Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/360syP7XSa4YF7ne2t1Rjj4ZgXE.roa
File: 360syP7XSa4YF7ne2t1Rjj4ZgXE.roa (raw, json)
Hash identifier: DIFbG2qhutT/JQvAveCI9RG+QuUorvVg58crXh5dJHQ=
Subject key identifier: DF:AD:2C:C8:FE:D7:49:AE:18:17:B9:DE:DA:DD:51:8E:3E:19:81:71
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D0C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/360syP7XSa4YF7ne2t1Rjj4ZgXE.roa
Signing time: Sat 24 May 2025 11:38:34 +0000
ROA not before: Sat 24 May 2025 11:38:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 11:38:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DFAD2CC8FED749AE1817B9DEDADD518E3E198171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:bb:ef:1d:0c:ce:c5:91:1f:f0:33:4f:ca:
70:eb:85:34:83:ae:e4:fa:72:2f:81:73:88:3d:f8:
0a:8d:8b:ed:df:85:44:ef:6a:c6:26:ef:e4:d9:f4:
48:55:26:52:d9:43:50:43:c6:3c:9c:c5:d5:39:89:
da:ba:3f:5d:59:35:90:d2:a1:3e:93:9d:1b:97:9b:
4d:5b:0c:e1:22:10:99:fe:42:5c:01:a1:40:f1:ce:
29:18:a2:7c:68:b3:a0:74:e3:d7:47:80:d6:66:3a:
3e:0c:e1:41:20:26:ba:49:c9:96:55:41:19:96:11:
b7:f2:cf:76:27:36:f6:35:8d:49:d2:b6:f9:48:03:
ee:da:3e:b5:c3:20:81:64:eb:86:ef:8b:98:c5:c6:
b1:03:00:e5:a9:08:7a:3a:f6:39:48:90:21:b1:3e:
14:a2:9b:ca:c7:9e:1b:36:bf:41:f6:d7:30:7f:e9:
c9:d2:d1:f8:18:95:fc:d4:6e:0b:02:c4:44:2c:7c:
4d:f2:25:aa:8b:5d:18:13:83:3f:a9:b1:14:81:44:
9e:da:c8:ed:d8:3a:cc:0d:80:22:fd:56:c9:ba:b9:
c0:a9:5b:b1:ac:97:fa:3a:24:38:ac:01:a1:d4:67:
71:29:1b:10:e5:65:dd:ea:fd:73:aa:06:71:f8:f9:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:2C:C8:FE:D7:49:AE:18:17:B9:DE:DA:DD:51:8E:3E:19:81:71
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/360syP7XSa4YF7ne2t1Rjj4ZgXE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:34:44:5e:93:dc:30:2d:8e:e2:f4:2f:08:15:d7:c7:2a:a0:
ff:d3:8e:fa:c7:26:44:df:54:7b:34:4e:17:91:b7:a7:fa:91:
ab:d7:eb:64:89:94:cb:91:83:4e:4e:15:0e:10:b2:e2:fb:2f:
39:23:fa:65:0c:e4:06:4b:34:84:53:26:8d:db:44:db:bf:cc:
4c:4d:7d:f9:2f:ba:66:d3:0e:05:06:2c:01:a2:8e:87:78:16:
ff:80:84:5a:ea:a9:c0:30:3e:19:9a:9b:42:22:51:d3:1f:49:
95:45:4e:6b:11:04:b8:7f:ec:c0:88:2d:d8:0f:d8:c4:eb:ac:
69:b5:9b:9f:b6:28:1e:4f:87:a3:c9:7f:70:e1:b1:48:3b:1d:
64:76:49:5e:2b:55:1e:5b:d7:15:8a:cf:8a:5c:51:91:95:36:
d4:ae:bb:f2:7d:95:78:52:51:6e:74:c3:83:aa:21:1b:3a:31:
79:c5:9f:70:d6:34:7b:f8:8a:80:f7:25:78:d2:66:23:fa:93:
59:d9:a9:4a:2d:17:cc:87:eb:41:04:e3:20:ea:33:f1:40:e0:
2f:80:1e:11:2b:51:39:a9:76:55:67:e3:82:b2:b2:c0:0a:fb:
23:fd:aa:8b:b6:0b:36:0a:de:5f:3f:89:83:35:c2:e7:16:31:
2b:7e:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 04:05:24 2025 by rpki-client