Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qTyXPp4OE7rNaCbKediYpq4DbEo.roa
File: qTyXPp4OE7rNaCbKediYpq4DbEo.roa (raw, json)
Hash identifier: cdRJh5j3vsb1Z0/VbL3zFEMNGb/1SLM3D7br1U/L+iQ=
Subject key identifier: A9:3C:97:3E:9E:0E:13:BA:CD:68:26:CA:79:D8:98:A6:AE:03:6C:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AF0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qTyXPp4OE7rNaCbKediYpq4DbEo.roa
Signing time: Thu 12 Jun 2025 00:09:47 +0000
ROA not before: Thu 12 Jun 2025 00:09:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6896 (0x1af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 00:09:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A93C973E9E0E13BACD6826CA79D898A6AE036C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:17:b3:f9:eb:79:c3:4e:9a:0a:dd:c7:a2:
f6:ca:c5:1e:81:b1:ec:9b:83:ab:11:0e:e9:2c:d7:
eb:63:c8:ca:f3:48:5b:d6:38:d8:75:a2:d8:a0:b4:
c2:8a:76:a1:f0:a5:c6:27:c6:98:c6:41:26:0a:1b:
c9:ea:8c:d8:90:aa:29:ad:c3:3e:14:a9:0e:08:b1:
6e:cb:44:88:f7:bc:5b:00:bd:ba:3d:a0:fd:63:b9:
b6:9f:c7:c7:e4:5a:65:47:15:ed:f5:47:7f:b4:28:
ac:df:a0:bb:ac:75:08:af:3d:87:f0:fc:63:5a:44:
ef:dd:7d:70:0d:c6:62:d8:86:ce:ad:a1:a5:24:41:
85:f0:c0:a9:eb:0a:92:7b:db:7f:69:bc:a2:e1:0e:
b4:4f:01:2d:22:94:6d:85:c8:de:a3:18:5d:b6:09:
ad:39:aa:d4:75:0c:57:33:8a:2d:5b:30:a0:42:f8:
f1:7f:8e:83:08:85:d3:de:51:51:fa:49:97:05:6a:
51:b1:76:34:0c:70:1a:84:2b:ef:2b:4c:14:8c:1d:
fc:fb:2d:b5:78:67:c5:ef:f4:95:10:d5:a4:d3:82:
65:a2:cf:53:ff:16:61:06:3a:58:bb:07:ec:72:b4:
d4:d3:95:4b:1e:07:e5:e1:b8:ee:ee:39:86:01:82:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:97:3E:9E:0E:13:BA:CD:68:26:CA:79:D8:98:A6:AE:03:6C:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qTyXPp4OE7rNaCbKediYpq4DbEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:63:07:65:2b:94:71:dc:f2:f4:ee:b9:d6:3f:a4:9b:11:dd:
8b:6d:6c:cd:eb:67:c8:8b:22:93:05:ec:45:e3:86:dd:aa:c9:
8e:dd:3e:e7:fd:76:9f:cb:f9:b2:04:30:d7:b5:3c:d3:d7:5d:
8f:61:93:29:b7:1a:d6:2a:7f:a0:b4:e4:76:c5:7a:21:76:e2:
08:c4:64:19:7e:c7:95:cc:c6:03:ae:1b:8f:98:6f:67:e5:36:
e8:f5:a4:3c:b8:70:7d:1c:18:88:d5:ad:a1:6e:3d:ec:5a:4c:
08:d0:20:6e:ed:80:43:df:1f:ef:a9:26:47:69:09:a3:ee:f6:
c8:b4:ff:89:03:45:de:20:2e:ab:2f:2b:b7:55:f2:8f:14:76:
a7:13:88:ce:56:02:58:18:49:56:c4:53:a5:5f:71:9f:f2:b3:
9c:41:dc:ad:a4:31:e5:c2:d9:15:e3:6f:74:a6:a2:53:d1:18:
66:97:80:5f:0c:c4:ae:38:fb:6c:4f:c7:78:51:b5:45:49:1f:
51:02:59:2d:b1:37:f8:53:b2:9c:4a:b3:eb:bc:1c:9a:21:16:
3c:6e:84:65:ad:d5:69:ee:5a:15:28:26:03:d4:80:01:6d:82:
ca:bb:21:f1:8a:7e:8b:4b:30:b2:ef:27:fb:8d:ee:6f:f0:ad:
36:8b:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:04 2025 by rpki-client