Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I_PhgCS0hv3Qc-RNiIkCb5bpmlU.roa
File: I_PhgCS0hv3Qc-RNiIkCb5bpmlU.roa (raw, json)
Hash identifier: +YcS8VQuOTpqXbSFHNmWEKrCHIhH8ZF8lJlCnw/YeB4=
Subject key identifier: 23:F3:E1:80:24:B4:86:FD:D0:73:E4:4D:88:89:02:6F:96:E9:9A:55
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I_PhgCS0hv3Qc-RNiIkCb5bpmlU.roa
Signing time: Fri 06 Jun 2025 14:39:29 +0000
ROA not before: Fri 06 Jun 2025 14:39:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5860 (0x16e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 14:39:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=23F3E18024B486FDD073E44D8889026F96E99A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:2d:5f:92:c6:eb:03:35:dd:48:02:52:3c:
bd:cb:a0:e0:b8:ca:5b:12:61:0b:f7:75:b4:ce:ef:
00:8f:d1:d3:b0:61:4d:8f:71:ed:13:a5:a0:eb:5c:
f3:60:88:88:19:b8:4b:82:07:69:b2:9d:9f:ca:57:
40:a0:1b:0a:eb:07:bb:a4:b9:0b:6c:7b:b8:b9:f7:
3d:01:e5:97:d1:ec:44:b8:a2:95:c7:bc:4e:78:52:
cf:ae:21:aa:d7:9c:e6:aa:2e:b8:f3:a9:ee:a8:ca:
d3:b9:b0:5f:ce:df:41:fc:ee:28:d1:25:8f:cd:34:
57:0d:35:a0:1d:a1:51:e6:4f:c8:c1:a9:d1:21:e8:
52:74:b4:9c:ca:98:f7:9c:64:7f:76:a9:1a:b1:21:
90:5a:36:dd:27:93:29:96:a2:5d:92:79:d1:a8:d8:
52:b3:5f:b6:d4:32:4f:8a:b3:a5:61:2d:7d:26:d0:
1d:28:f3:e7:1a:eb:2a:69:c8:fc:ce:4f:99:67:30:
1c:78:70:57:65:98:ef:29:54:14:11:54:3c:16:65:
47:5b:d5:c3:43:5a:4e:be:23:0d:b6:28:bb:a8:da:
a8:f6:0d:d2:f1:a5:b4:e4:dd:95:60:92:5c:d9:05:
3f:71:66:63:62:61:e9:f3:c3:29:d8:b2:29:bd:fb:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:E1:80:24:B4:86:FD:D0:73:E4:4D:88:89:02:6F:96:E9:9A:55
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I_PhgCS0hv3Qc-RNiIkCb5bpmlU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:8d:23:a5:8c:f9:a6:68:78:cf:fd:b3:a2:20:47:92:c9:b4:
f6:eb:54:9e:41:a5:c8:e1:e1:d2:f6:a6:a1:b3:ec:1e:96:c8:
df:ea:df:9e:5a:50:47:e9:5e:48:31:bb:9a:86:4e:e7:a6:80:
a7:51:7f:08:57:54:70:62:80:f8:3b:03:02:fb:a5:6f:7b:da:
b2:b4:9f:47:7d:be:40:c0:5a:98:5c:5f:e1:bf:28:83:15:f1:
4b:52:3d:d7:1e:37:69:da:e7:a2:51:a2:90:25:c3:1e:ad:60:
7c:d2:26:cb:74:eb:e1:0e:29:cc:b0:ec:d7:7e:20:9b:46:ed:
46:65:60:8f:a1:4c:0b:5f:c3:93:8f:50:12:fb:e9:3d:84:05:
6a:f1:89:e0:f0:79:12:05:aa:29:7b:5c:0e:91:eb:4c:26:f2:
36:d6:9a:42:74:cd:17:31:01:e2:3d:61:cd:ac:8b:e1:21:98:
c3:d6:53:6c:94:74:16:58:99:01:68:04:46:2c:7e:87:5b:34:
f1:ab:e1:de:c4:68:e6:ce:45:fc:b8:98:58:81:38:1f:1e:8b:
28:df:22:a8:7e:e2:36:fe:de:4e:67:1f:5a:18:de:7e:66:09:
45:fe:18:7d:72:f7:3b:c6:f9:7d:0a:50:1b:f9:95:52:d1:95:
db:94:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:17:04 2025 by rpki-client