Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4x_UN7EVZUyMA3RvDLdUosFNPeo.roa
File: 4x_UN7EVZUyMA3RvDLdUosFNPeo.roa (raw, json)
Hash identifier: hYu0CYignbdgIjaS3RCKbVwuZjblTqFfTXVFQ2JGXbE=
Subject key identifier: E3:1F:D4:37:B1:15:65:4C:8C:03:74:6F:0C:B7:54:A2:C1:4D:3D:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17D8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4x_UN7EVZUyMA3RvDLdUosFNPeo.roa
Signing time: Sat 07 Jun 2025 21:09:32 +0000
ROA not before: Sat 07 Jun 2025 21:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6104 (0x17d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 21:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E31FD437B115654C8C03746F0CB754A2C14D3DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:74:ce:9c:27:3a:ee:ec:af:21:bf:cc:f6:
36:a9:35:c5:9e:e1:69:38:4d:b4:72:86:45:c3:53:
54:d7:68:c8:ec:ee:5c:8e:10:88:32:97:42:dd:d1:
aa:01:12:72:fd:b4:00:59:81:47:be:d4:e7:2a:ff:
5b:45:5e:93:e6:29:94:ff:6b:9a:9a:77:fb:b6:0a:
be:a1:60:16:93:87:c5:d9:4d:c9:50:24:14:4e:a5:
c3:5f:a2:2a:c6:66:38:93:d7:81:25:9c:0f:92:d3:
90:f9:6f:5f:fa:b9:c8:2f:14:7a:0a:e4:ae:1d:cb:
ed:19:7f:1e:9b:6b:d1:cf:d1:16:2e:c3:e9:c6:c4:
c2:9f:2e:0d:ae:06:69:46:8a:6a:a0:3b:40:36:5e:
16:4d:fe:f3:8b:71:78:41:31:4e:ca:17:b2:b9:40:
da:86:64:ab:a5:02:db:6d:ce:23:f4:34:3c:dc:4a:
e8:8b:38:63:fa:77:10:8b:82:b1:87:0e:cd:5e:99:
a7:a9:a2:3a:50:05:6b:d8:08:f1:78:e2:ad:98:78:
35:d7:e3:2b:ff:0e:bb:f0:67:80:6f:e0:b8:17:0c:
d4:0f:2c:c4:f6:4a:0b:8b:b1:49:94:76:c6:95:00:
9f:4b:1d:f5:f6:6a:f4:e3:c1:b4:16:1f:f3:16:53:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:D4:37:B1:15:65:4C:8C:03:74:6F:0C:B7:54:A2:C1:4D:3D:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4x_UN7EVZUyMA3RvDLdUosFNPeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:50:b1:2a:1e:67:f9:f0:75:39:7a:6c:72:37:16:8f:92:e4:
c6:60:c6:8e:29:a8:a2:26:dd:32:66:c3:3a:d0:c2:58:db:54:
9a:6e:26:7f:a9:3f:c0:03:0b:a7:7b:15:83:5f:20:9d:11:79:
e2:fd:4e:5a:d6:2a:5f:5b:df:a4:fe:9f:f1:c0:6e:5c:3c:26:
d6:76:f1:57:de:3c:ce:00:a0:8d:5f:bf:3c:6c:fa:bd:f3:c8:
24:47:c1:3b:44:20:53:5b:a3:14:c8:a8:84:16:61:7b:01:b7:
cb:a2:92:38:4c:ac:a8:fb:b4:ca:d7:ae:bc:ff:01:5f:58:ef:
cb:cc:eb:b9:19:46:40:5d:94:57:2f:8d:63:b6:ac:58:d1:34:
a2:64:68:af:c4:ff:d0:ea:9f:53:11:4a:5e:7f:1c:b8:01:07:
55:2e:e4:8d:8f:36:ac:38:ff:7b:cf:cc:c5:60:3c:85:f2:7b:
b8:be:d2:13:b1:ce:9c:96:8a:f7:82:a3:48:e3:75:b4:59:e2:
58:7b:fe:ab:ba:73:a0:bc:93:41:21:b3:ed:3d:6f:3d:8a:56:
24:2e:b6:8c:6d:74:7c:51:18:0d:2b:87:45:fa:5f:ee:f6:c5:
23:66:53:31:e0:e8:a5:3e:33:70:78:b5:6e:1b:17:aa:a0:90:
64:b3:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:47 2025 by rpki-client