Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CrYAsHfpLlXu1cWE9SvB7B_psIk.roa
File: CrYAsHfpLlXu1cWE9SvB7B_psIk.roa (raw, json)
Hash identifier: v7lqU+EgvnWBc6ZzqnFkyCO90VBcoGsedd1evLiVew8=
Subject key identifier: 0A:B6:00:B0:77:E9:2E:55:EE:D5:C5:84:F5:2B:C1:EC:1F:E9:B0:89
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AFC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CrYAsHfpLlXu1cWE9SvB7B_psIk.roa
Signing time: Thu 12 Jun 2025 01:39:48 +0000
ROA not before: Thu 12 Jun 2025 01:39:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6908 (0x1afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 01:39:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0AB600B077E92E55EED5C584F52BC1EC1FE9B089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:25:b9:51:98:20:e5:94:f4:71:dc:f3:f5:
14:fe:df:5a:a1:0a:9b:cf:47:c8:a9:7f:01:9e:e0:
60:9d:98:82:ee:65:21:54:01:ec:8c:74:b0:b4:d8:
6d:4c:54:13:e5:84:e9:a9:9b:c3:79:a7:30:fd:b1:
52:cd:bc:60:fd:b9:61:69:09:ad:db:0e:21:8a:e5:
5a:5b:8a:76:11:b0:39:df:1f:80:94:54:f6:e1:45:
36:f2:cf:48:59:c2:14:81:a0:15:cf:78:7b:43:70:
3f:9e:b9:99:be:5a:15:91:2e:d1:23:c2:25:c8:ca:
dc:72:32:dc:61:4f:2d:b1:29:f2:46:4c:a4:d8:f1:
15:d7:c3:a3:f8:09:c0:fb:f4:f7:c6:0f:84:cc:c8:
32:e8:c3:77:87:e6:d3:51:7c:de:85:53:9a:df:2f:
1b:00:88:af:fc:2c:9d:6d:39:f4:f4:1a:f6:65:13:
96:a1:5e:a5:b9:33:7e:8d:ae:81:3e:54:a5:26:ee:
04:c5:ba:3b:9f:55:cd:84:49:ee:30:bd:91:6b:b6:
e2:c2:9d:cf:b6:0f:f1:5b:6a:8b:e4:0b:1e:71:e7:
b6:6f:9e:99:16:12:4a:a5:0a:07:ff:29:8f:a2:51:
ad:aa:0e:3a:3b:f6:c3:bb:f9:b5:15:eb:65:41:d7:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:00:B0:77:E9:2E:55:EE:D5:C5:84:F5:2B:C1:EC:1F:E9:B0:89
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CrYAsHfpLlXu1cWE9SvB7B_psIk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:4e:76:51:68:8b:97:5b:a9:4b:19:ce:89:4f:13:1d:cc:12:
ec:1f:a4:59:ac:53:2f:b6:44:a0:51:e7:8e:9e:ad:26:f6:43:
58:1c:17:c7:bf:2e:d3:4a:29:8f:1a:f2:c7:f2:41:b8:b4:73:
39:d3:aa:13:7a:0f:06:0c:aa:20:91:62:26:f3:43:0e:1d:ad:
c0:7f:b5:51:1e:8c:5f:23:06:ea:7c:82:d7:d5:43:87:dc:94:
f8:86:2a:c0:0d:5b:5e:a0:5e:37:cd:c4:81:90:7c:ec:39:c8:
02:f6:06:c6:a6:20:0d:b9:50:ab:e3:76:a8:9b:ce:13:bf:4e:
30:48:d8:55:1b:a5:1c:e7:ea:87:d2:7e:74:d1:b8:ee:85:4e:
b8:c4:bb:26:32:e4:43:77:09:fb:2a:dd:f8:ec:9d:8c:70:0c:
3f:25:cd:b6:7c:88:49:98:33:e8:1f:7c:89:6e:a0:76:6c:83:
ab:22:e6:96:fa:66:14:d2:91:5f:19:b5:a4:5e:c7:09:57:12:
66:d9:7f:d9:61:f8:13:ab:5b:bc:a7:f6:93:49:a9:e4:9e:9b:
9c:4d:08:8c:cf:3f:5c:a9:5d:29:e7:60:d7:72:22:61:b3:49:
6d:7a:f5:59:0a:62:05:a1:ec:52:1e:52:91:5b:99:8f:2e:06:
b7:b7:1e:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIw
MTM5NDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBBQjYwMEIwNzdFOTJF
NTVFRUQ1QzU4NEY1MkJDMUVDMUZFOUIwODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4XiW5UZgg5ZT0cdzz9RT+31qhCpvPR8ipfwGe4GCdmILuZSFU
AeyMdLC02G1MVBPlhOmpm8N5pzD9sVLNvGD9uWFpCa3bDiGK5VpbinYRsDnfH4CU
VPbhRTbyz0hZwhSBoBXPeHtDcD+euZm+WhWRLtEjwiXIytxyMtxhTy2xKfJGTKTY
8RXXw6P4CcD79PfGD4TMyDLow3eH5tNRfN6FU5rfLxsAiK/8LJ1tOfT0GvZlE5ah
XqW5M36NroE+VKUm7gTFujufVc2ESe4wvZFrtuLCnc+2D/FbaovkCx5x57ZvnpkW
EkqlCgf/KY+iUa2qDjo79sO7+bUV62VB190jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCrYAsHfpLlXu1cWE9SvB7B/psIkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9DcllBc0hmcExsWHUxY1dF
OVN2QjdCX3BzSWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJlOdlFoi5dbqUsZzolPEx3MEuwfpFmsUy+2
RKBR546erSb2Q1gcF8e/LtNKKY8a8sfyQbi0cznTqhN6DwYMqiCRYibzQw4drcB/
tVEejF8jBup8gtfVQ4fclPiGKsANW16gXjfNxIGQfOw5yAL2BsamIA25UKvjdqib
zhO/TjBI2FUbpRzn6ofSfnTRuO6FTrjEuyYy5EN3Cfsq3fjsnYxwDD8lzbZ8iEmY
M+gffIluoHZsg6si5pb6ZhTSkV8ZtaRexwlXEmbZf9lh+BOrW7yn9pNJqeSem5xN
CIzPP1ypXSnnYNdyImGzSW169VkKYgWh7FIeUpFbmY8uBre3HuM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:54 2025 by rpki-client