Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ShaLWdrOW2r_e5Mx9EL1m2YM0fc.roa
File: ShaLWdrOW2r_e5Mx9EL1m2YM0fc.roa (raw, json)
Hash identifier: Vj9ZdTUPiI8+/8iZX0YHpAwL66Cj+YeesX8RDG9lzrw=
Subject key identifier: 4A:16:8B:59:DA:CE:5B:6A:FF:7B:93:31:F4:42:F5:9B:66:0C:D1:F7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A38
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ShaLWdrOW2r_e5Mx9EL1m2YM0fc.roa
Signing time: Wed 11 Jun 2025 01:09:53 +0000
ROA not before: Wed 11 Jun 2025 01:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6712 (0x1a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 01:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4A168B59DACE5B6AFF7B9331F442F59B660CD1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:9f:00:00:44:ba:16:00:d8:c0:3a:9c:87:
8e:df:31:f4:d2:3f:3e:f8:34:38:ef:f8:5f:8d:2f:
bb:ba:0c:24:66:24:a9:7a:18:9f:fb:65:d9:10:e4:
c9:ad:13:6a:31:4d:c4:8c:c3:40:37:b3:cc:91:03:
a4:06:f4:18:df:eb:72:dc:1a:2a:c8:36:cf:12:89:
9c:d4:f0:ab:82:39:a0:a7:d6:2c:51:32:2f:75:c1:
4c:dc:69:33:c1:10:33:a5:18:63:c8:c1:97:0c:3a:
3a:44:40:1c:ac:68:0a:e7:7b:dc:f5:62:b8:5a:43:
17:9d:1c:0b:be:c0:c5:c7:f7:4f:46:66:e8:0b:4d:
bb:52:b2:ac:36:ee:72:e6:49:1c:6f:ee:df:92:76:
94:72:79:e1:65:95:69:71:6d:a9:30:23:8d:10:d0:
3e:7e:5c:ab:1b:76:56:5a:9e:22:23:9c:54:b2:b7:
80:44:36:f9:c9:7b:b1:55:c6:25:ab:0b:35:39:e5:
7e:b2:ff:a6:fe:3a:7f:ba:23:53:89:08:29:e7:15:
e6:ed:9e:26:fe:bd:3f:74:eb:e7:f8:6c:02:0d:df:
57:6c:85:8b:d5:66:e6:8d:78:42:42:d8:b3:49:bd:
74:91:11:64:c3:b2:f7:f8:32:f8:80:d8:e6:e1:59:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:8B:59:DA:CE:5B:6A:FF:7B:93:31:F4:42:F5:9B:66:0C:D1:F7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ShaLWdrOW2r_e5Mx9EL1m2YM0fc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:c0:4e:3e:0b:93:1c:f1:18:f9:6e:18:28:ef:86:70:18:7a:
2a:92:67:5e:e5:51:b1:b4:81:b3:c7:b3:1d:50:8a:ae:b0:e8:
fc:41:64:56:12:d3:a1:7c:11:e4:c0:3c:bd:34:23:53:e3:88:
58:3b:d8:0c:99:9f:d6:76:f0:8e:ef:4b:30:54:b8:c3:d9:11:
d5:a6:3b:dd:59:e3:a6:12:54:42:85:07:e0:8c:b5:02:55:fa:
a9:41:78:2f:8d:2c:ec:33:f1:d5:8a:24:99:0d:7a:d6:e3:31:
f6:d5:35:3a:28:a3:f1:99:9a:bc:58:90:fd:4c:d7:f1:28:09:
ce:53:20:b3:4d:47:ec:77:fc:10:60:a2:57:08:4d:8b:8b:3b:
0d:ad:6c:6b:be:0d:3d:b6:9f:7e:54:93:95:25:5d:f4:f4:f3:
da:d8:f0:2e:0e:17:97:bd:aa:3d:71:fb:33:96:44:ac:4e:28:
b8:f7:fb:2d:93:5c:bd:45:7f:24:2f:33:b9:46:1d:af:35:5c:
3a:34:ad:56:64:39:ba:e3:0f:ee:08:e6:c6:be:ba:08:2f:7e:
a5:13:bb:12:86:e6:30:57:45:0b:75:df:c0:8c:5a:d3:16:cf:
46:c1:72:cf:ef:50:b8:69:dc:9e:ca:bf:c6:82:3a:28:a8:34:
7f:64:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:40:49 2025 by rpki-client