Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C8zjynOL_dUkkEwR-Rulh3kJwxw.roa
File: C8zjynOL_dUkkEwR-Rulh3kJwxw.roa (raw, json)
Hash identifier: l3IDGh1igdHH30z237j3FJQggfNnTX7U9JtiRr2OGo0=
Subject key identifier: 0B:CC:E3:CA:73:8B:FD:D5:24:90:4C:11:F9:1B:A5:87:79:09:C3:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0400
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C8zjynOL_dUkkEwR-Rulh3kJwxw.roa
Signing time: Mon 12 May 2025 10:08:35 +0000
ROA not before: Mon 12 May 2025 10:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 10:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0BCCE3CA738BFDD524904C11F91BA5877909C31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:4e:db:95:7b:16:85:84:e8:a0:9f:13:ea:
6e:61:39:7c:2e:cc:46:53:2e:18:1e:7f:8d:0f:2f:
7d:d2:4a:cb:5c:a6:28:44:70:f9:4d:ff:0f:86:10:
48:7d:c3:10:1b:f4:d3:e3:09:d0:7a:bb:66:1e:c1:
9f:d5:3f:69:2d:0f:0d:a0:c7:e3:12:af:b9:8b:04:
c8:30:89:bc:e7:65:8e:42:43:5b:51:50:f8:7f:ab:
7c:84:96:33:24:e3:06:31:6c:72:1e:20:9b:6e:a2:
5e:b1:da:b4:00:f4:7c:ce:57:44:26:0b:dd:cc:88:
04:3a:27:51:c4:32:aa:72:0a:52:c3:f2:9c:b5:bf:
72:e9:df:03:b2:17:5d:77:a5:9b:2b:67:91:58:c7:
45:87:8c:49:39:2d:a6:3b:97:67:09:82:9b:49:2d:
bd:9c:6e:91:1a:2e:41:e7:da:83:62:9c:0b:ce:63:
af:85:b7:ec:a7:e0:4b:8c:55:67:72:b3:53:e9:ae:
f3:a3:f1:d9:04:e1:28:ce:e2:c0:64:d0:67:b1:b5:
e0:7d:59:6d:93:43:3a:06:01:ba:be:5d:f1:2d:95:
4a:a5:a9:cf:b0:f8:52:e5:df:98:2a:cc:3b:6e:2c:
73:a8:97:bb:89:7c:df:9d:13:b4:88:60:ed:bb:5a:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:E3:CA:73:8B:FD:D5:24:90:4C:11:F9:1B:A5:87:79:09:C3:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C8zjynOL_dUkkEwR-Rulh3kJwxw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:87:29:26:3c:8e:10:3f:48:eb:f4:9b:ad:3d:27:92:21:c0:
e4:05:cb:88:1e:39:2f:f4:41:f0:fb:66:6b:80:d4:0b:7f:35:
2a:48:28:35:0d:66:b6:b1:1f:4b:41:18:ae:f4:0a:4b:e1:03:
1c:47:7b:7b:c8:fd:9f:e7:27:67:f6:50:6d:b1:2e:b0:65:5f:
fc:0a:28:a8:d9:d0:18:93:82:93:d7:71:8c:02:0c:a0:61:a7:
8e:36:42:10:2d:c9:e0:a5:00:d7:04:45:d5:cf:32:db:77:86:
9d:c1:bf:eb:41:46:7c:e7:49:c4:14:d6:ef:83:d4:52:78:4f:
de:65:de:5c:0b:59:be:ee:cb:8e:d6:ba:e4:0b:5b:c2:dc:bc:
8b:0f:83:d3:f1:33:d7:0a:8e:dc:d0:ac:af:f0:d6:62:4c:04:
ef:2a:54:e5:c9:ef:f4:5b:1c:36:f4:1c:5f:d8:a4:0d:20:83:
44:ef:39:2c:c4:8c:cf:bf:c5:ca:4c:01:63:c7:d6:af:e8:70:
f4:5a:98:4d:2a:d9:7b:87:b7:0f:fd:64:62:eb:aa:b9:bb:ef:
f8:73:bf:f0:6a:0c:52:27:46:43:77:3f:e0:2d:e8:9a:e5:89:
f4:f6:4b:c0:86:bf:87:6a:bf:56:63:7f:21:aa:ec:71:d8:69:
2a:ff:3f:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIx
MDA4MzVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBCQ0NFM0NBNzM4QkZE
RDUyNDkwNEMxMUY5MUJBNTg3NzkwOUMzMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjUU7blXsWhYTooJ8T6m5hOXwuzEZTLhgef40PL33SSstcpihE
cPlN/w+GEEh9wxAb9NPjCdB6u2YewZ/VP2ktDw2gx+MSr7mLBMgwibznZY5CQ1tR
UPh/q3yEljMk4wYxbHIeIJtuol6x2rQA9HzOV0QmC93MiAQ6J1HEMqpyClLD8py1
v3Lp3wOyF113pZsrZ5FYx0WHjEk5LaY7l2cJgptJLb2cbpEaLkHn2oNinAvOY6+F
t+yn4EuMVWdys1PprvOj8dkE4SjO4sBk0GexteB9WW2TQzoGAbq+XfEtlUqlqc+w
+FLl35gqzDtuLHOol7uJfN+dE7SIYO27WuYvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUC8zjynOL/dUkkEwR+Rulh3kJwxwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9DOHpqeW5PTF9kVWtrRXdS
LVJ1bGgza0p3eHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHOHKSY8jhA/SOv0m609J5IhwOQFy4geOS/0
QfD7ZmuA1At/NSpIKDUNZraxH0tBGK70CkvhAxxHe3vI/Z/nJ2f2UG2xLrBlX/wK
KKjZ0BiTgpPXcYwCDKBhp442QhAtyeClANcERdXPMtt3hp3Bv+tBRnznScQU1u+D
1FJ4T95l3lwLWb7uy47WuuQLW8LcvIsPg9PxM9cKjtzQrK/w1mJMBO8qVOXJ7/Rb
HDb0HF/YpA0gg0TvOSzEjM+/xcpMAWPH1q/ocPRamE0q2XuHtw/9ZGLrqrm77/hz
v/BqDFInRkN3P+At6JrlifT2S8CGv4dqv1ZjfyGq7HHYaSr/P4M=
-----END CERTIFICATE-----
Generated at Sat Jun 21 09:50:54 2025 by rpki-client