Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P4VwMhcCYq2GTovl7GDUZ1B2TSU.roa
File: P4VwMhcCYq2GTovl7GDUZ1B2TSU.roa (raw, json)
Hash identifier: MthxdNWRcu1R3lalpOC96Aial55dkVeSRDcE3pPPaFU=
Subject key identifier: 3F:85:70:32:17:02:62:AD:86:4E:8B:E5:EC:60:D4:67:50:76:4D:25
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 018C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P4VwMhcCYq2GTovl7GDUZ1B2TSU.roa
Signing time: Fri 09 May 2025 03:37:45 +0000
ROA not before: Fri 09 May 2025 03:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 03:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3F857032170262AD864E8BE5EC60D46750764D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:c5:e7:a0:4d:06:da:2a:5c:bb:3e:37:db:
6d:33:d7:21:f8:f2:27:ee:b4:a5:a9:e1:b3:ae:12:
b5:55:a1:de:f5:73:16:48:7f:70:b6:46:25:bc:b7:
41:ad:0c:fc:af:29:9a:65:71:b5:24:c9:bd:fa:95:
a7:56:fb:e7:d8:1b:7d:7e:95:86:1f:8b:98:77:05:
51:df:4a:ca:87:7f:64:4f:f6:c7:7f:a6:a5:8e:8d:
aa:eb:de:3f:02:96:0d:9e:d2:ec:a8:53:ff:04:2a:
2a:05:e9:c1:a4:f4:5c:42:bd:1d:82:73:a6:69:da:
ad:a4:f4:68:0a:5d:6a:3d:08:a5:3c:5a:60:26:b4:
8d:a6:42:0b:61:6b:9e:bd:1e:7a:4d:b4:1f:e6:18:
ad:15:09:24:d0:b7:03:0a:92:58:c8:60:2e:8b:76:
79:f3:66:50:a4:59:d7:3d:b7:3c:9f:5a:f1:91:f0:
e8:8a:70:16:66:f3:fa:22:4c:12:56:9e:96:17:c6:
fd:58:72:77:9e:3f:14:09:a5:16:2f:27:53:4b:da:
0b:34:65:6f:1c:bb:26:8a:37:00:d8:5f:b6:da:98:
87:81:8b:88:aa:0f:68:c7:b8:c6:5b:cf:d4:fe:c3:
bb:f7:f6:ba:e7:02:5d:17:df:f2:59:a5:53:d1:c3:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:70:32:17:02:62:AD:86:4E:8B:E5:EC:60:D4:67:50:76:4D:25
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P4VwMhcCYq2GTovl7GDUZ1B2TSU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:88:54:7d:4b:bf:b7:da:8c:57:0c:cf:10:88:10:f2:f7:01:
31:1c:ae:77:77:1c:b0:f9:d3:1d:93:72:5e:43:d1:2f:fb:75:
8d:4c:b4:42:3e:d2:21:db:06:88:c7:9a:15:ae:08:a4:42:05:
a0:1f:fc:30:53:6c:b5:c3:1e:b9:33:c1:71:1d:90:0a:d4:db:
50:3b:61:0b:77:9e:b2:b2:df:68:24:ae:17:bd:66:ea:3b:61:
e7:23:ef:d3:be:31:fd:13:e5:cf:bb:b5:77:dd:ee:30:96:f5:
65:fa:30:74:8d:f5:4c:65:10:a6:aa:4d:ec:e2:be:ee:88:93:
8a:c7:07:31:dc:9c:84:06:04:83:72:f2:4c:3f:a9:da:36:8b:
17:d4:c4:a5:10:2a:f1:6c:68:34:f7:4c:eb:36:4f:ea:e8:c6:
cc:ce:90:36:4c:58:87:3b:f4:87:72:45:e4:d0:bb:27:a3:1d:
33:b8:82:7b:87:08:80:bf:a4:96:ad:f8:8d:fa:fe:17:58:64:
23:77:0d:d1:08:b0:15:5f:0a:5f:2b:d8:8f:64:db:34:6a:95:
9e:ba:8e:92:96:19:fc:5c:7d:14:bd:5a:74:36:e1:11:b0:4a:
e5:03:27:75:de:d2:e5:b6:60:fb:0f:cf:7d:bd:45:c7:81:6d:
83:e5:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:17 2025 by rpki-client