Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CjgcOZ-ahB8to-0GV67IEYDVdwk.roa
File: CjgcOZ-ahB8to-0GV67IEYDVdwk.roa (raw, json)
Hash identifier: bWygermZSaiL+xMKwahgUZHlZj9snIk7UjEyQsjA4PA=
Subject key identifier: 0A:38:1C:39:9F:9A:84:1F:2D:A3:ED:06:57:AE:C8:11:80:D5:77:09
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1360
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CjgcOZ-ahB8to-0GV67IEYDVdwk.roa
Signing time: Sun 01 Jun 2025 22:09:11 +0000
ROA not before: Sun 01 Jun 2025 22:09:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4960 (0x1360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 22:09:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0A381C399F9A841F2DA3ED0657AEC81180D57709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:00:ba:f3:bb:3b:5f:af:5c:0d:fc:03:52:
08:0a:ad:d5:72:6b:db:99:4e:aa:5c:e5:da:15:1c:
4d:52:ad:16:c8:d8:58:e4:7c:63:05:6f:bb:8c:29:
a2:8a:95:f4:18:2b:af:72:e6:2b:57:9b:76:a4:cf:
d0:95:40:16:3d:99:b0:fb:2b:be:5d:d2:95:24:35:
b1:c2:5c:0b:3d:85:71:a7:8d:58:20:da:70:3c:d9:
09:7f:9c:6c:8f:56:b9:4b:d3:00:d5:c7:e4:ce:5d:
3a:4c:01:a6:db:f6:d1:1b:bd:44:ca:45:cc:8f:40:
bc:de:b2:f0:7b:44:91:d1:f6:2c:57:c8:fd:97:6d:
05:0c:19:76:4e:33:7a:b3:00:e5:02:8d:bd:4e:f2:
bc:6e:26:80:92:d8:e4:d6:f5:99:50:c6:64:e4:2c:
65:24:19:29:89:f2:0b:4f:bc:d4:81:7e:11:3d:b9:
d4:1e:55:53:61:a7:a0:20:f1:f2:0b:e3:bb:f0:81:
4f:f4:ec:f8:f5:1f:49:4f:dd:88:46:27:9e:95:a5:
84:db:92:94:0b:29:c4:65:09:a1:d6:c5:25:0d:bf:
7a:0b:8c:3a:6c:be:31:23:2f:3f:0c:29:02:ac:46:
c2:13:ee:9b:5d:8a:27:4d:7c:65:31:f3:42:a1:68:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:1C:39:9F:9A:84:1F:2D:A3:ED:06:57:AE:C8:11:80:D5:77:09
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CjgcOZ-ahB8to-0GV67IEYDVdwk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:42:ca:47:7a:85:08:4c:86:3d:f2:42:1f:69:90:ed:d9:0d:
24:37:d6:80:9e:06:91:03:3f:00:90:51:9e:43:97:92:29:22:
f8:01:1b:8d:e1:3e:5a:84:a7:73:55:07:fe:a6:c6:05:ee:bc:
5a:98:b4:d3:cc:0e:c8:5d:a8:5e:5d:b0:55:c1:38:18:f0:cd:
0c:27:b4:e7:6d:84:e8:9f:3f:64:ac:bb:31:f9:1d:79:e4:ae:
b4:45:0e:52:21:e2:14:9b:72:29:08:75:43:04:d1:d5:a2:c3:
81:93:2f:87:df:8d:6f:a0:33:ab:70:ed:39:28:15:ed:8d:2d:
73:92:34:17:6b:49:71:04:7c:b8:ea:f6:1b:77:3d:b3:e2:90:
e5:4f:a3:fe:6d:85:64:23:fa:4b:2e:7e:f5:6d:58:07:f1:b8:
cc:d2:29:9b:c5:36:88:a8:51:4a:a0:8c:d8:bf:94:83:45:31:
0b:11:35:d8:af:35:96:a0:52:ba:c7:b5:09:d3:f7:d4:78:6b:
32:e0:bd:e9:7e:d8:24:32:66:ca:71:48:7d:6d:67:5f:c5:08:
d4:e4:f1:10:e5:a6:d1:66:cd:ce:f2:b3:36:2a:03:0d:c6:42:
72:fa:fe:f5:3a:b5:58:22:ba:3d:7a:73:f0:21:9c:b5:b8:94:
01:89:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:15 2025 by rpki-client