Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m8Tofk5fNYlTs7JHFsggH81fEOw.roa
File: m8Tofk5fNYlTs7JHFsggH81fEOw.roa (raw, json)
Hash identifier: rAC/sa1w5SoReqPiKk1KjuKIN8JQDFJBH8YxBQxBzvM=
Subject key identifier: 9B:C4:E8:7E:4E:5F:35:89:53:B3:B2:47:16:C8:20:1F:CD:5F:10:EC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 130C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m8Tofk5fNYlTs7JHFsggH81fEOw.roa
Signing time: Sun 01 Jun 2025 11:39:19 +0000
ROA not before: Sun 01 Jun 2025 11:39:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4876 (0x130c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 11:39:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9BC4E87E4E5F358953B3B24716C8201FCD5F10EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:94:68:07:55:90:b2:10:d9:98:17:f2:33:
5a:d4:b4:f5:39:3f:04:7e:49:4d:8e:da:29:a5:c9:
a0:d1:f2:96:22:f1:af:ec:17:f5:79:c1:f7:5e:da:
f3:f2:a5:be:95:aa:d8:21:59:57:48:69:47:fb:23:
9e:a6:46:8f:32:a3:69:62:cf:87:ad:53:36:37:69:
0d:0a:81:12:6c:a6:d2:11:4d:c0:9c:dc:5c:b0:cc:
cd:1e:65:af:a6:1d:83:03:cb:40:0f:29:8d:64:7b:
dd:e2:2c:55:86:37:10:ae:3f:b6:74:fb:e6:13:11:
6b:cd:15:7c:99:e5:f8:dd:31:fb:7b:04:b9:1c:3e:
2f:43:2a:0e:5a:52:b8:42:11:fb:c3:d5:52:fc:f7:
f4:39:54:34:b4:df:b0:86:04:55:fb:14:49:8c:ed:
07:94:3a:42:6d:f4:8e:0f:5c:f7:11:92:79:3f:45:
0f:e8:bb:8a:13:93:7a:19:d4:0a:ec:d0:c5:7d:c2:
f7:05:68:28:0e:5d:1d:e8:c1:ca:a1:6a:70:20:d9:
5d:55:dd:f5:c4:7c:20:a5:ae:21:a4:f6:cc:99:bc:
ba:85:c5:39:cd:63:db:53:00:f5:8c:7c:4b:5f:02:
3c:ca:7e:78:7b:a8:79:eb:1d:ef:04:88:be:37:34:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:E8:7E:4E:5F:35:89:53:B3:B2:47:16:C8:20:1F:CD:5F:10:EC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m8Tofk5fNYlTs7JHFsggH81fEOw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:4e:2c:47:cd:cb:38:87:da:96:8d:5e:1f:0b:fd:3a:04:fa:
51:88:14:52:39:1a:a1:cb:32:74:9b:04:c8:60:e5:9b:fc:21:
09:18:7c:4b:f8:52:35:20:71:6f:30:1b:48:7b:17:aa:fd:50:
b7:85:ba:b8:bc:18:d4:8f:46:90:2c:b5:e1:bd:97:64:8c:1d:
9b:c2:f3:c7:91:dd:62:24:a0:c6:29:b8:b0:41:f7:c9:df:46:
a8:bf:c4:cb:bd:6f:81:61:7c:1f:8c:22:1d:6f:52:c0:3d:44:
d8:81:36:f2:10:45:18:eb:d5:c0:d1:c5:e8:44:57:1d:4c:c9:
0b:02:86:a2:00:00:a5:9e:0f:b0:da:2b:45:ca:20:21:bc:2d:
89:f6:74:43:d1:c6:b1:19:f2:35:77:84:d1:61:1c:bc:c3:4e:
15:e5:11:41:ba:70:99:53:73:86:75:34:b9:37:ce:34:1b:9b:
dd:9e:e7:08:d6:af:9f:f0:02:7b:e5:a7:c3:25:94:27:35:cc:
19:e2:29:9e:7f:57:2f:1d:6a:84:f2:d2:cd:96:d8:24:5c:a0:
01:d8:97:54:4c:d7:3d:9a:97:9a:05:e7:ac:a2:0b:6c:96:ec:
c2:5d:30:7f:12:51:2d:64:da:ac:18:2f:9c:87:3b:97:e9:7a:
43:94:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:40 2025 by rpki-client