Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eKgGF1RNCCMPNApAh8SCdaM1Vvk.roa
File: eKgGF1RNCCMPNApAh8SCdaM1Vvk.roa (raw, json)
Hash identifier: ZFl7iiWYsbr3B/xyk6vz2oQZQ2l6z2Zj+7LWXAFzah4=
Subject key identifier: 78:A8:06:17:54:4D:08:23:0F:34:0A:40:87:C4:82:75:A3:35:56:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0924
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eKgGF1RNCCMPNApAh8SCdaM1Vvk.roa
Signing time: Mon 19 May 2025 06:38:11 +0000
ROA not before: Mon 19 May 2025 06:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 06:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=78A80617544D08230F340A4087C48275A33556F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:8b:48:20:08:2c:cb:2f:3c:7d:24:7c:91:
45:8a:6f:39:ff:3a:f7:fd:f2:bb:65:5d:e6:21:73:
35:6d:c4:dd:23:cf:53:2b:35:09:b1:8e:d7:89:fb:
ca:c1:9c:af:69:3a:ba:3f:7a:80:20:07:33:49:64:
8b:a6:cd:e1:d6:a8:ed:4f:f9:50:d4:a1:24:9b:83:
22:18:34:b8:a1:c0:50:0d:7a:c9:e7:c5:66:0e:cb:
4c:46:26:5d:32:b7:7a:57:fe:28:1f:d8:b4:e2:86:
6c:df:c8:a7:91:2a:4f:02:17:17:b7:8b:55:22:6f:
a5:63:01:2f:b0:0c:f2:f8:4c:7e:b7:d9:6a:03:bd:
2f:e3:26:63:db:2d:26:4f:6d:b5:d5:36:c3:9f:0c:
bc:46:ef:ae:ca:ba:93:51:9a:0c:93:60:bb:95:6b:
47:20:8a:0f:76:bc:fd:ec:8e:e2:c8:91:8a:8f:99:
f0:31:36:ec:3c:e9:fa:42:b7:22:be:88:57:8d:db:
cb:f1:b9:ac:f6:9f:c5:23:8c:a7:12:c6:e5:8e:41:
f2:fa:ab:16:b6:ac:d6:f0:20:83:01:15:44:74:09:
2f:e2:21:d5:be:d1:11:34:eb:78:4e:c5:8d:19:2b:
7b:c4:20:d8:20:8e:86:34:e9:0f:ca:dd:47:e9:f3:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:06:17:54:4D:08:23:0F:34:0A:40:87:C4:82:75:A3:35:56:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eKgGF1RNCCMPNApAh8SCdaM1Vvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:5e:8b:58:a4:48:09:87:00:a6:58:79:24:95:7d:ff:ac:1a:
e5:56:73:5c:66:78:57:2b:3a:4d:ef:fc:a2:8b:13:f6:a1:24:
66:c1:d4:8e:fd:94:ba:bd:2c:c9:a4:ac:f7:4f:e1:cb:25:27:
a7:1a:8d:b8:c0:fc:8c:f5:93:5d:89:fa:76:0c:60:6a:ca:97:
5a:5b:1c:99:60:be:01:a1:94:5a:a4:41:84:fa:17:e5:7b:b6:
01:b0:4b:b4:d6:26:e3:48:68:be:9f:bf:6c:93:7c:2f:fe:76:
45:15:b1:4b:84:d5:7f:dd:e3:7a:9f:55:fe:f9:ce:65:10:16:
ab:d8:99:24:d5:44:8f:53:88:0b:f8:0e:23:46:f6:ad:5b:51:
dd:5d:a6:94:43:6f:78:4b:fc:7d:72:7f:b8:00:19:89:14:9f:
22:5b:32:6e:41:ff:6a:07:3a:a1:af:ad:8a:9e:b7:bc:cf:95:
de:94:78:a2:41:0f:4c:cb:52:f5:14:98:df:cd:88:9b:9b:aa:
45:ce:b5:69:17:36:0b:12:b6:4c:8b:b4:0f:b7:90:39:25:61:
5d:25:55:ca:8b:57:8d:36:6a:ff:13:01:e8:bc:ec:9e:c9:c9:
c2:4f:39:56:6b:8d:c5:f7:c7:4f:0c:a4:85:13:6b:32:4f:22:
0f:ba:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:20 2025 by rpki-client