Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4QCaVMW7H4z90G-RODQ_iRg_p0E.roa
File: 4QCaVMW7H4z90G-RODQ_iRg_p0E.roa (raw, json)
Hash identifier: IQwhnRZT7jftw5UDM3H2DmDAnuhFL0nGvVnIhwUzp7s=
Subject key identifier: E1:00:9A:54:C5:BB:1F:8C:FD:D0:6F:91:38:34:3F:89:18:3F:A7:41
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CB8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4QCaVMW7H4z90G-RODQ_iRg_p0E.roa
Signing time: Sat 24 May 2025 01:08:31 +0000
ROA not before: Sat 24 May 2025 01:08:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3256 (0xcb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 01:08:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1009A54C5BB1F8CFDD06F9138343F89183FA741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:8d:9e:c5:0e:8d:5c:0e:11:77:60:d1:e2:
90:a5:f1:c4:9f:a4:f9:2b:9f:fa:18:39:05:33:ad:
38:12:7b:db:8b:29:61:02:66:5e:8e:8d:03:70:02:
69:92:08:4b:3b:fd:9a:c0:34:52:e5:33:ec:45:c0:
ef:ee:79:71:0d:71:ef:9b:d5:2e:58:03:84:c1:a8:
82:32:6c:92:4a:08:52:62:7a:29:f7:81:6f:a6:a4:
d4:86:c4:67:50:96:14:c5:dc:0b:08:fa:4b:fa:d1:
4f:c6:a6:ef:84:12:6b:ad:1a:64:13:2d:54:93:f3:
9e:d6:e9:e8:ac:5d:3a:6c:24:56:db:c8:70:42:5e:
db:d6:5f:86:cf:b8:b0:27:64:d6:92:5f:06:26:b6:
40:bd:3f:c7:b9:d0:65:85:62:48:6c:32:8d:b8:b2:
44:87:8e:cd:1a:b5:f2:44:a1:40:27:65:9e:4d:ab:
92:6b:cc:c1:75:96:c2:53:10:57:d6:a7:37:58:41:
83:b0:3d:e9:02:93:2c:6d:ff:5d:f1:30:7d:0e:f4:
09:e7:2c:8c:1f:e2:9a:21:83:ac:9f:0b:f2:2f:6b:
77:0e:94:5d:9d:3c:5d:9f:b6:20:31:4a:29:62:c5:
79:dd:36:84:76:de:14:97:a3:97:02:ae:05:49:ae:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:9A:54:C5:BB:1F:8C:FD:D0:6F:91:38:34:3F:89:18:3F:A7:41
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4QCaVMW7H4z90G-RODQ_iRg_p0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:c4:61:e6:7a:69:7a:75:7d:24:01:8a:8e:f3:ea:91:71:cc:
5d:a3:ed:52:4f:0c:02:07:0b:5b:c1:a1:de:7e:af:de:20:ac:
35:1b:b0:89:89:35:5b:84:a3:e2:8f:61:e6:fd:a3:d3:5a:e5:
1a:59:f4:66:e9:1e:1a:fe:02:f2:45:36:0a:65:13:54:70:25:
20:b1:51:de:49:15:0f:07:9d:18:73:ca:da:74:bd:dc:3d:27:
4f:9c:33:11:27:35:2a:9a:18:4e:48:20:01:44:75:77:fa:a6:
b6:e7:ce:2a:0f:68:25:fc:62:2e:e4:3d:b0:a3:13:aa:e2:9a:
f0:c9:ed:90:c5:eb:5c:a9:66:af:e2:b6:c0:0e:fc:b2:36:71:
9a:9b:8f:a6:d4:5c:c7:f8:55:38:71:13:b2:51:59:8c:38:30:
f6:41:2d:00:14:7a:71:3b:d4:cb:47:04:51:2d:d8:47:f0:a2:
76:f4:ef:ed:11:8b:ab:cb:7a:cc:ae:3b:1f:f3:53:2e:de:43:
5a:ed:f8:aa:cd:24:b5:54:2a:2c:f1:04:3c:89:e1:60:b3:fe:
92:67:11:2f:f0:60:ef:b3:2d:d7:89:03:17:dd:ba:fd:f3:3a:
e1:32:6a:d5:95:ca:a5:65:a9:ca:be:22:d7:a0:c5:bf:0a:11:
fb:f3:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:14 2025 by rpki-client