4a:c5:ef:2a:5e:c0:18:87:34:
75:42:05:0b:25:9f:27:e5:5a:92:7f:80:97:3a:84:
f1:c4:c2:57:87:51:6e:8e:fb:5c:3e:a4:a2:c1:71:
a1:7c:23:f3:94:fb:83:e5:8b:ef:d8:be:22:fc:32:
29:1a:c9:30:14:e5:ee:97:45:f6:f7:7b:51:55:be:
fd:14:89:32:c6:9e:fb:77:07:6f:9b:fc:9c:e4:b4:
fa:10:b1:b7:d3:93:2b:9a:de:b2:00:9f:f1:58:e6:
0d:2b:67:10:1b:a5:33:ac:91:67:ed:38:16:20:ed:
7a:35:79:78:55:62:9e:50:32:ab:eb:65:97:37:36:
23:cf:a3:9a:4f:59:1b:97:3d:15:58:1c:5f:20:a0:
7e:68:28:82:ee:f3:9d:17:43:7d:75:30:19:0c:03:
c5:f8:09:29:d1:fd:54:ec:dc:04:28:a0:f9:d3:2d:
9e:c6:a6:37:02:8d:be:ca:aa:85:5d:12:8c:99:8c:
09:9d:e0:a9:2c:ac:89:28:67:b1:b5:e6:6c:8b:51:
17:08:4e:93:1d:2d:dd:f7:39:a0:f2:3a:cf:6b:79:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:0F:B9:C5:7D:78:36:0C:25:B7:88:23:DE:E5:B2:4B:21:CC:C8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wNQPucV9eDYMJbeII97lskshzMg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:60:d2:0b:3e:7d:68:0b:98:a8:69:f1:1c:45:d2:07:c0:62:
81:a0:02:96:0d:98:06:ed:65:20:28:ad:a6:14:88:ec:2b:12:
e4:27:9a:fd:e0:0d:29:4d:34:fe:f7:1b:bf:d2:0a:72:cb:87:
ff:a8:f4:a8:9b:81:83:65:5c:d7:31:16:c4:6a:d6:dc:06:54:
2d:63:ef:f0:90:88:4e:99:e1:e1:79:49:00:96:cf:d7:3b:b7:
08:35:6c:f5:6e:b8:da:bb:65:19:b8:4d:0a:28:27:48:5d:4b:
6b:25:d7:47:5e:62:c9:43:61:e5:1e:64:08:3e:db:2b:a9:be:
94:fe:29:95:2e:45:a1:75:8b:8a:a5:4e:e3:3f:44:2e:47:f7:
96:a4:fe:b7:71:7b:39:cc:0d:26:bb:5a:05:e9:da:42:51:6f:
7d:f3:9c:7b:54:81:15:e9:84:84:40:73:7b:55:a6:32:a8:28:
63:db:31:f9:8b:d4:ec:b8:ff:96:d6:67:ab:42:1a:8a:7b:1b:
3a:06:9b:ca:9c:37:7f:f3:ab:40:df:52:ee:f0:20:07:e7:6a:
d3:53:ae:d7:e2:cf:68:3a:d3:1f:8d:9a:38:ad:b7:49:62:7c:
5c:f2:14:ef:e5:34:13:15:0e:f6:74:1a:1e:3b:50:1d:9c:6b:
7e:6d:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:12:29 2025 by rpki-client