Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IKOa-DUgitMnZJSGh6jrkYljYE4.roa
File: IKOa-DUgitMnZJSGh6jrkYljYE4.roa (raw, json)
Hash identifier: 2DOI09drAfndNrQ9e8OC7UTvtvdct1rU7RyrNp4Wz2A=
Subject key identifier: 20:A3:9A:F8:35:20:8A:D3:27:64:94:86:87:A8:EB:91:89:63:60:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 128C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IKOa-DUgitMnZJSGh6jrkYljYE4.roa
Signing time: Sat 31 May 2025 19:39:52 +0000
ROA not before: Sat 31 May 2025 19:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4748 (0x128c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 19:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20A39AF835208AD32764948687A8EB918963604E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:6a:ef:8f:db:3b:0a:1a:2e:56:30:57:55:
dc:22:50:d0:a5:ee:e1:f5:4c:ed:55:36:13:d4:f4:
e6:fa:05:d1:c4:8f:09:2a:d2:a9:1e:7d:8e:9b:6e:
18:61:a2:7a:b5:96:85:89:14:84:0f:d6:a4:b8:b0:
49:68:5a:06:61:f9:fe:03:e4:aa:31:23:be:3b:a9:
b0:f7:16:d1:54:ca:41:78:81:e4:a1:7e:08:3c:1b:
60:13:67:02:f7:01:ce:49:ff:60:d6:95:0b:33:13:
70:27:7e:d6:1c:73:21:be:a6:65:0c:a7:5f:51:96:
6b:6c:3c:c8:b9:d1:41:4b:25:5c:9c:4d:4d:53:05:
a8:4b:be:2c:41:1c:ff:22:63:48:5f:d1:9c:41:67:
01:f8:da:bc:d7:da:57:b8:73:c0:dd:53:d2:b8:58:
3b:21:e8:61:f5:9e:18:1e:6b:ac:a8:db:b0:6d:4f:
5c:4f:37:c5:fb:18:f0:34:ee:e3:b9:a2:5b:19:6b:
7a:76:ca:3a:03:5b:14:88:04:3a:06:32:64:68:6c:
24:31:93:61:3b:eb:c7:46:52:56:86:79:4c:73:2f:
65:06:41:54:6f:ed:f0:df:11:7b:9f:5d:94:64:c5:
fc:f5:dc:c3:33:c8:f2:0f:ac:1b:c2:69:a7:e2:1d:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:9A:F8:35:20:8A:D3:27:64:94:86:87:A8:EB:91:89:63:60:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IKOa-DUgitMnZJSGh6jrkYljYE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:89:4e:3a:9e:16:0f:ef:53:3a:72:39:27:17:94:f2:50:7d:
59:75:84:e0:54:23:ac:8f:cc:ed:51:2c:36:be:b5:20:27:59:
42:02:70:e8:d9:fb:b6:20:dd:f8:41:b8:02:01:4a:26:73:f6:
5a:19:d1:b0:90:bf:bb:c9:13:97:e9:3f:8e:53:31:2a:a0:52:
ab:e6:73:f0:f5:94:b2:21:f0:54:01:72:bf:a9:05:5e:02:d1:
cd:32:48:0a:b1:cb:54:03:d3:30:a8:01:6a:89:ab:dc:37:a6:
4d:3e:2a:92:b4:02:99:fd:de:cf:da:09:eb:4a:d6:44:06:04:
91:e8:97:16:9d:09:1e:d7:09:77:b5:88:a0:78:66:08:0e:de:
ae:55:b7:69:7d:8c:ad:34:32:fb:d8:90:04:cc:8a:a3:5e:13:
02:0e:7e:e1:a5:89:4f:30:80:e4:63:ba:17:d2:78:de:fb:a4:
b3:54:78:0a:c4:82:11:f2:50:38:cf:f3:d5:8d:53:ac:f5:5c:
fc:1c:3b:bf:7d:1a:ee:95:3e:89:4a:c4:22:69:2a:37:8a:94:
16:b2:16:11:30:6c:f3:6e:5e:73:02:68:a6:e6:ed:6d:18:05:
42:fe:ef:ea:b7:d7:97:b5:88:f4:69:b2:bc:cd:d0:03:98:37:
84:a4:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:52 2025 by rpki-client