Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tcwncrhe-zdvTkywlB41ZvHkiG4.roa
File: tcwncrhe-zdvTkywlB41ZvHkiG4.roa (raw, json)
Hash identifier: 8M+NkoZEe7QsHmiud5nfa3b1pa9Fh1DJl4/aM4vATUU=
Subject key identifier: B5:CC:27:72:B8:5E:FB:37:6F:4E:4C:B0:94:1E:35:66:F1:E4:88:6E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12C8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tcwncrhe-zdvTkywlB41ZvHkiG4.roa
Signing time: Sun 01 Jun 2025 03:09:18 +0000
ROA not before: Sun 01 Jun 2025 03:09:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4808 (0x12c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 03:09:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B5CC2772B85EFB376F4E4CB0941E3566F1E4886E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:b9:83:18:ee:67:a1:14:11:5e:72:0d:09:
df:22:d8:fd:12:05:80:76:6f:03:98:84:82:de:55:
d6:eb:13:32:3c:a9:78:a4:bb:d5:66:ac:57:1f:fe:
e2:2c:d1:d3:c5:51:56:a3:5c:17:f6:cc:3a:7a:94:
7d:5f:9e:75:db:9c:1e:18:7f:c2:60:72:c3:0f:2a:
81:d8:b4:bc:d1:b3:43:d8:27:00:bc:4e:9e:7e:00:
f1:73:4a:40:9f:36:8e:7d:83:05:3f:66:c7:00:cb:
e2:d5:bd:4b:59:f0:19:20:14:d9:9d:46:cb:d6:fc:
00:1d:d1:54:5b:02:74:f0:50:7c:e9:a9:05:23:a7:
23:42:f9:db:ef:67:1a:6d:cf:1f:00:99:2d:e3:b7:
f9:c5:d9:7e:ac:90:af:db:f4:40:ac:bc:db:c9:8a:
f9:ad:c4:4b:48:21:5c:59:e1:ac:ea:2c:8a:33:d1:
b4:f8:d9:b1:55:c6:a5:61:43:5d:d5:70:84:09:81:
dd:50:48:8b:30:3f:c8:2b:ac:e4:35:0a:da:c9:de:
52:71:14:86:e4:a8:01:72:53:8c:ce:0c:dd:6d:3c:
0e:c3:e7:81:66:8e:10:9a:68:e3:75:6c:a2:98:e6:
fd:e6:2e:c9:78:01:2d:3d:a0:5a:26:85:01:85:d5:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:27:72:B8:5E:FB:37:6F:4E:4C:B0:94:1E:35:66:F1:E4:88:6E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tcwncrhe-zdvTkywlB41ZvHkiG4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:af:4e:65:04:48:ca:46:6d:fb:3b:12:7c:eb:7a:9d:13:f8:
71:58:85:76:05:d2:8b:21:b2:44:a3:fd:72:6e:22:14:ee:a6:
ea:bf:ec:15:03:60:10:e7:6a:7e:a4:6b:ce:bc:c4:82:d5:72:
10:95:bd:52:06:be:a0:48:ef:37:12:fd:49:62:8e:9c:fb:6e:
14:53:f0:ed:6e:34:6d:e4:2b:cc:36:da:62:cf:f1:b5:2f:79:
aa:ec:ca:22:82:f3:da:24:7a:50:9a:b3:7d:6f:3a:f9:0a:cb:
ca:e8:ee:5a:68:29:f1:17:38:07:20:20:f6:41:f4:0f:2a:58:
35:9e:3c:f8:3a:2e:c6:67:a7:5b:fd:f1:a2:42:4f:45:bb:3b:
cb:cb:7a:9f:fa:5c:cb:6d:f9:78:31:fe:f4:20:85:75:0b:9a:
93:8c:27:a3:bd:32:8e:46:41:28:de:d3:8d:3f:c2:12:81:49:
40:0a:25:b8:03:c9:d8:23:24:24:7a:57:55:1f:01:93:69:37:
95:08:15:9d:9d:0d:ea:6a:b0:0c:76:b0:08:32:29:aa:ee:a2:
8c:a5:6b:69:5f:df:a3:1c:3b:99:65:e5:d2:bd:a4:62:ec:99:
c7:56:a2:e8:e8:00:fe:82:53:b3:05:b2:0f:8e:6d:e8:86:b5:
6f:5d:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:27:48 2025 by rpki-client