Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DkSdi6iCsarcS-Ismu8jOzjmvAA.roa
File: DkSdi6iCsarcS-Ismu8jOzjmvAA.roa (raw, json)
Hash identifier: fw3JHL/uPrMhP6ER13O/qDzV0OKvc+IXtxhuNl3DAVY=
Subject key identifier: 0E:44:9D:8B:A8:82:B1:AA:DC:4B:E2:2C:9A:EF:23:3B:38:E6:BC:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1458
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DkSdi6iCsarcS-Ismu8jOzjmvAA.roa
Signing time: Tue 03 Jun 2025 05:09:23 +0000
ROA not before: Tue 03 Jun 2025 05:09:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5208 (0x1458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 05:09:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0E449D8BA882B1AADC4BE22C9AEF233B38E6BC00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:e9:2b:37:1a:14:70:ad:2b:ad:16:74:95:
6c:23:ba:f5:35:03:f2:ff:37:bf:6e:00:2a:31:7f:
26:40:85:f2:20:04:c3:10:c2:61:cd:86:b3:d4:3b:
b1:e6:9d:70:13:8a:3b:d1:21:80:1f:13:71:e4:a0:
5e:fe:e9:4d:fb:63:5c:01:bb:63:7a:3d:57:42:04:
9d:5e:b7:47:ee:26:9e:10:73:ba:4b:43:46:ba:8b:
53:66:f6:27:02:65:72:bc:42:4f:df:79:9d:22:45:
a9:e2:72:da:65:dc:53:53:a1:2c:2b:c8:d7:7f:5a:
d1:e0:74:dc:fc:a7:8f:78:93:26:27:19:89:19:7f:
4d:24:71:a7:9c:b6:8c:b9:b4:78:f5:80:bb:5e:db:
ac:16:65:f2:3d:39:e0:fe:27:52:4a:3e:5f:23:ac:
e4:4b:83:e3:e9:28:d7:be:ae:e6:09:de:23:c3:e2:
5e:15:b9:fd:6e:41:13:97:2b:8f:33:94:3f:01:ad:
a9:75:ae:e9:13:77:2f:62:41:42:4a:57:a5:e4:6f:
fb:6f:45:f7:71:2b:d3:bf:d8:70:28:14:16:fd:7e:
8d:e0:4c:5b:8e:0b:e5:3e:9d:4a:93:7e:f5:97:0f:
67:0b:c3:da:46:1d:2e:ea:15:12:e5:ec:b7:6d:05:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:44:9D:8B:A8:82:B1:AA:DC:4B:E2:2C:9A:EF:23:3B:38:E6:BC:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DkSdi6iCsarcS-Ismu8jOzjmvAA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:8a:8d:e5:8d:ce:1b:eb:1c:ff:0b:34:05:9e:d7:0f:b9:4c:
cc:b2:2d:fa:19:c4:e7:84:e2:9c:61:f6:53:ef:aa:67:45:ce:
84:46:94:ad:d8:3a:67:9f:d6:45:fd:13:5c:42:a3:1c:2f:8a:
0d:89:79:9f:3c:1a:5e:1a:1f:7d:19:9e:9e:40:4f:5a:21:7b:
4e:78:d6:68:40:9b:fa:21:62:48:32:83:8d:2b:29:98:86:2e:
bd:8e:1a:b7:6c:33:99:d7:00:b2:04:15:65:63:1f:37:5a:a0:
ea:ec:55:f6:5b:d6:48:49:1f:92:ae:78:71:97:97:34:d5:f9:
9f:c2:4c:07:db:3e:d6:6a:8d:63:24:c9:44:6a:83:5c:b4:3a:
df:04:e1:2e:25:0e:0e:b2:02:05:e6:c5:cf:81:94:b7:04:53:
35:b9:e5:65:c5:ef:d1:f2:ed:e5:04:d6:b4:5d:c4:85:c9:32:
c3:b8:18:2e:be:14:90:49:4a:4d:97:a5:24:34:7d:65:05:41:
32:cf:77:1d:b7:89:78:62:96:5e:d7:ee:8c:ed:13:3b:0f:f1:
9e:7f:b5:a6:df:11:b8:30:87:80:bd:a9:7e:a8:e9:6e:76:54:
00:d2:8f:68:7d:3c:fe:0e:33:96:9e:ab:c0:9c:73:af:5b:e3:
fb:2b:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:54:01 2025 by rpki-client