Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ij5uWy5r75Yrj8uQ5Cj2s9SfEO8.roa
File: ij5uWy5r75Yrj8uQ5Cj2s9SfEO8.roa (raw, json)
Hash identifier: W4W2l/mtAhVqKKNmxl5GfxeQf0GvXATnZk/TQbiG68Y=
Subject key identifier: 8A:3E:6E:5B:2E:6B:EF:96:2B:8F:CB:90:E4:28:F6:B3:D4:9F:10:EF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08CC
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ij5uWy5r75Yrj8uQ5Cj2s9SfEO8.roa
Signing time: Sun 18 May 2025 19:38:10 +0000
ROA not before: Sun 18 May 2025 19:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252 (0x8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 19:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8A3E6E5B2E6BEF962B8FCB90E428F6B3D49F10EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:83:30:9d:99:a7:80:be:55:6b:8c:b9:18:
c2:6e:b4:61:c4:20:21:eb:e2:54:dc:ff:9c:84:f2:
15:4e:e7:36:ac:f5:85:3b:c5:e7:d0:96:15:b2:32:
2d:2a:ac:7c:ea:e5:c5:f1:6b:c3:0d:c9:b5:75:e9:
18:f8:34:50:85:16:e3:b9:17:3f:e2:0d:66:dd:6d:
52:5a:85:2e:91:d0:97:9c:aa:1e:ae:78:7f:7c:dd:
04:43:b9:5e:4d:53:4b:47:05:c3:c2:fb:bc:73:35:
fe:0e:d6:22:ae:99:da:0d:17:f7:1d:1f:4f:be:3d:
09:c9:93:2f:63:46:11:0d:0d:de:3f:a6:b4:cf:61:
6c:13:ef:1c:f1:81:d5:0c:61:35:fd:23:ed:9a:13:
e3:58:ad:82:27:60:fd:84:02:76:d0:46:4d:e0:88:
81:6d:7e:c4:48:34:a4:3e:ae:bd:e5:7e:2d:60:be:
84:f8:aa:fc:20:d1:8f:b8:b1:3a:00:85:44:0c:69:
1d:e9:5f:73:0f:4a:c2:5c:a3:4c:5a:1e:b2:ba:81:
5c:86:e9:20:33:c0:c8:31:60:8c:74:10:71:0c:b6:
8c:9f:36:20:f1:1a:96:f1:f3:3d:57:64:5f:9f:a9:
aa:ed:f9:3f:15:69:71:4c:22:8f:0e:1b:aa:53:17:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:6E:5B:2E:6B:EF:96:2B:8F:CB:90:E4:28:F6:B3:D4:9F:10:EF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ij5uWy5r75Yrj8uQ5Cj2s9SfEO8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:5d:7b:85:a6:31:9e:7f:e7:ab:46:72:be:d4:8a:85:dd:e6:
db:8b:54:08:ed:0a:70:7f:24:39:f9:0c:f9:7c:02:ab:8d:12:
b5:50:0c:ba:0c:d6:75:6c:85:3b:18:e5:ad:1e:7d:81:37:06:
87:e2:1b:95:e7:3a:de:80:ae:7c:5e:5a:33:bb:d4:de:41:ae:
61:b2:cc:23:20:35:e7:22:ca:01:45:fd:6c:5c:94:eb:8e:3b:
69:b3:09:89:ab:af:f6:45:93:56:90:d6:d5:18:1b:85:83:b4:
78:8e:db:3f:99:f3:49:a4:74:6a:32:5e:c6:82:df:6a:18:2b:
b1:11:10:bb:d8:29:d7:6a:b9:7c:56:a9:d5:f2:7b:f1:7a:33:
d4:0d:cd:23:d1:2a:05:1a:4c:08:0d:94:22:e5:15:9b:2a:28:
29:89:78:2a:06:a4:8a:5a:39:3d:18:a5:a0:76:c4:e3:d3:88:
b4:42:be:68:b0:0e:85:25:d8:41:a0:25:04:37:07:61:db:49:
70:fd:8b:95:4f:2c:14:ca:7a:d9:be:0a:65:ae:5d:5c:0d:21:
02:86:21:7d:21:fa:c8:c4:30:50:ba:b4:13:c9:9b:88:50:d6:
83:de:dc:99:b3:e3:4c:33:1e:48:0e:d2:6d:27:a8:ff:44:02:
65:e9:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:10:32 2025 by rpki-client