Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CwKBfX9ZrUbShugMhSJELXYqoTA.roa
File: CwKBfX9ZrUbShugMhSJELXYqoTA.roa (raw, json)
Hash identifier: GkAxnw+7b/J2Z5Xi9JfL44JuHctEmuiMMprvNIZmWlo=
Subject key identifier: 0B:02:81:7D:7F:59:AD:46:D2:86:E8:0C:85:22:44:2D:76:2A:A1:30
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19B0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CwKBfX9ZrUbShugMhSJELXYqoTA.roa
Signing time: Tue 10 Jun 2025 08:09:44 +0000
ROA not before: Tue 10 Jun 2025 08:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6576 (0x19b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 08:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0B02817D7F59AD46D286E80C8522442D762AA130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:a2:e4:d9:fb:19:39:48:08:57:f1:39:42:
df:96:54:7d:f9:fc:3f:e6:66:fa:e0:50:b9:1e:f2:
9e:e2:bc:39:1d:e3:73:f9:45:d4:aa:61:09:d1:f9:
b8:91:54:a9:ba:84:fe:04:07:70:d6:c6:ae:13:6b:
b2:ab:85:23:7c:73:a5:3c:47:60:e1:5e:df:cb:08:
ee:8b:90:37:a2:55:3b:75:e4:a7:4b:d2:e6:8c:b2:
1c:4c:81:1c:31:b5:be:6e:94:4a:d0:8a:dd:7f:10:
9c:40:6d:7e:7a:b1:d3:4b:94:b7:c3:9f:65:10:71:
46:a4:8a:16:51:51:00:45:f5:47:ef:bf:74:64:f4:
1d:78:52:ec:32:64:46:8c:c7:80:bf:97:54:b8:96:
83:da:ad:3d:1d:f7:1b:ba:39:d0:c8:d1:4a:0f:6a:
47:07:89:93:14:4e:6e:2c:9e:8f:86:26:fa:2d:a0:
1c:e9:0d:28:ee:54:27:42:79:a3:dc:2b:02:56:ea:
62:60:9d:81:a8:e9:ce:f9:cd:96:14:97:83:02:d9:
c6:0a:8e:69:71:84:47:b0:c7:63:13:ba:81:5f:a5:
36:7a:cd:34:fc:9b:6a:39:09:f7:bd:cd:6f:44:82:
5b:17:3e:c2:89:bd:bf:32:62:c7:18:ba:b4:ce:1e:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:81:7D:7F:59:AD:46:D2:86:E8:0C:85:22:44:2D:76:2A:A1:30
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CwKBfX9ZrUbShugMhSJELXYqoTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:6e:55:01:90:bb:6f:2c:64:d5:a6:62:64:23:2b:73:8f:6c:
48:2f:08:54:52:b4:0c:58:f7:ec:b0:61:de:0e:a1:6e:19:00:
12:19:dd:ef:b0:c7:47:46:88:46:2e:c3:94:c0:9d:53:5d:fa:
85:ec:54:29:4c:b5:1d:fd:dd:4c:7c:1f:28:67:06:25:54:b2:
3a:bf:e8:3e:3d:2f:02:c6:b9:d0:33:53:e7:ba:12:81:2d:28:
4c:12:26:b5:c1:26:d1:a9:3e:44:ee:ad:3a:47:ce:6b:02:c2:
be:56:76:90:9b:0a:bb:a0:45:9a:41:ce:e8:cd:a9:df:f2:9d:
a0:4e:4d:e4:21:2a:b7:f6:3d:98:e5:3d:b0:47:1f:24:40:5c:
ef:cf:14:56:5f:46:13:b9:c9:3d:d7:90:f2:13:89:68:10:50:
54:1e:94:ce:55:64:e1:8c:a7:69:6f:b1:e5:28:20:d1:ff:17:
d5:c7:66:dc:70:7b:b7:5a:67:fb:b2:6b:f7:11:e0:90:34:53:
99:d9:55:55:36:6d:cd:46:98:a0:a8:3f:cd:bc:62:6a:e3:5e:
1b:78:f1:55:75:ed:58:fc:81:85:84:16:e0:49:8f:9a:e4:e3:
32:9e:15:14:03:32:f4:9c:3b:5e:dd:96:fd:be:ae:5e:30:4e:
7d:27:72:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAw
ODA5NDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBCMDI4MTdEN0Y1OUFE
NDZEMjg2RTgwQzg1MjI0NDJENzYyQUExMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVCqLk2fsZOUgIV/E5Qt+WVH35/D/mZvrgULke8p7ivDkd43P5
RdSqYQnR+biRVKm6hP4EB3DWxq4Ta7KrhSN8c6U8R2DhXt/LCO6LkDeiVTt15KdL
0uaMshxMgRwxtb5ulErQit1/EJxAbX56sdNLlLfDn2UQcUakihZRUQBF9Ufvv3Rk
9B14UuwyZEaMx4C/l1S4loParT0d9xu6OdDI0UoPakcHiZMUTm4sno+GJvotoBzp
DSjuVCdCeaPcKwJW6mJgnYGo6c75zZYUl4MC2cYKjmlxhEewx2MTuoFfpTZ6zTT8
m2o5Cfe9zW9EglsXPsKJvb8yYscYurTOHtu1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCwKBfX9ZrUbShugMhSJELXYqoTAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Dd0tCZlg5WnJVYlNodWdN
aFNKRUxYWXFvVEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAGxuVQGQu28sZNWmYmQjK3OPbEgvCFRStAxY
9+ywYd4OoW4ZABIZ3e+wx0dGiEYuw5TAnVNd+oXsVClMtR393Ux8HyhnBiVUsjq/
6D49LwLGudAzU+e6EoEtKEwSJrXBJtGpPkTurTpHzmsCwr5WdpCbCrugRZpBzujN
qd/ynaBOTeQhKrf2PZjlPbBHHyRAXO/PFFZfRhO5yT3XkPITiWgQUFQelM5VZOGM
p2lvseUoINH/F9XHZtxwe7daZ/uya/cR4JA0U5nZVVU2bc1GmKCoP828YmrjXht4
8VV17Vj8gYWEFuBJj5rk4zKeFRQDMvScO17dlv2+rl4wTn0ncic=
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:43 2025 by rpki-client