Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/L2yY2CodDyD8Kszo4O2iZy9brFc.roa
File: L2yY2CodDyD8Kszo4O2iZy9brFc.roa (raw, json)
Hash identifier: 8KRfRrE1/HPEb2Z7q4JGonZVOwyGtuDVEbKSHQDF2fk=
Subject key identifier: 2F:6C:98:D8:2A:1D:0F:20:FC:2A:CC:E8:E0:ED:A2:67:2F:5B:AC:57
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0930
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L2yY2CodDyD8Kszo4O2iZy9brFc.roa
Signing time: Mon 19 May 2025 08:08:09 +0000
ROA not before: Mon 19 May 2025 08:08:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2352 (0x930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 08:08:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2F6C98D82A1D0F20FC2ACCE8E0EDA2672F5BAC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:3f:b0:f6:4a:1f:1f:c2:2b:8c:53:81:45:
27:cb:01:7c:ae:f5:4b:a2:0a:aa:d1:3d:1f:52:04:
ff:f7:c7:2d:3f:55:48:06:b3:45:7e:bd:d8:4d:c5:
14:b9:cb:b1:4b:27:be:85:bb:30:2b:28:b5:94:ba:
88:b3:20:88:ce:da:9f:e5:20:4b:71:b6:82:ca:54:
a1:dc:6f:e2:fa:2e:76:3a:3e:49:73:bf:37:c9:43:
08:63:f3:2f:38:b1:40:66:4e:92:3d:42:68:22:03:
42:20:fd:0d:46:6c:da:e1:e4:ee:a2:56:ea:73:2c:
f9:d1:d0:dc:07:ea:f5:6a:a1:ed:94:66:f2:15:e8:
74:63:0a:b3:90:6d:f6:d2:3b:a2:ac:57:fe:9f:58:
8e:79:2d:6f:b7:17:a3:12:f6:8c:22:4b:e7:11:ae:
08:33:97:66:e5:7a:b8:56:7c:30:75:e6:4f:2c:d1:
a8:3a:e4:3d:fe:d7:71:60:46:77:8a:60:52:89:33:
91:9c:fe:76:24:e5:10:f8:5f:19:b8:b5:7b:27:44:
03:6f:9d:0d:72:45:89:38:ad:28:ac:25:e4:31:5e:
30:ee:23:80:37:3c:ba:1c:40:dc:8c:dc:d0:6f:dc:
0b:f0:ea:24:60:4d:1a:9f:dc:7d:e1:0a:80:d0:9b:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:98:D8:2A:1D:0F:20:FC:2A:CC:E8:E0:ED:A2:67:2F:5B:AC:57
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L2yY2CodDyD8Kszo4O2iZy9brFc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:21:13:51:7d:bf:2e:5e:d1:0e:de:ef:a0:1b:6a:f9:77:36:
56:59:50:db:d3:68:d2:e1:b8:a2:52:48:ea:04:0c:e5:a2:cb:
e7:56:cb:7e:25:49:16:74:b9:f7:f2:56:ae:26:c9:73:b1:4e:
92:68:5a:cf:cd:47:ce:51:8b:98:4e:ed:a6:cd:c7:73:04:6c:
a5:43:fa:96:03:c8:c7:96:2a:23:72:ab:96:c7:84:23:3b:78:
16:4a:56:ed:77:d8:aa:1b:04:53:18:7f:df:b4:31:02:44:67:
e2:dd:dd:87:2a:d6:e9:a0:13:64:43:c8:93:a6:9c:04:54:0b:
33:2e:db:2f:f5:c7:8b:90:cf:05:04:a8:9b:54:9d:ad:18:11:
28:f2:67:b9:b1:f7:35:ff:ff:b0:f6:22:62:c8:01:fa:ec:05:
cf:d8:ad:4a:f4:6f:67:24:29:19:de:df:3e:06:79:f6:c0:ca:
49:78:2a:95:8a:6f:b9:17:c1:88:c9:61:53:47:5b:c8:78:76:
a8:99:f0:8f:54:cb:fd:91:aa:04:8a:9b:84:53:2c:c0:69:d2:
2b:ea:4b:97:1b:a9:3f:16:07:87:99:4c:35:a2:3e:67:d9:54:
db:03:91:87:df:d0:fc:8d:18:48:1e:a9:53:93:a8:09:4b:a6:
80:81:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:18 2025 by rpki-client