Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EOSXkO_KF9xWflizXEpBxVLFdgw.roa
File: EOSXkO_KF9xWflizXEpBxVLFdgw.roa (raw, json)
Hash identifier: q/BiVOS6MIblTzUOVGzY+JRR/0C20WPRl1IU0PB5kqg=
Subject key identifier: 10:E4:97:90:EF:CA:17:DC:56:7E:58:B3:5C:4A:41:C5:52:C5:76:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CC8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EOSXkO_KF9xWflizXEpBxVLFdgw.roa
Signing time: Sat 24 May 2025 03:08:30 +0000
ROA not before: Sat 24 May 2025 03:08:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 03:08:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=10E49790EFCA17DC567E58B35C4A41C552C5760C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:4f:53:9a:83:3f:85:88:ae:d2:58:0a:cf:
a8:ff:8c:cf:1d:a5:4b:4a:91:84:5b:df:70:5f:95:
3b:7b:44:b1:10:fc:a0:e9:8b:d1:ec:36:f8:46:32:
f8:58:51:ba:69:42:26:7d:ff:a3:95:7e:45:a6:24:
b2:66:d5:a9:ca:53:66:b0:39:93:06:66:73:d8:c8:
0a:b6:e5:8c:a9:1d:70:3c:5d:e1:7a:f2:83:76:ba:
60:60:19:fd:4d:82:85:13:d6:5c:0d:5b:5d:6c:1e:
ed:ef:91:ac:37:9f:3a:96:70:88:24:61:d6:20:30:
1c:03:48:a2:32:9b:9b:1b:a7:6d:a0:f7:f7:85:75:
74:77:07:ba:1f:37:3e:b9:ea:3f:fc:94:1b:66:93:
d7:8e:5d:d8:f5:8d:cb:4a:f3:2b:9e:da:0b:d7:00:
15:37:4b:34:b2:c5:0e:ea:a2:cf:bc:10:ff:9b:40:
0f:ba:a7:7b:b9:80:38:e6:aa:58:75:6e:f2:a1:3e:
57:60:13:0f:af:3c:9d:c8:26:79:df:ff:c2:4f:4e:
b2:c9:67:12:a0:94:17:b3:37:f5:eb:31:0e:7e:64:
79:f3:7b:cf:fb:5a:ee:1d:e0:eb:51:5e:f4:47:ee:
47:b4:d1:b3:5c:74:1c:f8:2f:6c:c6:13:b3:27:83:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:97:90:EF:CA:17:DC:56:7E:58:B3:5C:4A:41:C5:52:C5:76:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EOSXkO_KF9xWflizXEpBxVLFdgw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:f6:51:df:68:68:18:52:03:10:b7:26:fd:53:d2:10:b1:3e:
03:7c:8a:3c:3e:38:51:c7:ef:67:ae:67:d0:1a:f7:b5:ff:d9:
6e:29:3d:c1:67:bd:b3:c7:91:a0:10:1a:97:3a:2d:f6:fb:31:
38:34:0c:bf:83:f3:a3:3f:b5:51:23:5f:c1:3e:7b:95:f5:40:
db:72:df:dd:a9:37:61:1e:f1:f4:2b:99:d5:21:b3:0f:f0:c7:
58:90:bc:f8:a3:e0:b2:bc:76:f1:11:b9:0e:a5:ca:0b:37:04:
f1:6c:c2:6a:12:fc:c3:01:b9:c4:8b:4b:a2:3e:47:5d:7f:15:
9c:92:32:28:3c:c5:d8:93:af:a3:d6:8f:16:01:1e:98:6e:f5:
53:77:7f:f8:dd:31:ad:eb:b8:e1:3b:f0:86:52:ca:64:72:c6:
2d:47:e5:98:b1:c0:b7:c9:ae:01:29:d6:4c:1f:83:74:a6:5a:
15:5f:1c:4f:52:dd:1f:54:69:7b:58:2e:80:82:4c:b4:ca:e6:
c6:2f:1a:34:b2:2b:a7:20:27:bf:bf:3c:0d:d0:61:50:70:d4:
9f:f9:58:cf:06:33:2c:41:c2:63:a1:4f:7a:28:13:ce:96:39:
16:e5:53:06:03:e6:a7:05:00:78:ec:e5:17:2c:e1:fc:69:37:
f9:45:28:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw
MzA4MzBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEwRTQ5NzkwRUZDQTE3
REM1NjdFNThCMzVDNEE0MUM1NTJDNTc2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4M09TmoM/hYiu0lgKz6j/jM8dpUtKkYRb33BflTt7RLEQ/KDp
i9HsNvhGMvhYUbppQiZ9/6OVfkWmJLJm1anKU2awOZMGZnPYyAq25YypHXA8XeF6
8oN2umBgGf1NgoUT1lwNW11sHu3vkaw3nzqWcIgkYdYgMBwDSKIym5sbp22g9/eF
dXR3B7ofNz656j/8lBtmk9eOXdj1jctK8yue2gvXABU3SzSyxQ7qos+8EP+bQA+6
p3u5gDjmqlh1bvKhPldgEw+vPJ3IJnnf/8JPTrLJZxKglBezN/XrMQ5+ZHnze8/7
Wu4d4OtRXvRH7ke00bNcdBz4L2zGE7Mng+j3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEOSXkO/KF9xWflizXEpBxVLFdgwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FT1NYa09fS0Y5eFdmbGl6
WEVwQnhWTEZkZ3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJT2Ud9oaBhSAxC3Jv1T0hCxPgN8ijw+OFHH
72euZ9Aa97X/2W4pPcFnvbPHkaAQGpc6Lfb7MTg0DL+D86M/tVEjX8E+e5X1QNty
392pN2Ee8fQrmdUhsw/wx1iQvPij4LK8dvERuQ6lygs3BPFswmoS/MMBucSLS6I+
R11/FZySMig8xdiTr6PWjxYBHphu9VN3f/jdMa3ruOE78IZSymRyxi1H5ZixwLfJ
rgEp1kwfg3SmWhVfHE9S3R9UaXtYLoCCTLTK5sYvGjSyK6cgJ7+/PA3QYVBw1J/5
WM8GMyxBwmOhT3ooE86WORblUwYD5qcFAHjs5Rcs4fxpN/lFKCY=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:45 2025 by rpki-client