Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dJab8zsQGJ3stcvpqRvDvIb_PRk.roa
File: dJab8zsQGJ3stcvpqRvDvIb_PRk.roa (raw, json)
Hash identifier: GvrBGDpeeAv31JwzqQn59zXWWjC3YKs1SLK9z4UjK4E=
Subject key identifier: 74:96:9B:F3:3B:10:18:9D:EC:B5:CB:E9:A9:1B:C3:BC:86:FF:3D:19
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1418
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dJab8zsQGJ3stcvpqRvDvIb_PRk.roa
Signing time: Mon 02 Jun 2025 21:09:12 +0000
ROA not before: Mon 02 Jun 2025 21:09:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5144 (0x1418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 21:09:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=74969BF33B10189DECB5CBE9A91BC3BC86FF3D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:d0:f5:2d:85:ac:9e:e0:88:7c:35:b6:3c:
0c:99:31:91:43:4d:71:29:0a:46:2d:65:3c:95:81:
2d:00:99:55:55:79:10:82:3d:d7:2c:e2:dd:6d:94:
a3:87:10:ba:92:8d:3e:e8:b5:a2:2e:a5:06:9b:fb:
fc:bd:c8:f4:a3:af:de:bc:75:1c:29:60:23:9e:9a:
3c:98:db:0a:13:2b:91:bf:15:1e:7f:9c:2a:6a:11:
63:b1:b9:78:6b:de:7e:78:95:f0:8f:7c:75:e6:05:
9a:54:4a:3e:cd:d2:07:54:65:51:dc:ce:fe:e7:0d:
cc:5c:1c:06:3d:a5:25:2d:17:3c:78:0c:5f:cf:ba:
73:28:3e:39:bd:ed:29:cc:bd:60:50:e0:85:f7:0e:
5d:17:50:5c:ff:10:bc:b2:ad:3a:71:10:ff:25:8f:
b8:15:90:5f:af:6b:4f:52:ff:b2:9e:29:93:ab:95:
fa:58:06:37:c0:ef:7d:45:cc:47:ad:96:46:f9:68:
21:66:06:8f:7b:75:dd:b5:1b:67:ff:28:d8:8e:f0:
0a:bf:a7:5d:af:4a:12:05:b5:c2:98:fc:d1:a7:5e:
38:26:72:3f:82:6f:45:c3:7e:32:62:3f:bf:a6:2e:
a5:6e:63:57:cf:01:74:8e:1d:4c:78:90:cd:fc:fd:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:9B:F3:3B:10:18:9D:EC:B5:CB:E9:A9:1B:C3:BC:86:FF:3D:19
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dJab8zsQGJ3stcvpqRvDvIb_PRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:5b:b5:fc:92:b1:2e:63:26:84:ff:4e:75:ad:d2:75:6c:d7:
9d:36:06:23:a3:81:73:4f:bb:51:d4:0c:ba:95:f9:fb:19:1e:
07:b5:0d:5e:63:74:7d:0f:a5:d4:6e:81:9b:b0:c4:ba:f8:c7:
55:c4:8b:93:a9:97:02:6d:21:0f:09:73:8e:b2:6d:dc:8e:55:
c8:31:1c:b6:34:45:98:1a:f6:82:0f:6e:d8:db:ea:34:21:e1:
f9:97:50:d1:58:44:f9:1f:7a:54:5d:42:93:cb:07:cb:c0:20:
ae:fd:37:6e:db:d7:48:be:af:9d:9a:25:81:3a:04:7b:9f:5a:
11:26:f2:c2:54:bd:56:1f:d0:a2:05:c2:d2:f4:71:7a:4f:09:
b4:50:75:83:6e:0b:d0:01:9b:df:92:b3:3b:74:56:6d:69:b9:
00:6e:bf:bd:bb:90:95:5e:d1:f2:6d:71:9f:79:5f:ba:dc:d8:
e7:e3:4b:59:a6:c8:10:4f:ac:70:56:70:55:ae:bc:46:cd:48:
59:c8:a6:cd:10:b0:cf:b4:2e:d8:5e:eb:38:d0:a1:9b:f8:1a:
1f:ac:22:5d:c4:3a:bd:63:a4:e9:6c:ce:7d:99:02:c0:1d:da:
c5:11:61:71:fe:1a:cf:f5:08:71:9f:49:d9:11:f7:e4:aa:e7:
c4:d0:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:46 2025 by rpki-client