Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rbFgJnXGgQWIYnc9rSg69taDHWw.roa
File: rbFgJnXGgQWIYnc9rSg69taDHWw.roa (raw, json)
Hash identifier: VhQjr4zCzhixpjjnYVFFZanByCCc9EbtSxVt0RU9BV4=
Subject key identifier: AD:B1:60:26:75:C6:81:05:88:62:77:3D:AD:28:3A:F6:D6:83:1D:6C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C28
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rbFgJnXGgQWIYnc9rSg69taDHWw.roa
Signing time: Fri 23 May 2025 07:08:25 +0000
ROA not before: Fri 23 May 2025 07:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 07:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ADB1602675C681058862773DAD283AF6D6831D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7c:e3:88:68:52:ed:c6:3b:b0:30:36:8c:04:
e6:55:3a:fe:9e:62:e0:fb:98:c1:00:8a:33:be:7b:
f1:1b:ad:8a:01:8a:74:b2:b4:f2:bb:3f:91:d0:94:
eb:25:2a:06:45:c2:81:f8:18:8e:7e:0d:ac:71:fe:
a1:30:20:b1:e4:9f:16:7c:ac:ad:72:d1:f9:6f:49:
0f:6b:db:19:98:a7:51:20:c3:55:84:03:8e:8f:b8:
ad:9a:88:b4:8e:a6:a3:2a:f6:42:ca:49:37:8c:15:
0c:89:46:86:90:ac:a5:02:5f:30:55:c1:5f:d1:f1:
b7:81:7c:73:d3:a9:b4:03:b7:10:97:0d:ba:ab:ae:
84:dd:90:d8:05:2e:88:cd:23:33:6a:e9:a7:bc:a4:
8e:5d:07:b0:a3:46:b6:14:cc:d5:4f:b6:ff:9b:ca:
1d:b7:57:dd:0d:5d:ab:16:d0:71:50:1c:27:ac:fd:
30:65:b5:2b:35:95:6d:6a:98:07:80:f9:98:34:ff:
74:42:c4:64:b7:52:86:eb:aa:ca:60:29:f1:d5:dd:
51:33:f6:41:bf:11:94:bb:42:d9:e5:6a:ef:c8:fc:
d5:f2:c4:7a:ba:ad:54:e8:02:cf:46:36:62:fc:bb:
e2:23:b9:67:8c:96:56:b5:54:bd:ad:0b:c1:91:91:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:60:26:75:C6:81:05:88:62:77:3D:AD:28:3A:F6:D6:83:1D:6C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rbFgJnXGgQWIYnc9rSg69taDHWw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:8d:23:d2:fd:fc:1d:e3:0f:64:01:fb:bb:7b:29:b3:9e:3e:
c0:7f:9a:5d:24:54:2a:fa:6b:56:2c:98:a4:a8:6a:f4:14:17:
5c:d2:14:9a:3f:8d:ba:58:b1:20:25:99:1f:e2:c9:64:d2:2b:
db:75:db:2a:1c:d6:3b:64:37:2d:ef:f3:97:88:e7:8f:ac:ed:
64:51:25:30:a4:09:d3:ba:81:a0:20:a6:e9:16:54:50:69:07:
82:89:db:87:02:5a:e2:1a:fa:cd:0b:a6:d9:63:2d:8c:de:ae:
06:e6:05:07:97:1f:37:0d:63:e8:3e:a8:ca:86:a3:d6:cd:37:
c5:06:35:74:bc:5c:57:ee:01:f0:de:b3:f0:2d:62:74:f3:78:
0a:a4:55:41:4c:19:ef:c9:e3:57:e0:ef:5f:7e:23:68:9e:d4:
f8:dd:da:68:7f:66:44:64:49:44:30:bd:cd:91:a0:b3:eb:be:
47:e8:37:e4:6a:1e:67:91:ca:e0:43:fa:fc:ed:60:5d:a3:de:
a3:6f:91:a5:6e:d2:25:52:7b:af:8b:b7:fd:78:89:bd:5a:48:
5c:6c:cb:fa:98:64:c0:6b:4a:09:a7:4b:25:9e:08:d8:5e:4c:
b0:5f:d1:4c:17:f9:ca:ef:9e:e5:76:09:ff:e8:da:03:34:a0:
62:8a:79:9e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMw
NzA4MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFEQjE2MDI2NzVDNjgx
MDU4ODYyNzczREFEMjgzQUY2RDY4MzFENkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzfOOIaFLtxjuwMDaMBOZVOv6eYuD7mMEAijO+e/EbrYoBinSy
tPK7P5HQlOslKgZFwoH4GI5+Daxx/qEwILHknxZ8rK1y0flvSQ9r2xmYp1Egw1WE
A46PuK2aiLSOpqMq9kLKSTeMFQyJRoaQrKUCXzBVwV/R8beBfHPTqbQDtxCXDbqr
roTdkNgFLojNIzNq6ae8pI5dB7CjRrYUzNVPtv+byh23V90NXasW0HFQHCes/TBl
tSs1lW1qmAeA+Zg0/3RCxGS3UobrqspgKfHV3VEz9kG/EZS7Qtnlau/I/NXyxHq6
rVToAs9GNmL8u+IjuWeMlla1VL2tC8GRkUvfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrbFgJnXGgQWIYnc9rSg69taDHWwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yYkZnSm5YR2dRV0lZbmM5
clNnNjl0YURIV3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAB+NI9L9/B3jD2QB+7t7KbOePsB/ml0kVCr6
a1YsmKSoavQUF1zSFJo/jbpYsSAlmR/iyWTSK9t12yoc1jtkNy3v85eI54+s7WRR
JTCkCdO6gaAgpukWVFBpB4KJ24cCWuIa+s0LptljLYzergbmBQeXHzcNY+g+qMqG
o9bNN8UGNXS8XFfuAfDes/AtYnTzeAqkVUFMGe/J41fg719+I2ie1Pjd2mh/ZkRk
SUQwvc2RoLPrvkfoN+RqHmeRyuBD+vztYF2j3qNvkaVu0iVSe6+Lt/14ib1aSFxs
y/qYZMBrSgmnSyWeCNheTLBf0UwX+crvnuV2Cf/o2gM0oGKKeZ4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:09:56 2025 by rpki-client