Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o7Gqr2seL38DqFOcnFSOjNihYLA.roa
File: o7Gqr2seL38DqFOcnFSOjNihYLA.roa (raw, json)
Hash identifier: zTgxlljtNs18l86i1vSfHu6+wsS5OznadMoERPIld7k=
Subject key identifier: A3:B1:AA:AF:6B:1E:2F:7F:03:A8:53:9C:9C:54:8E:8C:D8:A1:60:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1818
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o7Gqr2seL38DqFOcnFSOjNihYLA.roa
Signing time: Sun 08 Jun 2025 05:09:33 +0000
ROA not before: Sun 08 Jun 2025 05:09:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6168 (0x1818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 05:09:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3B1AAAF6B1E2F7F03A8539C9C548E8CD8A160B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:18:0a:83:d0:a1:75:39:90:c0:9f:41:dd:
28:f7:52:29:c8:f6:d6:36:5d:b0:55:23:36:b1:b9:
ae:6e:cd:07:ff:d4:d1:65:2c:7b:0a:f3:cf:9d:35:
77:8a:6a:95:a2:39:e9:76:2a:ac:04:70:27:1b:48:
b8:0b:c0:cc:fe:8d:13:b6:99:85:39:5a:0b:83:91:
6d:db:cb:58:ef:c3:e7:21:19:06:c9:20:0e:04:7c:
32:c6:f1:f1:c5:b1:e7:ca:58:2d:34:41:ea:ae:fe:
49:74:ab:db:c0:dc:0e:9f:60:65:80:fd:fa:1d:10:
f8:76:e8:8a:8c:5d:92:93:96:2a:5b:9e:a0:e4:b7:
95:9e:41:e8:c0:e9:7f:c3:6a:9c:24:f3:12:27:1a:
f4:c6:0d:84:ef:c2:10:2b:9e:57:14:47:f3:7f:fa:
72:63:fe:9b:1c:36:b8:4e:43:05:0a:59:24:44:63:
a1:99:e3:04:e7:76:19:ca:a1:eb:8f:15:73:6e:08:
04:f8:00:48:43:4a:a3:72:52:9d:7e:f4:2e:49:87:
c3:e0:f4:64:1d:38:36:09:64:12:1a:da:38:26:d6:
ff:7a:81:90:6f:56:7d:59:2e:45:ea:3d:dd:5e:e5:
87:0a:a6:8f:f7:69:69:45:92:e9:7e:cf:05:b7:d2:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:AA:AF:6B:1E:2F:7F:03:A8:53:9C:9C:54:8E:8C:D8:A1:60:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o7Gqr2seL38DqFOcnFSOjNihYLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:7e:10:cf:90:77:ba:62:a1:22:a1:24:46:22:00:bf:fd:3b:
16:64:08:37:f3:cc:00:c1:b6:bd:79:fd:22:fd:24:49:e9:71:
59:8c:e5:df:f9:9e:53:db:ce:43:9c:f4:74:a6:50:4b:0c:ab:
b0:63:0b:bb:61:d3:5c:06:44:7e:38:47:5f:02:f2:41:ea:76:
66:88:ca:ea:b8:b3:98:b3:c2:5d:2b:84:54:01:3b:c4:98:e6:
52:d5:e5:d4:2b:7f:2c:78:65:96:fb:db:cd:cc:40:cc:f5:80:
f8:bc:66:56:8f:fc:a5:2a:fb:0c:e3:8e:c3:09:25:df:a3:9d:
18:3a:d8:1c:77:43:c8:11:d8:df:0b:fa:70:dd:e5:c9:f3:d8:
ef:f8:35:fa:65:7c:65:be:32:49:48:6b:3f:fc:a4:94:95:a4:
fb:19:36:70:5a:06:29:f9:a2:cf:54:be:91:d2:21:11:84:ce:
b5:78:7a:77:48:de:1d:14:c8:97:99:22:64:69:e7:eb:af:0b:
da:58:a1:40:7b:9f:77:47:00:fc:38:be:f1:75:22:49:a6:f4:
81:67:d7:71:61:71:4a:be:e0:31:b7:52:e5:71:ca:85:57:9c:
e5:5b:47:39:49:2c:47:45:7a:75:8a:58:9e:c1:da:d9:e4:09:
4e:0f:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:16 2025 by rpki-client