Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AfleIEvqJhGoKwT6btRWDM03rLo.roa
File: AfleIEvqJhGoKwT6btRWDM03rLo.roa (raw, json)
Hash identifier: HJ7rY06OzxVmlMTBsahumUKvzVopEtBRXdggQqtbfaI=
Subject key identifier: 01:F9:5E:20:4B:EA:26:11:A8:2B:04:FA:6E:D4:56:0C:CD:37:AC:BA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BD0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AfleIEvqJhGoKwT6btRWDM03rLo.roa
Signing time: Thu 22 May 2025 20:08:23 +0000
ROA not before: Thu 22 May 2025 20:08:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 20:08:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01F95E204BEA2611A82B04FA6ED4560CCD37ACBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:b7:f0:3d:c1:9c:76:96:ed:cb:32:72:7a:
d2:da:d7:0b:bd:27:6c:ce:56:99:d0:b6:13:ab:3d:
52:bd:b0:67:89:63:cc:f5:12:15:5a:69:5e:69:40:
08:ec:5d:29:80:05:61:95:f5:88:a3:96:cc:2e:9d:
11:3c:4a:64:97:95:da:63:21:b8:08:fa:14:a9:60:
6b:67:2b:dd:75:0e:d2:a7:af:8f:8f:cb:46:7a:f5:
7b:e6:47:5a:34:bc:0f:7b:ef:23:cd:e7:24:77:35:
fa:6e:86:a9:f3:e7:bb:87:44:58:32:30:09:52:df:
00:d8:ad:29:d9:ba:a5:f5:0f:2f:e0:06:cf:1a:78:
d3:31:2d:8b:bb:68:e4:60:cd:7c:86:da:a6:38:f4:
0c:6b:4b:c1:4e:25:2b:d9:fe:8b:59:36:a3:1f:45:
d8:3b:f9:b2:33:47:ae:c8:86:24:0d:4b:c4:73:37:
4f:b5:33:96:49:d4:a2:9e:fc:26:ab:1a:bc:0e:95:
90:46:10:93:9b:ab:82:81:3f:22:52:31:f2:05:ba:
75:b7:0c:a5:56:2f:9f:49:ab:bd:0b:d5:da:37:79:
35:8e:5b:2d:b9:6e:cc:a2:66:51:98:77:f0:08:b2:
79:2c:36:d1:6e:51:df:64:80:e0:df:d4:c7:b1:e9:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:5E:20:4B:EA:26:11:A8:2B:04:FA:6E:D4:56:0C:CD:37:AC:BA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AfleIEvqJhGoKwT6btRWDM03rLo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:cf:91:c9:9e:b1:1a:64:33:84:2c:e4:a1:4b:05:92:02:e6:
61:b3:11:95:04:59:b6:58:3c:e9:c5:f7:ca:ac:68:cf:82:b2:
2c:77:e1:58:c5:9d:90:6f:4e:23:66:90:a3:7b:e3:b5:f4:ec:
b7:ef:88:e6:cd:f7:de:28:b8:1a:c2:a8:13:b0:59:9c:c8:63:
98:39:ca:07:43:be:46:5e:91:a6:32:94:77:38:20:af:72:31:
93:76:35:e3:a7:09:2b:a0:85:7e:57:71:5d:64:83:ce:73:bf:
70:08:67:6d:21:95:c8:6a:a4:cc:ee:22:68:25:cb:16:37:ea:
44:13:0e:94:6f:24:d9:c1:3f:21:c3:1b:bf:12:e7:5e:cf:4d:
65:a7:d1:61:71:ef:f1:3e:fe:4e:65:ca:7a:64:50:f0:8f:39:
b3:f5:84:9f:48:ec:fe:fb:40:36:46:b4:76:e7:98:51:f4:e8:
6d:69:68:a5:50:d8:34:3d:46:04:0f:62:73:93:05:c6:78:64:
b3:a4:1b:40:66:3f:b8:f9:09:3c:7d:11:95:24:ee:1d:1e:99:
d4:af:9d:dc:d1:48:45:ea:b2:8f:17:96:89:29:bc:e7:80:88:
24:58:d9:6c:37:9c:60:f4:e3:73:ea:b1:6f:6c:26:6d:33:a3:
48:d2:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:03 2025 by rpki-client