Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KsoMUyDxBzAXLTBruMvJjkkx3Mk.roa
File: KsoMUyDxBzAXLTBruMvJjkkx3Mk.roa (raw, json)
Hash identifier: BM0UEoupEg9n2FJ4fdS9BoUjyMHfH4waVm6EuvHEwdk=
Subject key identifier: 2A:CA:0C:53:20:F1:07:30:17:2D:30:6B:B8:CB:C9:8E:49:31:DC:C9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0764
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KsoMUyDxBzAXLTBruMvJjkkx3Mk.roa
Signing time: Fri 16 May 2025 22:38:07 +0000
ROA not before: Fri 16 May 2025 22:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 22:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2ACA0C5320F10730172D306BB8CBC98E4931DCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:58:39:95:3f:d4:23:33:d4:cd:aa:b6:60:
a3:ed:6a:75:e8:49:fb:47:bd:2e:78:2a:c5:0c:61:
f6:90:3e:d7:8f:47:a8:a7:d8:10:7a:e9:15:6f:08:
35:7a:71:14:a9:ff:e1:7a:74:f3:06:f0:a0:27:fa:
79:9b:dd:6b:85:66:a4:02:69:78:57:c5:85:65:97:
94:9a:1c:1d:5e:9e:02:13:79:eb:eb:95:16:5d:fe:
ef:c2:3e:bc:e0:11:0f:61:69:44:ba:54:a0:fb:be:
19:5c:24:30:38:d7:23:3c:05:5d:e0:1b:7f:41:5f:
ed:94:53:35:66:c1:db:da:9f:63:37:24:7a:ae:99:
b7:57:e8:22:47:26:17:59:c9:59:d7:fc:9a:9b:41:
83:97:e2:3b:50:2c:1e:2d:02:81:f1:df:ce:4f:ed:
ef:26:7e:8d:99:86:a9:eb:30:e0:cc:89:73:50:96:
94:81:fe:80:d6:08:3f:a2:50:2a:b1:ae:d7:c4:62:
96:2d:53:be:4e:c6:d4:6f:ed:ab:16:c1:ba:79:48:
99:fd:c2:a5:f7:02:6f:55:d4:53:c1:9a:6e:07:66:
09:97:13:02:6f:25:7f:b1:b1:8e:c2:d5:7d:3e:0d:
a5:66:de:f7:21:51:7a:16:97:b1:14:28:2e:14:60:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:0C:53:20:F1:07:30:17:2D:30:6B:B8:CB:C9:8E:49:31:DC:C9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KsoMUyDxBzAXLTBruMvJjkkx3Mk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:68:f1:b6:31:6c:41:7c:28:55:73:3c:9d:c3:e0:29:8a:1b:
4f:94:48:f2:28:53:1c:e8:d7:fa:fc:41:4f:63:34:26:52:20:
85:36:06:a2:2b:54:f3:7c:5c:e6:fb:26:62:43:7e:26:23:a8:
13:da:fe:b9:6e:a5:10:fe:7e:1f:40:7e:f6:00:42:64:3a:fc:
f3:8f:92:1f:ba:ad:e2:47:a6:ea:8a:bb:7a:c6:73:55:7f:69:
76:c3:b1:ba:de:4d:ad:95:5e:b0:b8:3e:27:82:6a:10:4d:7c:
55:44:c2:34:09:36:6d:16:2f:c5:76:e3:f7:60:93:f1:f1:f8:
8f:df:3a:78:10:25:c9:6f:ce:24:03:e3:02:87:be:11:3c:8e:
02:5d:c8:2d:f9:87:f9:a7:24:36:e3:8e:8d:10:df:53:86:9f:
90:b3:24:8e:31:e1:31:90:b4:03:c1:f9:6d:9b:b3:dc:0b:b8:
7e:32:1f:b4:81:ef:8a:98:73:f3:44:33:7c:7a:be:f8:b4:b3:
94:be:71:ca:83:a3:ae:ec:79:63:25:ba:11:29:bb:67:1a:53:
e9:37:33:35:3f:1e:aa:a7:bd:c2:17:43:44:64:d1:4f:89:17:
79:fc:cf:29:6d:8c:34:0a:75:cd:aa:96:19:77:bf:69:1b:15:
d4:5d:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:22 2025 by rpki-client