Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Gvl8HoMjI0v6yvIdctqe-2DwdX8.roa
File: Gvl8HoMjI0v6yvIdctqe-2DwdX8.roa (raw, json)
Hash identifier: cBbi/RY0J/21sM3ZKyPOrKVuFhVXUWyB04oEq8cyTbk=
Subject key identifier: 1A:F9:7C:1E:83:23:23:4B:FA:CA:F2:1D:72:DA:9E:FB:60:F0:75:7F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D38
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gvl8HoMjI0v6yvIdctqe-2DwdX8.roa
Signing time: Sun 15 Jun 2025 01:48:19 +0000
ROA not before: Sun 15 Jun 2025 01:48:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7480 (0x1d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 01:48:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1AF97C1E8323234BFACAF21D72DA9EFB60F0757F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:62:df:1b:9b:d8:d9:af:36:58:2e:5b:dc:
f4:87:c4:dd:8e:44:62:f1:46:e0:d3:92:e4:f5:b9:
87:8a:26:b4:10:fe:54:de:81:47:2d:a7:8b:9c:81:
d6:25:ba:6d:19:78:bb:10:d6:d4:d0:06:dd:35:3c:
df:03:f3:92:c8:eb:d7:b2:ce:51:51:51:fc:08:a8:
4c:04:8d:74:d5:1e:b4:d6:70:99:db:40:25:96:50:
50:ec:13:c7:40:54:30:04:c8:9d:22:e8:0a:3f:28:
8e:67:0d:b1:1c:1c:b9:e0:99:b6:bd:4e:49:df:b0:
e7:f2:c4:a9:67:4a:b3:d1:7c:23:42:48:bd:59:6a:
50:cb:7b:4e:24:37:30:8e:a4:a4:76:eb:50:35:64:
33:26:8a:61:74:29:26:ef:b9:42:70:7f:97:2e:32:
43:38:28:39:a7:c6:2a:65:cb:05:e7:f1:a2:5b:77:
8a:b6:c2:0c:70:a5:cb:c0:30:fc:a4:e2:d9:d6:7e:
e5:c9:2f:47:d8:99:e2:64:a1:5c:ca:c2:dd:22:b0:
ba:82:9b:8e:3b:71:ce:49:7d:69:8c:50:cb:a7:18:
2b:eb:13:0e:96:20:da:c4:19:8e:f4:4a:ca:d7:1a:
5d:b4:02:97:dd:5f:6a:f8:7d:80:f4:66:f9:01:ae:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:7C:1E:83:23:23:4B:FA:CA:F2:1D:72:DA:9E:FB:60:F0:75:7F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gvl8HoMjI0v6yvIdctqe-2DwdX8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:5b:d9:80:ab:a8:69:ab:6e:17:8b:53:89:5e:db:21:30:59:
da:4c:31:34:a7:28:22:e4:37:61:59:64:30:ec:ba:e9:9c:4a:
30:45:44:b7:93:82:2d:38:7b:c2:c6:be:29:c5:9b:9f:5a:24:
93:2a:b1:b9:1b:d7:54:a4:7b:83:de:55:ea:68:8d:0e:ad:cb:
b5:16:7c:06:be:c9:d8:9e:9c:d9:be:da:51:73:24:32:1f:7d:
2e:8d:c3:56:0d:11:9c:6a:68:b9:55:19:24:7e:5f:ca:5d:1c:
9a:b4:15:7e:b8:c9:06:78:7f:c9:f2:6a:8d:18:9b:fd:af:fa:
02:7a:9a:74:4a:d6:66:e1:7d:b6:f8:4f:b4:e2:8f:3d:31:f0:
8b:67:fc:dc:8c:0c:b5:cf:78:91:96:38:1d:93:ac:87:e8:4c:
82:b4:72:b9:af:7d:a8:1a:77:60:fe:73:9c:f0:ae:92:7d:54:
fa:ce:cf:e4:9e:53:33:22:df:59:b1:9f:e2:1b:81:bb:11:a1:
94:fd:9c:c0:dd:79:0a:96:ac:30:2a:cc:ec:2f:c6:e7:c5:5d:
ee:8f:a8:36:f2:4a:4a:4c:90:23:04:b3:cc:bc:ce:af:3a:ee:
39:fe:ff:f1:0d:31:3e:c8:ad:31:b1:26:f7:85:ff:c8:2b:ed:
0f:7d:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:01:20 2025 by rpki-client