Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FdguMqM4ApflK6q6iHjb_equSds.roa
File: FdguMqM4ApflK6q6iHjb_equSds.roa (raw, json)
Hash identifier: T3iRQrr6kxP8YOGuzmQA30iegXYOyRSgWRqDRUODRGo=
Subject key identifier: 15:D8:2E:32:A3:38:02:97:E5:2B:AA:BA:88:78:DB:FD:EA:AE:49:DB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16F0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FdguMqM4ApflK6q6iHjb_equSds.roa
Signing time: Fri 06 Jun 2025 16:09:28 +0000
ROA not before: Fri 06 Jun 2025 16:09:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5872 (0x16f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 16:09:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15D82E32A3380297E52BAABA8878DBFDEAAE49DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:89:de:12:8f:cb:79:f3:bc:6d:b0:df:2c:
62:ba:02:a3:a5:86:63:f3:44:21:3d:10:76:3d:05:
22:98:84:01:9f:d3:74:69:d9:23:7a:72:25:ea:7a:
ea:9c:eb:03:75:d9:0a:59:8c:70:f6:4f:b7:05:da:
a8:5a:b4:35:c7:61:a5:e1:86:43:f8:06:ab:53:a7:
dc:67:64:73:ab:e4:2a:16:f6:b6:a1:66:d9:cd:ad:
e0:c4:22:c2:96:d5:f2:4b:15:32:34:0a:a2:f0:9e:
31:60:a7:21:f3:f2:c3:29:b0:7a:de:da:e1:08:75:
f4:21:e1:5f:b1:e5:82:61:92:f4:20:5e:e8:c6:25:
48:93:1f:1e:c6:22:b9:4a:d6:17:8b:3e:e2:ab:cb:
07:eb:95:c1:e1:ac:74:28:d2:1f:dd:88:a4:34:fb:
63:2a:61:d2:74:e6:7b:16:24:e4:c5:86:11:da:2c:
77:df:9e:c8:f2:a9:2e:1d:67:10:6c:c4:41:91:b3:
d6:6b:f5:78:16:c1:e2:9d:63:80:ae:a9:83:e2:b7:
3f:fc:09:14:ca:38:54:e6:26:4a:fb:63:9d:42:1c:
b3:c1:aa:a6:d6:fe:ec:7c:af:19:8c:1b:93:7f:70:
3f:f7:f1:4f:a4:aa:c1:f5:12:fa:cb:d3:89:ca:06:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:2E:32:A3:38:02:97:E5:2B:AA:BA:88:78:DB:FD:EA:AE:49:DB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FdguMqM4ApflK6q6iHjb_equSds.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:96:8b:fb:b6:8d:7f:73:4b:5a:21:4c:a6:2a:59:1a:e7:ef:
bf:ae:a1:3f:55:c3:d6:5e:c7:c8:11:f1:0e:47:84:ce:02:80:
34:c7:1d:31:ce:5b:ea:1e:57:69:82:46:63:2a:f1:c0:0c:46:
0d:25:e5:c7:b6:d0:b8:48:aa:49:89:19:a7:b6:69:8a:79:15:
c2:6b:43:e3:3c:57:b4:d0:7f:84:f9:94:38:53:94:fe:5f:5e:
13:7a:ce:2e:64:7d:1b:a1:e4:9c:0d:fa:26:a2:e0:af:cd:79:
4a:33:0f:c1:66:cd:cd:3c:c1:f1:95:76:9a:42:52:ec:5a:68:
55:f4:27:46:4e:01:a8:47:8a:78:86:58:c4:76:ec:bc:a5:a7:
36:5e:30:df:29:23:77:2f:46:7a:94:0b:cc:65:12:d6:61:0d:
fc:87:fa:51:f6:a6:cb:e7:6d:8c:88:9c:04:44:dd:f3:f9:26:
25:59:f4:d7:70:73:bd:da:cc:30:a6:7e:aa:02:87:d5:84:d8:
00:f6:7d:b6:11:57:ec:cc:df:1b:0e:f8:87:d8:00:17:e2:a3:
ae:4d:e6:00:0a:f9:3b:c5:f4:af:e3:bf:e8:78:93:e2:b8:28:
fc:85:ce:92:1a:e9:3e:d7:81:29:20:d7:a9:80:7b:7e:d3:19:
ad:d8:89:b8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYx
NjA5MjhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE1RDgyRTMyQTMzODAy
OTdFNTJCQUFCQTg4NzhEQkZERUFBRTQ5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH/4neEo/LefO8bbDfLGK6AqOlhmPzRCE9EHY9BSKYhAGf03Rp
2SN6ciXqeuqc6wN12QpZjHD2T7cF2qhatDXHYaXhhkP4BqtTp9xnZHOr5CoW9rah
ZtnNreDEIsKW1fJLFTI0CqLwnjFgpyHz8sMpsHre2uEIdfQh4V+x5YJhkvQgXujG
JUiTHx7GIrlK1heLPuKrywfrlcHhrHQo0h/diKQ0+2MqYdJ05nsWJOTFhhHaLHff
nsjyqS4dZxBsxEGRs9Zr9XgWweKdY4CuqYPitz/8CRTKOFTmJkr7Y51CHLPBqqbW
/ux8rxmMG5N/cD/38U+kqsH1EvrL04nKBgx9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFdguMqM4ApflK6q6iHjb/equSdswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9GZGd1TXFNNEFwZmxLNnE2
aUhqYl9lcXVTZHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAIaWi/u2jX9zS1ohTKYqWRrn77+uoT9Vw9Ze
x8gR8Q5HhM4CgDTHHTHOW+oeV2mCRmMq8cAMRg0l5ce20LhIqkmJGae2aYp5FcJr
Q+M8V7TQf4T5lDhTlP5fXhN6zi5kfRuh5JwN+iai4K/NeUozD8Fmzc08wfGVdppC
UuxaaFX0J0ZOAahHiniGWMR27LylpzZeMN8pI3cvRnqUC8xlEtZhDfyH+lH2psvn
bYyInARE3fP5JiVZ9Ndwc73azDCmfqoCh9WE2AD2fbYRV+zM3xsO+IfYABfio65N
5gAK+TvF9K/jv+h4k+K4KPyFzpIa6T7XgSkg16mAe37TGa3Yibg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:29 2025 by rpki-client