Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DFGiHyolDvkg_5l1o0iA7RHmBEU.roa
File: DFGiHyolDvkg_5l1o0iA7RHmBEU.roa (raw, json)
Hash identifier: dJrmfDm8OICDzwbXjyRwTMDQsXaYmmDeIX6LmHRP/Tk=
Subject key identifier: 0C:51:A2:1F:2A:25:0E:F9:20:FF:99:75:A3:48:80:ED:11:E6:04:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 123C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DFGiHyolDvkg_5l1o0iA7RHmBEU.roa
Signing time: Sat 31 May 2025 09:39:06 +0000
ROA not before: Sat 31 May 2025 09:39:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4668 (0x123c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 09:39:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0C51A21F2A250EF920FF9975A34880ED11E60445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:9e:5d:6c:ed:7b:95:09:0c:68:eb:25:03:
15:3e:8d:12:75:08:fd:28:3f:74:f4:fa:39:cc:8c:
d2:65:72:eb:18:e0:04:c9:c7:fb:65:38:5c:dd:42:
8e:54:a8:92:13:45:22:31:b7:7a:ca:60:35:0e:ee:
c0:fd:63:26:94:4f:12:1f:f8:36:19:eb:62:32:f8:
0a:de:99:97:f7:64:9d:af:6a:df:8c:4e:a5:72:80:
73:91:8b:05:ea:6f:65:3f:f7:35:97:16:88:04:9a:
9f:6a:67:5c:e9:1d:5e:93:d1:1b:09:57:67:fd:69:
77:54:2a:a0:be:24:ab:3a:db:4c:58:6b:51:c9:60:
0a:91:77:d1:dc:82:f6:0d:8f:de:6d:cb:63:d6:66:
23:ff:e8:d8:2a:9b:bf:b4:ab:23:a1:9e:22:98:8a:
bb:82:bb:81:29:7b:85:ff:66:4e:23:ed:ea:1f:43:
0c:0b:27:cf:ed:3b:a8:8d:4f:7c:00:c4:19:25:03:
3a:b5:30:f1:b5:25:b3:04:5d:b7:8a:43:58:0c:f5:
52:be:18:00:da:94:89:b6:2f:f1:20:91:21:04:10:
b4:50:9a:4a:c3:ad:4e:75:39:83:96:48:3a:91:38:
4e:72:38:85:47:5d:a6:9f:98:97:d4:04:2d:21:2b:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:A2:1F:2A:25:0E:F9:20:FF:99:75:A3:48:80:ED:11:E6:04:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DFGiHyolDvkg_5l1o0iA7RHmBEU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:bb:b4:a4:7f:04:58:1b:83:a6:e0:ae:45:e9:53:8f:7b:ca:
78:23:6a:d8:aa:13:4d:c5:a5:85:78:5d:77:26:6d:b9:d3:49:
53:58:a6:6d:34:ba:6f:73:71:cd:5e:b3:0b:b7:70:57:73:f2:
48:6b:0e:ed:3c:7a:40:84:b9:8c:55:46:d7:d6:83:a9:8e:20:
50:a6:fe:78:bc:ec:20:83:6b:77:09:b5:eb:a5:0f:d8:2a:a0:
b3:99:8b:58:a2:3c:cf:ba:ea:33:49:d6:ac:ac:79:e9:59:96:
ec:5e:da:6f:1e:76:3c:bc:84:a1:ac:6e:6f:c1:41:84:f8:ed:
75:bd:ce:ac:a9:08:c5:ca:39:8a:d8:66:f1:b6:eb:b6:9e:2d:
e8:08:0f:85:09:cc:e8:ed:1e:aa:a9:9f:9e:db:96:44:14:ca:
23:ee:5e:34:16:bf:fb:96:37:f0:09:8a:0f:8c:a8:f8:36:34:
a9:b3:a3:e5:40:e2:76:02:4e:59:34:ad:b6:45:6f:52:f6:e7:
59:1a:36:22:ba:49:6b:59:47:98:fa:4d:6a:8a:e1:d6:bc:24:
1a:cb:8c:8b:9a:78:a7:61:3b:01:6f:af:86:1e:56:c1:85:b3:
fc:73:e0:57:59:eb:28:91:ea:30:7a:15:14:49:07:57:2e:67:
cd:bc:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:12 2025 by rpki-client