Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HSbBs2mR7BQaD9PhZnwiP0of6v0.roa
File: HSbBs2mR7BQaD9PhZnwiP0of6v0.roa (raw, json)
Hash identifier: B24M+3fbPnedNrhdXCWNvgVxhqBZGBxFRKFEf/5glXI=
Subject key identifier: 1D:26:C1:B3:69:91:EC:14:1A:0F:D3:E1:66:7C:22:3F:4A:1F:EA:FD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D60
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HSbBs2mR7BQaD9PhZnwiP0of6v0.roa
Signing time: Sun 15 Jun 2025 06:09:58 +0000
ROA not before: Sun 15 Jun 2025 06:09:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7520 (0x1d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 06:09:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1D26C1B36991EC141A0FD3E1667C223F4A1FEAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:a4:dc:6c:64:d9:2f:06:07:15:1d:df:13:
5c:5d:25:82:52:96:28:4d:f7:5c:1c:39:d9:22:1e:
4d:58:b2:69:47:a7:ca:16:48:75:fd:31:3a:64:1b:
8f:60:97:e8:de:50:bf:10:b0:90:b3:da:ed:e4:f3:
a6:6e:32:64:d7:a0:1c:f5:1f:51:31:6f:65:4a:38:
eb:67:85:e1:48:65:12:94:ee:1f:d0:79:ff:1c:f4:
92:cb:5b:f3:7f:e7:45:03:8f:22:58:e2:2d:7e:5a:
28:62:69:17:70:14:f6:e7:11:80:c3:e0:e5:48:8e:
fc:b6:a2:21:c0:30:43:c9:a5:98:12:e0:aa:1a:b6:
c9:84:59:93:f4:fd:35:65:18:93:1a:8a:3c:7f:b1:
aa:82:19:df:28:0f:d1:64:8d:9e:f1:46:9d:27:bb:
0a:73:a6:cb:20:2f:ae:00:01:45:f2:e8:73:b3:70:
12:63:18:54:ab:b4:93:7a:49:26:6d:3c:49:b1:7b:
c5:28:ea:5a:6e:c5:c8:d4:20:44:88:af:26:f8:b4:
17:e7:bd:c2:7e:98:11:5a:6e:d2:eb:59:4e:f2:79:
47:ee:4b:48:9e:bc:b3:42:9d:d6:e1:62:ef:28:c0:
9e:1f:24:23:a3:c5:41:41:64:7f:45:59:a7:32:4d:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:C1:B3:69:91:EC:14:1A:0F:D3:E1:66:7C:22:3F:4A:1F:EA:FD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HSbBs2mR7BQaD9PhZnwiP0of6v0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:40:0f:68:c8:5c:45:2a:fe:7b:5e:73:49:e3:53:2b:ca:53:
ab:34:87:62:dd:d8:54:08:70:c8:e0:ba:7e:93:95:1f:eb:08:
58:02:42:1d:d5:df:a9:d1:2b:68:bb:cf:58:09:10:e1:15:a2:
34:bc:8b:91:17:3a:c8:9a:96:67:a4:5e:0b:58:bd:28:5d:c0:
3a:80:4c:58:47:57:0a:75:e0:fc:b1:a6:7d:ae:32:ae:c6:ba:
10:21:bd:90:7d:a7:de:f7:67:8e:c8:63:12:79:06:f3:9a:28:
fa:fb:dc:90:56:ed:5c:0c:c7:b0:b5:b6:4d:7a:dd:41:39:4c:
bd:2e:66:b3:c3:43:e5:b2:e9:e5:2c:7c:a1:ae:5e:a4:7e:78:
1d:32:0b:70:61:74:79:86:9a:c7:5a:17:8a:32:bb:79:6d:58:
0f:b9:09:07:7e:1f:a0:cf:6a:d3:00:44:21:b9:f6:22:a6:18:
60:14:0a:e0:fb:d3:40:92:21:f0:e0:f4:10:b6:5c:c6:cf:5d:
31:61:94:2a:45:66:77:36:81:30:d8:f5:53:80:34:0e:9e:c3:
07:26:48:5f:27:fd:1c:8b:ce:f9:51:ba:fd:b1:42:63:4f:c3:
eb:23:b7:16:f8:f5:12:6a:f6:1f:02:39:54:7a:6f:f3:76:45:
e2:26:4a:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTUw
NjA5NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFEMjZDMUIzNjk5MUVD
MTQxQTBGRDNFMTY2N0MyMjNGNEExRkVBRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKiaTcbGTZLwYHFR3fE1xdJYJSlihN91wcOdkiHk1YsmlHp8oW
SHX9MTpkG49gl+jeUL8QsJCz2u3k86ZuMmTXoBz1H1Exb2VKOOtnheFIZRKU7h/Q
ef8c9JLLW/N/50UDjyJY4i1+WihiaRdwFPbnEYDD4OVIjvy2oiHAMEPJpZgS4Koa
tsmEWZP0/TVlGJMaijx/saqCGd8oD9FkjZ7xRp0nuwpzpssgL64AAUXy6HOzcBJj
GFSrtJN6SSZtPEmxe8Uo6lpuxcjUIESIryb4tBfnvcJ+mBFabtLrWU7yeUfuS0ie
vLNCndbhYu8owJ4fJCOjxUFBZH9FWacyTVGjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHSbBs2mR7BQaD9PhZnwiP0of6v0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9IU2JCczJtUjdCUWFEOVBo
Wm53aVAwb2Y2djAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAHJAD2jIXEUq/ntec0njUyvKU6s0h2Ld2FQI
cMjgun6TlR/rCFgCQh3V36nRK2i7z1gJEOEVojS8i5EXOsialmekXgtYvShdwDqA
TFhHVwp14Pyxpn2uMq7GuhAhvZB9p973Z47IYxJ5BvOaKPr73JBW7VwMx7C1tk16
3UE5TL0uZrPDQ+Wy6eUsfKGuXqR+eB0yC3BhdHmGmsdaF4oyu3ltWA+5CQd+H6DP
atMARCG59iKmGGAUCuD700CSIfDg9BC2XMbPXTFhlCpFZnc2gTDY9VOANA6ewwcm
SF8n/RyLzvlRuv2xQmNPw+sjtxb49RJq9h8COVR6b/N2ReImSuY=
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:35 2025 by rpki-client