Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GLrUun88_xxdXPDBMKO2mfIzd1k.roa
File: GLrUun88_xxdXPDBMKO2mfIzd1k.roa (raw, json)
Hash identifier: Dv749JjOmuZcrqIrrmaPMe+uK0Wpe3Uh9Hj1p2H69ag=
Subject key identifier: 18:BA:D4:BA:7F:3C:FF:1C:5D:5C:F0:C1:30:A3:B6:99:F2:33:77:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23B4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GLrUun88_xxdXPDBMKO2mfIzd1k.roa
Signing time: Tue 24 Jun 2025 04:12:06 +0000
ROA not before: Tue 24 Jun 2025 04:12:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9140 (0x23b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 04:12:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=18BAD4BA7F3CFF1C5D5CF0C130A3B699F2337759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:b6:be:a8:ca:41:fb:dd:b7:9c:c0:fd:80:
aa:75:57:4d:5d:6c:45:8b:ae:73:fd:95:fe:8c:bd:
c5:b0:11:e9:8b:d1:e7:59:c5:6e:c3:0b:9a:82:8e:
96:12:13:9f:09:e5:c1:53:f1:24:cd:f6:57:df:c9:
88:89:4b:ff:68:36:63:ec:69:f8:82:cf:68:58:44:
cc:67:8f:f9:04:c8:74:6f:d0:0d:cf:90:83:18:79:
e1:4b:6b:30:2e:16:07:ef:64:d0:8d:c6:cd:9d:09:
c4:d8:49:f3:19:a1:0c:22:f2:52:89:f9:08:5d:ad:
47:de:3d:42:e4:c7:98:57:c9:83:e2:1e:d0:cc:7e:
ec:7d:51:a7:6b:6d:4b:65:b9:70:22:4c:e1:50:49:
b3:9b:de:16:60:f1:91:f2:7b:9a:99:a2:3d:08:d8:
b6:ae:5b:89:4a:f3:0a:9e:14:6b:f0:2f:a1:16:98:
b4:ab:28:ac:8f:64:c4:f8:b8:47:35:51:db:f6:85:
2c:f9:ef:7c:30:1e:4c:ed:9c:69:98:e1:d1:42:d2:
75:cf:b4:e4:92:b9:8d:fe:7e:cb:93:c9:16:03:e4:
3a:3a:cc:45:f6:9a:03:45:f5:91:54:78:26:71:11:
d6:30:38:0d:43:b0:e3:2b:cd:88:dd:4b:90:48:5a:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:D4:BA:7F:3C:FF:1C:5D:5C:F0:C1:30:A3:B6:99:F2:33:77:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GLrUun88_xxdXPDBMKO2mfIzd1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:55:c9:59:e7:fd:b3:ca:19:5c:ad:e1:5a:41:8b:ec:b4:b9:
f0:62:04:be:c7:10:33:71:f5:a9:c7:6f:19:88:fd:25:1f:90:
58:bd:8b:42:e7:f8:36:ad:35:8f:a2:08:ea:0d:4c:70:4e:6e:
32:32:a2:97:48:ea:70:67:66:7e:68:0a:17:c8:55:91:27:8a:
68:ad:b3:ae:b3:a3:da:cc:01:4b:fa:b4:0c:04:f3:ce:5b:a0:
28:2a:ac:9e:05:d4:09:18:4e:bf:d2:66:53:e7:bb:b4:07:65:
e9:09:0c:c2:b2:1a:e9:e6:8c:3b:9a:8d:76:32:21:f9:8f:73:
df:c2:64:6c:48:18:24:ef:f4:fb:a9:43:cd:34:a0:97:2c:b6:
d2:bc:ad:35:1f:6e:1f:12:68:10:ad:b8:00:a6:77:41:9e:78:
4d:ff:39:14:e9:8f:6e:98:b8:c6:87:a8:fa:e5:e8:95:5f:20:
33:03:b2:67:ad:aa:2e:4c:81:e5:15:43:be:78:17:9d:90:ad:
8f:a2:f5:18:46:e7:92:ae:1f:c7:7a:5c:b4:b9:79:07:da:43:
22:ef:25:47:c5:7f:4a:26:d4:08:db:ab:9c:a6:88:49:fb:1f:
11:d4:4d:e0:57:7d:7f:cf:5b:84:01:17:b2:77:20:a6:f7:2a:
fa:40:e4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:52:20 2025 by rpki-client