Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4zhuxNEF621aGUep_OX3_Rbo3oA.roa
File: 4zhuxNEF621aGUep_OX3_Rbo3oA.roa (raw, json)
Hash identifier: oRxEOOVNVIEsps26v3sJoVFYa+P+gLpUh4xMzdy2iNw=
Subject key identifier: E3:38:6E:C4:D1:05:EB:6D:5A:19:47:A9:FC:E5:F7:FD:16:E8:DE:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0510
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4zhuxNEF621aGUep_OX3_Rbo3oA.roa
Signing time: Tue 13 May 2025 20:08:48 +0000
ROA not before: Tue 13 May 2025 20:08:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 20:08:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E3386EC4D105EB6D5A1947A9FCE5F7FD16E8DE80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:b6:ac:35:40:3e:ba:98:3c:55:06:21:4c:
9a:e5:b0:bd:f7:b0:e8:ac:e3:18:26:a4:d9:e5:02:
d0:9d:fb:d2:33:ee:ec:e9:0c:d3:5a:24:27:06:3b:
84:10:ad:7a:b0:8a:8f:f0:e9:0c:f8:c9:cf:5a:b1:
63:58:2a:43:2e:26:b8:56:a4:05:40:45:49:5c:07:
65:4b:4d:03:76:fd:c2:2b:c2:f8:4f:83:64:1e:e2:
aa:de:d5:73:fa:6e:a1:59:70:51:7e:66:94:1d:9e:
70:3c:d3:52:3b:e1:d5:04:3d:75:6b:ea:43:a7:3a:
ea:59:45:de:9b:93:ff:ed:43:98:8a:e4:6c:64:27:
1e:ec:04:08:5d:c7:b3:5c:f1:a4:bd:f2:4d:99:b9:
90:a0:eb:c1:b0:d7:c5:91:31:df:f0:a7:1c:57:c9:
16:f2:bc:77:11:15:65:4b:5a:80:d4:35:31:6f:f0:
3f:cb:94:2f:3a:a2:97:08:9e:6e:8c:0b:54:8a:a4:
d5:4e:9c:c9:12:57:bf:e8:0d:a8:7a:ba:19:d8:f1:
5c:f3:f8:b7:8b:b9:97:07:a9:c1:e9:43:d5:c2:56:
4c:40:81:30:2a:1f:54:3e:b1:48:3b:af:32:41:f1:
28:13:70:6a:a2:49:ff:89:27:8c:ea:9a:58:b2:ec:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:6E:C4:D1:05:EB:6D:5A:19:47:A9:FC:E5:F7:FD:16:E8:DE:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4zhuxNEF621aGUep_OX3_Rbo3oA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:40:f8:c5:05:ad:ee:5d:68:7d:58:08:b2:70:46:8a:93:dd:
6d:23:54:2d:98:ad:f2:36:6d:35:93:de:7a:f0:71:5f:6a:d8:
57:07:93:2e:f1:98:07:ed:31:2b:c0:1f:2d:4d:4d:b0:aa:34:
d3:51:0c:2d:21:62:13:a8:3b:05:12:9b:1e:4f:5e:32:c4:e8:
34:c1:bb:3a:c8:e6:b5:7a:c6:c1:6f:ae:ae:25:59:2e:e9:ff:
2b:a2:79:c5:25:d6:e7:e5:82:fc:e2:84:f6:6a:0c:ef:fb:77:
aa:ec:85:52:e3:bc:dd:ba:ee:85:d6:3c:2b:ff:39:50:2a:68:
bf:ef:11:6e:84:b8:cd:93:0b:d9:91:2f:4b:72:c0:30:a8:43:
1a:43:b2:e9:36:c4:ed:f4:09:ec:2f:70:c7:7a:bf:11:86:a8:
90:2b:49:6d:a1:cf:18:11:3e:8c:77:4f:67:e0:78:2e:f0:f3:
f1:d4:ef:3a:6a:a2:ad:c0:b9:4e:38:04:98:37:e0:b6:a7:32:
1d:27:44:71:78:3a:66:11:70:02:e8:68:9f:77:de:aa:2d:9d:
4f:48:81:7a:ed:15:3b:c5:26:33:eb:4c:ee:48:c6:42:d1:21:
59:c4:44:e3:5b:04:e5:72:1d:47:2e:cb:76:af:cb:1e:7b:47:
40:f8:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:02 2025 by rpki-client