Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ei8yKXvWrnF403-wpGy488gnDA0.roa
File: Ei8yKXvWrnF403-wpGy488gnDA0.roa (raw, json)
Hash identifier: 9qwJ4j0OBIE0F1E+emTR598awMWZJycXXEI1Kw4uxRU=
Subject key identifier: 12:2F:32:29:7B:D6:AE:71:78:D3:7F:B0:A4:6C:B8:F3:C8:27:0C:0D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B70
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ei8yKXvWrnF403-wpGy488gnDA0.roa
Signing time: Thu 12 Jun 2025 16:09:53 +0000
ROA not before: Thu 12 Jun 2025 16:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7024 (0x1b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 16:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=122F32297BD6AE7178D37FB0A46CB8F3C8270C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:18:97:6b:b1:ac:bc:0e:ef:d4:92:d1:89:
dd:a6:73:d1:d5:2b:40:fb:52:7a:d8:2f:e5:d6:dc:
d5:76:19:e6:27:46:03:04:54:b0:07:e0:df:70:6e:
03:22:84:19:de:5d:28:4e:a0:97:42:b4:7c:25:d6:
83:80:9b:8c:5c:8b:2f:2f:14:66:92:76:88:b0:60:
6a:3a:19:a8:b4:c1:61:d7:13:59:9c:ad:dc:59:a0:
3f:aa:c0:41:f1:55:c4:81:e5:53:89:09:b9:83:98:
76:ae:66:db:c0:6f:63:5d:75:6d:b6:76:d7:95:b9:
c6:f6:83:51:1c:18:78:e6:a4:fa:11:95:89:88:0d:
8a:da:cb:7d:28:bc:15:f4:fe:36:3f:d0:ee:a4:1c:
2d:d7:7c:9d:e1:fc:2e:62:85:ac:12:ca:08:16:e4:
5e:a0:fd:11:7c:c4:42:79:8a:76:3d:9a:a6:56:83:
38:ac:60:64:83:cc:75:31:0e:59:f8:1d:95:94:5b:
77:20:d1:f1:b9:18:ed:8e:ea:03:3a:20:ce:93:a4:
a2:e0:83:9f:18:75:4b:42:e8:44:ce:1f:47:59:38:
34:96:a8:07:31:7f:84:e0:89:9f:f9:de:89:88:03:
43:0a:24:21:d4:73:c9:77:11:9a:8b:f2:cd:ab:7e:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:32:29:7B:D6:AE:71:78:D3:7F:B0:A4:6C:B8:F3:C8:27:0C:0D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ei8yKXvWrnF403-wpGy488gnDA0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:da:c0:f0:15:d3:0a:9d:ab:ed:9d:b9:89:97:95:b0:41:7c:
f5:42:c0:60:25:b4:e8:7b:5c:65:c6:ae:ca:e9:83:f8:f0:bc:
f0:97:cf:dc:cf:fc:51:62:49:8c:1c:3c:5e:20:00:31:ef:a3:
f7:1d:dd:3b:da:69:8d:75:82:dc:72:57:8b:e4:63:1a:59:de:
50:b4:ca:32:a0:c4:56:5e:9f:78:02:64:f0:08:0c:d8:fe:84:
b5:31:00:ef:49:28:df:86:0f:f4:e0:6b:e8:18:95:e9:77:6c:
ac:93:c3:b1:cd:2e:c0:d2:1f:61:86:49:ad:eb:0e:fe:63:15:
14:4c:55:b3:b4:f3:4b:e1:0e:2d:20:1f:e6:0f:08:b6:67:74:
eb:7a:64:54:4c:2c:03:9a:12:a5:ee:ba:2e:6f:4f:d4:d0:59:
e1:57:63:6c:b1:67:62:b8:70:fb:93:16:14:79:a6:34:b9:3b:
f8:c6:7c:1e:ac:89:d6:dc:de:ce:3f:0b:45:88:78:2e:2f:c4:
ca:2d:3f:d3:ac:52:eb:28:b2:be:b7:d9:eb:85:01:27:1f:f3:
fb:ed:e9:4e:c1:33:85:8d:47:0f:45:83:0a:b6:d7:e4:30:e7:
7f:6e:b6:74:93:52:8b:0e:6c:f6:2a:a0:08:b6:19:2d:45:34:
97:7c:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:24:35 2025 by rpki-client