Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5_jAhY8d6C0yexACYXD9-3EHqus.roa
File: 5_jAhY8d6C0yexACYXD9-3EHqus.roa (raw, json)
Hash identifier: Uvw51/Z4BoXfisY2GZGeQ+vXk0LetL+phtBN5dEdk0U=
Subject key identifier: E7:F8:C0:85:8F:1D:E8:2D:32:7B:10:02:61:70:FD:FB:71:07:AA:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 089C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5_jAhY8d6C0yexACYXD9-3EHqus.roa
Signing time: Sun 18 May 2025 13:38:09 +0000
ROA not before: Sun 18 May 2025 13:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2204 (0x89c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 13:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E7F8C0858F1DE82D327B10026170FDFB7107AAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:28:61:da:a9:f8:0e:b2:c3:55:8b:ed:2a:
ff:03:e6:b3:4b:c4:e8:0a:1d:a5:01:76:f0:4a:28:
5d:89:87:85:3a:8d:5b:08:48:3b:dd:b7:88:ae:9f:
3e:31:16:a7:99:0c:77:e9:f2:da:94:de:93:21:9a:
8b:87:32:d2:08:f2:7b:49:3a:50:d8:b2:1b:69:fd:
c5:f6:fd:ba:55:d3:34:c3:48:1f:65:40:34:53:16:
ec:7a:b6:7d:5f:8f:21:19:a6:06:e8:38:cf:2f:b7:
b2:75:8b:9e:b3:36:05:a5:ef:29:e5:bb:26:6f:35:
61:a9:eb:e0:3d:51:b0:66:27:4c:75:67:ba:92:96:
51:fa:2f:2a:0e:2b:47:76:87:49:9e:7a:da:6f:03:
10:a5:21:1b:86:79:7d:b4:64:29:70:19:03:26:f5:
cb:53:40:15:85:b3:d4:0d:31:13:e3:59:ed:96:44:
a3:48:6c:49:ee:e3:68:67:51:47:31:ca:ba:53:b7:
03:d5:fc:ca:ad:57:6b:85:be:d8:61:09:fb:f1:9a:
7d:32:55:f7:17:ee:0a:e6:25:4b:50:c6:af:6d:d9:
e4:d6:9a:ea:7d:fc:f9:b7:83:04:4f:d1:f0:52:ed:
61:a1:14:96:d5:6b:b7:c0:df:bd:b7:c2:53:cf:28:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:C0:85:8F:1D:E8:2D:32:7B:10:02:61:70:FD:FB:71:07:AA:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5_jAhY8d6C0yexACYXD9-3EHqus.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:2c:f9:46:9c:0c:1d:33:54:d9:f8:17:0a:d4:77:6e:7d:19:
bc:7f:ee:23:7a:8f:35:37:ca:ee:5d:80:aa:90:c4:c6:e9:75:
08:a7:8e:83:75:5b:ed:a5:1a:f8:42:47:b3:51:97:81:e4:6a:
9f:d4:90:b1:81:81:b8:35:6b:1a:0c:90:cb:65:6d:b5:fb:d9:
89:65:cd:f2:b2:e1:39:36:ee:1e:6a:22:42:35:a5:c8:9d:d2:
94:c5:99:12:c2:a0:8c:21:c7:50:18:1a:c3:4d:f8:b0:e9:8f:
6b:7b:6c:51:25:a8:f8:04:e7:82:1f:88:39:f0:cc:07:c7:45:
44:a9:73:2d:91:1c:04:d3:76:a2:b9:e0:a4:f9:db:15:83:e2:
e1:fa:6a:30:9e:dd:ba:71:ee:0c:2b:9a:7f:64:02:70:e8:0a:
c8:a6:8e:a9:73:9c:7c:50:4d:dd:44:16:bf:4b:d5:4a:1e:3d:
67:02:18:54:1b:76:3d:8e:04:6d:b0:88:46:7e:de:bc:10:9b:
bf:70:83:81:aa:a1:30:cc:59:b7:b6:59:1e:40:09:78:9c:2d:
15:d8:c9:e2:cd:69:be:b0:b2:f1:f9:cd:a0:ab:28:6f:46:9d:
f5:fe:62:f7:13:6e:2c:cc:42:b7:65:03:70:ce:7b:e5:6b:ad:
6d:69:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:26 2025 by rpki-client