Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DRX4lVzdZZiuGkwYnxdVV3PTO3Q.roa
File: DRX4lVzdZZiuGkwYnxdVV3PTO3Q.roa (raw, json)
Hash identifier: BL6bTRYzJeS87PzOW40leTP+iksJvSRzUVIDLaGwLWM=
Subject key identifier: 0D:15:F8:95:5C:DD:65:98:AE:1A:4C:18:9F:17:55:57:73:D3:3B:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 221C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DRX4lVzdZZiuGkwYnxdVV3PTO3Q.roa
Signing time: Sun 22 Jun 2025 01:12:41 +0000
ROA not before: Sun 22 Jun 2025 01:12:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8732 (0x221c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 01:12:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0D15F8955CDD6598AE1A4C189F17555773D33B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:de:09:18:08:2b:96:3e:0d:ab:7d:94:c1:
35:77:a9:29:ee:eb:e5:03:81:58:45:e6:d7:63:46:
7c:a6:5b:fb:55:5c:8c:24:94:e7:09:74:d0:82:48:
ac:ac:6e:e5:02:30:95:5f:c6:53:a9:b9:82:9a:cb:
e0:b2:53:82:54:b8:35:51:48:b7:d1:0c:e3:0d:21:
b5:37:29:e8:9b:7c:99:d2:4d:dd:a2:cb:6f:87:f5:
df:25:c5:18:75:ae:7d:94:30:f6:6c:5e:29:43:a1:
24:95:4e:df:6a:dd:97:7d:2b:9d:02:f8:a0:a0:bc:
54:f6:44:35:86:92:81:a9:69:26:ac:78:d9:c2:18:
6f:6d:29:34:97:e1:62:c5:a6:15:29:d4:de:ce:0a:
c7:3c:ce:d4:62:66:28:57:8d:05:6f:cc:75:78:5e:
08:37:e2:50:8a:14:e4:ae:d2:b8:0a:4a:f3:96:40:
af:5d:c8:99:20:97:72:09:25:b9:2c:e7:a4:00:34:
07:df:ce:b4:c7:61:b3:9a:31:85:12:6e:54:02:8b:
55:58:94:63:c5:5b:16:2c:45:d0:88:ed:6d:d8:23:
61:e7:b9:57:a1:6e:3f:c5:90:5f:47:1f:45:f4:c5:
41:65:ab:2a:7f:c2:bb:87:3b:28:5a:26:56:af:4a:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:F8:95:5C:DD:65:98:AE:1A:4C:18:9F:17:55:57:73:D3:3B:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DRX4lVzdZZiuGkwYnxdVV3PTO3Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:3d:ff:0f:19:03:b6:8d:57:c8:67:31:ac:1c:28:ac:14:09:
20:a2:c3:49:80:c0:55:74:05:04:0d:07:7f:98:83:c9:b5:5f:
26:ab:62:6b:6c:e4:7f:9e:25:36:9c:0a:31:94:b5:94:ef:29:
96:5f:3c:13:ec:81:90:8d:c3:cd:73:40:67:17:a0:2e:4a:8a:
87:6b:6b:30:e0:f1:ca:72:e8:b0:22:36:91:a1:46:38:a9:2e:
e7:eb:d0:f6:92:49:d6:5b:86:f8:11:5a:44:be:08:79:0a:ea:
93:b5:08:f5:28:fe:50:aa:89:54:c9:fd:e2:95:ae:46:10:82:
ba:2b:f3:d0:98:10:db:ec:c5:2b:4e:a7:fc:eb:bb:0b:ad:a9:
e6:6d:bb:2c:ce:d8:ab:37:23:26:d0:f4:0b:ac:2e:b5:c9:51:
e4:5f:2c:a2:af:07:49:41:3b:d5:94:39:23:18:59:3f:90:f9:
7d:78:3c:5a:84:cb:ef:4f:d3:ed:ab:4a:e2:60:cd:07:09:fb:
23:ec:74:d1:48:a6:06:de:06:e4:a2:de:e6:cf:e4:2c:f0:cc:
4d:cc:89:fe:60:60:bc:b1:59:16:b9:82:3b:b4:67:b4:2f:84:
07:6e:2e:a4:33:14:da:f1:97:88:80:c7:15:09:6d:6f:a8:83:
83:4a:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:36 2025 by rpki-client