Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Jnd6enGUtdhPngAzvzLfioPMCZU.roa
File: Jnd6enGUtdhPngAzvzLfioPMCZU.roa (raw, json)
Hash identifier: vFKRoxqeTCu/+5+QozaHfF4n9TIRRnBX0rzLbLP9IU4=
Subject key identifier: 26:77:7A:7A:71:94:B5:D8:4F:9E:00:33:BF:32:DF:8A:83:CC:09:95
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C5C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jnd6enGUtdhPngAzvzLfioPMCZU.roa
Signing time: Fri 23 May 2025 13:39:09 +0000
ROA not before: Fri 23 May 2025 13:39:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 13:39:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=26777A7A7194B5D84F9E0033BF32DF8A83CC0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:66:0c:1e:27:8e:ed:eb:a0:97:f4:60:eb:
1d:26:da:79:39:ab:d5:8f:e0:4e:3e:c4:cf:e4:23:
08:51:d2:a9:2e:6a:da:af:30:db:22:d7:75:19:c1:
31:cc:0e:27:fd:4e:1e:38:3b:69:d2:85:72:67:11:
a8:fe:b5:02:ac:07:60:11:fa:c2:94:0f:e2:55:fe:
64:61:dd:dd:2a:61:01:a9:cc:91:ad:49:88:55:9c:
fb:04:78:73:ce:b2:07:26:a5:65:c3:0d:d5:fe:bd:
4c:cf:d9:c2:7e:32:17:a0:84:28:76:4d:70:b5:f2:
58:57:7a:42:13:12:c0:cf:dc:01:43:22:52:57:1a:
5b:7d:ac:3c:fe:fd:84:cd:e4:47:46:ae:e5:2a:2e:
a7:9d:c8:30:bf:93:c4:e5:3f:76:88:1d:a2:28:79:
07:ed:e5:87:06:8f:0a:fd:64:a1:40:2e:b9:be:57:
d6:a2:b6:05:ce:dc:d3:90:51:90:07:ec:ca:b9:c2:
a6:11:a8:f1:50:ef:cc:4c:a3:9d:f4:7d:de:f0:81:
35:e0:5a:05:67:d3:f3:59:af:b2:e6:0a:21:80:be:
21:36:38:67:5e:c5:9f:7e:52:c6:77:df:1a:06:22:
13:8e:67:6f:32:86:f7:31:c6:6f:8b:56:6d:76:ce:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:7A:7A:71:94:B5:D8:4F:9E:00:33:BF:32:DF:8A:83:CC:09:95
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jnd6enGUtdhPngAzvzLfioPMCZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:e4:30:b0:18:61:5b:9c:cb:0c:fd:31:00:91:1f:5a:e6:ec:
1f:41:60:1c:10:34:73:66:f3:3a:cf:3b:94:47:84:4f:29:9b:
b3:1d:58:56:71:ca:0c:5a:00:69:d9:ae:4d:9b:89:da:49:f5:
e0:ec:8e:8a:48:e7:26:74:8d:19:4c:75:5d:ae:46:ce:9b:04:
67:48:b1:07:82:49:0c:ed:bd:a8:16:1c:32:36:f6:99:50:ed:
23:93:ec:d1:7f:8d:89:6b:11:55:ad:ad:4a:0d:6a:0a:aa:0b:
c3:bb:14:ee:5e:52:a8:b2:88:e0:51:75:4b:98:71:3e:d2:10:
db:eb:fd:ef:62:2e:d9:29:de:c4:e7:b9:a6:fc:6f:5f:93:9a:
71:51:ef:c6:8a:f9:c0:ea:30:7b:cb:06:96:da:43:35:e6:3e:
1a:1d:a1:93:ca:98:d2:64:6a:ba:1f:b2:76:b8:a9:7a:7d:73:
52:f2:bf:04:c3:8f:53:0e:6e:2c:d9:3c:8d:d6:ba:ad:aa:66:
44:86:54:45:97:df:c7:5a:78:c0:03:7a:bf:e8:4c:b6:84:29:
5e:84:2e:12:98:52:e1:60:5e:1a:fc:2c:b5:df:30:87:69:dd:
58:11:e6:e5:a0:04:31:d2:23:90:2a:55:ae:22:0a:99:6f:39:
e8:ba:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:58 2025 by rpki-client