Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xc0wWNeUWHGayJbTWWrNJHNb6vE.roa
File: xc0wWNeUWHGayJbTWWrNJHNb6vE.roa (raw, json)
Hash identifier: DtXSNkFyyk3xCxZRwIy6LD9G/ZUnpoQEGJWvgJqvrVc=
Subject key identifier: C5:CD:30:58:D7:94:58:71:9A:C8:96:D3:59:6A:CD:24:73:5B:EA:F1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A84
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xc0wWNeUWHGayJbTWWrNJHNb6vE.roa
Signing time: Wed 11 Jun 2025 10:39:55 +0000
ROA not before: Wed 11 Jun 2025 10:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6788 (0x1a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 10:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C5CD3058D79458719AC896D3596ACD24735BEAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:87:a9:8e:8c:7f:a6:fd:7d:27:32:50:0d:
34:7f:c2:d1:f5:91:0e:be:3e:d1:be:c0:62:3b:01:
08:35:90:dd:f4:d1:e4:36:50:70:5e:4f:5b:eb:b0:
f4:22:1f:84:26:6c:9f:ed:0e:ce:61:39:fc:f1:f6:
39:da:84:94:38:2c:c5:e7:ad:b4:07:11:7d:73:65:
1f:0b:3b:76:53:1b:45:7d:2c:81:b1:a5:52:89:a5:
72:05:bb:e7:24:af:ce:c9:19:9a:48:c1:65:71:fc:
59:06:2d:11:04:ff:16:e3:1d:99:8f:82:62:96:ce:
8a:44:08:23:c4:8f:f9:83:05:76:a5:f4:ae:26:c1:
06:13:f9:6d:ed:4a:a7:88:3d:b3:09:c4:20:d8:03:
d0:6d:91:10:ce:2d:c9:ec:67:30:c5:8a:a0:af:fe:
58:98:79:d2:b0:b8:37:e3:31:9b:e6:c0:36:63:06:
6a:b5:4e:7d:a6:a6:37:5b:ac:a7:eb:37:1a:b9:6c:
f0:0c:78:85:3b:2e:a6:71:92:11:69:59:8e:68:24:
89:ee:9c:80:e2:7b:6a:da:98:94:0b:86:6c:81:aa:
22:cd:d4:6b:c2:c0:94:2d:ad:59:06:a1:24:40:81:
e0:c0:34:97:00:7a:c4:d1:88:80:bd:fb:cb:ff:e7:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CD:30:58:D7:94:58:71:9A:C8:96:D3:59:6A:CD:24:73:5B:EA:F1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xc0wWNeUWHGayJbTWWrNJHNb6vE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:40:ec:d6:fd:ae:ca:ed:55:8e:65:20:d1:db:3c:bc:60:47:
44:65:80:19:77:b0:33:a8:c2:ba:ab:d4:20:e0:a8:7b:df:79:
05:26:76:78:94:c2:45:e2:fe:8e:fb:81:46:35:90:58:3c:2a:
9c:cc:de:9e:06:16:14:7e:f4:d4:18:17:3d:10:a7:19:3a:48:
81:94:8c:8e:b1:3d:6f:00:77:ec:de:a9:e8:f9:b1:58:4f:52:
eb:d4:64:6d:b3:a7:e9:ef:e9:e9:bb:e7:50:38:a0:25:fa:59:
3d:79:a5:6b:ab:9e:00:22:61:ff:81:f6:a0:4c:1a:b9:f8:bc:
c0:f5:66:58:9f:93:bf:c9:ad:68:d6:eb:7f:85:da:8a:42:73:
07:79:0f:05:5c:63:04:28:9f:05:35:60:f7:9d:10:23:ad:18:
ed:5f:38:7c:cf:cb:65:a6:9c:fe:04:5c:b9:0d:39:6f:64:32:
84:d0:1b:d4:fc:60:ff:8c:4f:f0:10:bb:9b:14:3c:8f:ff:7f:
3f:32:35:47:cf:7f:55:7e:4a:63:fd:1d:2b:5d:ba:3b:b6:4c:
3e:e8:81:4e:70:da:49:4c:d8:d6:a0:ee:37:21:8d:57:e5:b8:
af:cf:39:70:d7:3b:00:0a:9d:70:2a:10:1b:92:74:9b:21:80:
17:a3:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:10:05 2025 by rpki-client