Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fpDgCEgqwjnD4cNjMWfmMJYRyDA.roa
File: fpDgCEgqwjnD4cNjMWfmMJYRyDA.roa (raw, json)
Hash identifier: 1Ak3tsh9VBp2XIDj8iyxbkg7Ps1/ln46gmtmrnnZ1s0=
Subject key identifier: 7E:90:E0:08:48:2A:C2:39:C3:E1:C3:63:31:67:E6:30:96:11:C8:30
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D1C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fpDgCEgqwjnD4cNjMWfmMJYRyDA.roa
Signing time: Sat 14 Jun 2025 21:41:06 +0000
ROA not before: Sat 14 Jun 2025 21:41:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7452 (0x1d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 21:41:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7E90E008482AC239C3E1C3633167E6309611C830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:ab:7e:12:29:2a:dd:66:bc:06:e0:72:2f:
73:f1:60:32:f6:74:59:e8:15:f7:01:96:91:6b:68:
05:a6:50:e1:e9:83:21:bf:03:cc:8a:f2:82:5f:c9:
6c:f6:32:30:f6:10:6c:be:a1:48:94:cb:32:94:f1:
ca:25:ed:25:51:e3:14:6a:4b:99:55:71:04:42:cc:
2a:a4:75:cc:28:3b:62:23:d3:44:cd:d3:42:2d:d5:
34:e3:4c:e4:99:b1:74:94:59:0c:6b:af:b3:75:b8:
1f:7e:ba:e6:0a:98:ce:89:40:ed:29:52:23:10:a5:
73:df:d0:7c:eb:76:cc:b6:40:94:e2:c6:a1:5d:d1:
bb:cc:39:f7:dd:83:05:6d:68:46:36:a9:d8:6d:4a:
e2:ca:5c:37:c1:ac:c5:1a:40:cb:1b:36:ca:77:d2:
4c:ea:70:19:41:75:7a:da:16:6f:f9:62:5e:13:5b:
29:00:c3:44:0c:3d:cf:cc:c9:0e:64:70:2e:07:8e:
a7:d3:d3:2c:ed:e5:e1:9c:07:76:68:73:a1:89:4f:
93:07:ab:3d:29:44:57:52:23:d7:37:25:01:a3:89:
a3:7b:63:57:d0:7b:df:1a:57:44:06:80:f4:bc:3f:
85:b0:4c:95:02:bb:96:82:17:ac:2e:a0:ac:6c:9c:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:E0:08:48:2A:C2:39:C3:E1:C3:63:31:67:E6:30:96:11:C8:30
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fpDgCEgqwjnD4cNjMWfmMJYRyDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:22:aa:c8:fb:a2:31:aa:6e:bb:67:88:79:68:2e:47:14:92:
c5:c3:74:8f:0d:90:22:5a:e9:a1:43:ab:42:1c:3e:f8:90:aa:
6f:87:00:9d:d1:6c:e1:81:05:89:ad:7f:91:9a:ac:23:d7:d1:
0c:57:62:62:6d:3e:38:39:d7:79:cb:85:02:bd:e4:4a:5d:77:
49:d2:77:0f:56:0e:f5:0f:68:66:c6:a1:5c:79:2f:ca:7f:bc:
67:44:9b:f9:5b:9c:48:53:c9:57:cd:76:8b:39:c2:0b:a4:95:
9e:08:16:37:12:f4:b3:1a:07:05:52:75:0e:d0:a7:f1:8b:1e:
68:cb:93:47:e5:8b:24:81:fd:e2:08:b1:11:36:67:60:fd:81:
f9:53:72:66:df:22:d1:53:89:5b:4e:09:48:8f:4b:d8:b6:42:
6c:d6:50:31:d6:2b:f6:79:df:f5:52:e9:4c:20:e3:81:f7:e3:
b7:85:84:8d:5d:14:f7:2a:e6:34:9b:90:e1:2a:a4:54:27:c5:
6e:35:e0:ab:de:3f:08:b0:7d:4b:f8:0a:8c:0f:1e:0b:e3:66:
22:44:ea:8e:6c:50:5c:d4:12:3f:ee:d6:87:ec:8b:06:71:7f:
4f:3f:36:1c:04:ec:4f:a8:c2:de:9e:f0:84:b7:7c:49:d2:20:
39:da:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:52:27 2025 by rpki-client