Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ky2GmQQRvbQoAB_wDQDpjUHf2g0.roa
File: Ky2GmQQRvbQoAB_wDQDpjUHf2g0.roa (raw, json)
Hash identifier: hm/LJoYor31JIwL7/l+QkshIJkEUrT2gvbWljL7HWGw=
Subject key identifier: 2B:2D:86:99:04:11:BD:B4:28:00:1F:F0:0D:00:E9:8D:41:DF:DA:0D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B78
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ky2GmQQRvbQoAB_wDQDpjUHf2g0.roa
Signing time: Thu 12 Jun 2025 17:09:52 +0000
ROA not before: Thu 12 Jun 2025 17:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7032 (0x1b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 17:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2B2D86990411BDB428001FF00D00E98D41DFDA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:18:c4:09:e5:bd:0e:f7:a1:91:bd:e9:09:
6c:41:07:b8:9a:fb:99:6a:f9:56:c1:0c:7f:73:e9:
c8:ad:07:cb:1f:b9:b7:d6:f8:13:5a:20:7d:31:71:
90:77:6c:e4:fd:e0:2d:9b:f7:df:51:d0:d3:5e:86:
5e:ad:02:81:c6:26:f0:58:a5:a2:ce:8c:2b:fe:e7:
5f:37:98:31:a3:4f:bb:ca:1b:7d:9e:f3:74:61:ad:
07:2a:b1:94:e0:61:74:46:cb:13:a6:42:d3:fe:b5:
73:9b:e5:16:38:a0:a4:48:86:98:76:ed:45:24:60:
29:21:5d:2b:f9:1d:a6:44:c4:13:a9:7c:9d:a0:a0:
16:71:49:9a:68:61:3d:e4:82:a0:2c:ee:4e:68:55:
a7:54:0c:4b:36:93:a9:ad:b6:d0:ad:2d:1d:93:57:
8c:78:b3:bc:23:24:d8:8d:7a:7a:49:88:86:38:30:
b8:12:30:7c:a5:7d:c6:1c:4a:8c:98:bb:9d:bc:2a:
4f:cc:0a:14:2e:48:05:0d:81:aa:78:08:01:96:14:
a1:bc:1a:30:c0:c3:f6:a4:d0:bc:b2:c8:21:4c:ed:
a8:04:7f:9d:86:db:0b:d6:8c:9e:31:58:2e:5b:c5:
94:8b:ae:b6:66:bc:35:6a:28:f3:f9:87:98:01:ad:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:86:99:04:11:BD:B4:28:00:1F:F0:0D:00:E9:8D:41:DF:DA:0D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ky2GmQQRvbQoAB_wDQDpjUHf2g0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:8f:c5:19:b2:e3:22:07:b8:1c:71:7c:50:37:ff:71:fd:cf:
26:56:c8:e1:04:cf:93:d5:5a:e7:79:9c:f9:ea:fd:7d:33:1a:
75:fb:23:02:60:99:6a:cc:26:cc:1b:e7:c2:73:73:22:e9:01:
bd:6f:32:b5:0f:05:da:01:32:3e:de:fc:41:88:cf:39:c7:a5:
4a:ed:ba:14:50:54:57:7a:3c:5a:a1:2e:62:ed:a4:83:c3:ff:
7c:d9:c7:5b:a9:54:81:57:39:23:f2:d3:42:bd:90:07:10:ee:
7b:e0:0e:64:16:74:c1:7d:ec:7f:a2:6f:e6:6c:83:4f:b7:f4:
97:b0:59:11:d2:80:be:f6:d7:84:20:fb:8d:1b:1b:a0:71:a4:
88:ec:62:ef:20:e8:ea:29:2a:6b:eb:5e:85:90:d8:dd:22:7b:
41:91:5e:44:31:77:02:7b:8a:33:28:a8:37:90:3a:50:fa:9e:
30:ce:a8:7d:0c:56:6a:92:a1:f8:a8:b2:3e:a3:96:db:0d:7c:
32:a8:e3:95:9a:90:6d:23:a2:98:1a:c6:54:63:56:ba:81:b0:
4f:30:85:6a:d9:34:96:54:1b:51:b1:e0:82:23:cd:e7:d4:b5:
c0:91:8f:9b:87:a8:7b:76:67:2e:f1:86:66:10:25:80:04:37:
7b:4f:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:21 2025 by rpki-client