Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DAJEG7TjZbFl_I66zDsJ4HeWm3Q.roa
File: DAJEG7TjZbFl_I66zDsJ4HeWm3Q.roa (raw, json)
Hash identifier: xbCgzlH1pM5MpRHbafcrx74/AaPx3mgr3SR0fZwbnFg=
Subject key identifier: 0C:02:44:1B:B4:E3:65:B1:65:FC:8E:BA:CC:3B:09:E0:77:96:9B:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F48
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DAJEG7TjZbFl_I66zDsJ4HeWm3Q.roa
Signing time: Tue 27 May 2025 11:08:50 +0000
ROA not before: Tue 27 May 2025 11:08:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3912 (0xf48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 11:08:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0C02441BB4E365B165FC8EBACC3B09E077969B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:14:cb:56:bb:10:19:d7:84:14:84:b7:9b:
65:12:ec:e1:4f:62:30:6d:5b:3c:9d:48:16:88:3b:
85:b6:dd:18:76:ef:97:c4:f4:54:88:cd:dd:33:11:
dd:52:30:5f:1f:0e:fa:00:cd:74:b6:47:13:f0:5d:
db:b6:cb:47:95:30:d3:6c:1d:ec:d4:13:4d:30:db:
bb:25:61:2f:04:9a:cc:ba:7c:f3:99:62:1d:1e:5e:
2b:19:60:c1:ce:a2:68:c8:24:58:7d:f0:23:77:de:
6b:f5:20:4a:2a:9a:60:33:9d:60:71:e6:3b:f5:2f:
03:7a:13:3e:75:c4:51:f9:b6:ec:69:b7:cf:7b:fc:
42:97:c3:c5:b6:46:f7:7f:7a:db:9a:68:18:ff:da:
aa:72:47:88:aa:67:a7:3b:9c:b1:93:5b:c1:52:31:
a0:46:11:2d:a9:80:a6:02:29:cf:b3:d3:2f:9a:6e:
3d:95:52:05:36:54:6b:ab:bd:9e:34:7d:dc:bf:59:
c5:15:1f:f2:c5:72:0f:ef:a7:dd:bd:d5:da:b2:a1:
af:33:90:27:4b:cb:64:60:cd:c7:35:e6:6a:8d:de:
c6:a4:b7:e5:4a:81:f5:2f:a8:fd:c7:8c:04:9a:8e:
4f:eb:8d:44:e3:44:d9:bb:49:2a:56:76:36:6a:6e:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:44:1B:B4:E3:65:B1:65:FC:8E:BA:CC:3B:09:E0:77:96:9B:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DAJEG7TjZbFl_I66zDsJ4HeWm3Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:21:44:1c:4c:6d:1d:fb:d8:db:5a:f3:e2:00:19:14:b0:b9:
e5:6b:33:a3:bb:94:aa:6b:74:81:67:5e:bf:35:44:12:8a:35:
c2:31:8e:18:d1:37:62:8a:35:ea:40:f7:cc:77:e8:e5:6d:83:
49:d2:d7:d5:6f:77:e3:15:c6:59:21:2f:2a:cd:92:f2:fd:06:
e6:71:5f:60:4a:ad:85:1a:68:28:f0:73:af:7e:b8:36:c2:64:
74:1a:91:23:27:3e:4f:60:cf:08:73:29:e8:ee:5b:d1:95:30:
76:8e:95:38:a4:9c:7e:b7:b1:d4:e1:03:c0:3b:74:e1:1b:80:
b9:d8:32:d0:51:0a:02:d1:36:66:33:fb:e7:e9:35:12:42:f6:
e7:df:93:16:11:34:9b:ad:eb:f7:71:ab:7a:74:2b:b0:6c:52:
e6:db:34:53:fd:30:fc:4b:94:fa:0e:ab:6a:fd:f6:70:ca:90:
0c:c6:c1:b4:37:ba:a8:f3:da:4c:8a:6e:a7:de:87:e3:ad:55:
52:60:01:f0:5f:06:77:ca:7e:5c:e0:7e:4e:d4:e9:fb:90:2c:
42:68:8f:a0:51:5f:86:0d:39:e8:24:ed:46:0c:46:a6:f2:28:
be:8a:e8:0c:a5:28:c9:a7:a7:fb:03:c0:eb:a1:db:02:67:6a:
42:e1:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:41 2025 by rpki-client