Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/L601SAknLhCLGK1IXhny6iKmHGw.roa
File: L601SAknLhCLGK1IXhny6iKmHGw.roa (raw, json)
Hash identifier: 8mq5ddz5Y9kxB1rWQgrI2zxVweFmzcHdostgkMw4xgM=
Subject key identifier: 2F:AD:35:48:09:27:2E:10:8B:18:AD:48:5E:19:F2:EA:22:A6:1C:6C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12F0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L601SAknLhCLGK1IXhny6iKmHGw.roa
Signing time: Sun 01 Jun 2025 08:09:20 +0000
ROA not before: Sun 01 Jun 2025 08:09:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4848 (0x12f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 08:09:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2FAD354809272E108B18AD485E19F2EA22A61C6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:74:85:a6:61:fc:02:9e:2c:02:a4:1d:79:0f:
c2:de:b1:2f:ac:27:be:b5:c2:a4:19:0e:88:ee:cd:
8b:19:ef:e4:21:1e:e9:59:d5:69:6a:55:6e:46:98:
ef:3b:25:6d:2e:ca:9f:16:fc:cc:4a:e4:a7:42:f9:
7a:da:99:8f:aa:ff:d3:38:05:be:cd:74:f1:b1:bf:
91:92:60:a7:4c:18:bd:4a:6a:61:62:cd:d3:c2:4e:
56:f8:8c:5b:54:ee:30:32:c2:4d:46:13:ce:ab:97:
7b:f9:6e:7f:01:01:01:d4:2c:7d:e5:61:c9:a8:4f:
28:50:93:68:32:93:97:dd:84:49:3e:99:0b:25:05:
23:7b:f2:a5:b3:af:da:6b:92:cb:4c:4f:ae:9e:df:
1c:3d:a7:20:fe:bd:35:ff:cc:47:fe:9f:4e:af:b3:
d1:2d:b7:8b:3a:18:5f:ee:a0:f1:e2:be:74:ae:94:
90:4e:c0:5f:f8:76:79:b6:cc:49:13:a6:56:84:98:
c9:9f:8c:68:65:8e:ae:a7:4f:7d:17:b0:a7:de:29:
5e:de:2e:86:8d:49:f4:63:32:1c:00:8d:d6:c5:ee:
2d:39:4d:be:f0:db:8f:6e:8a:67:28:87:ed:ac:b0:
ae:95:4a:6b:d5:9c:c2:93:30:f4:a5:5c:46:55:fe:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:35:48:09:27:2E:10:8B:18:AD:48:5E:19:F2:EA:22:A6:1C:6C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/L601SAknLhCLGK1IXhny6iKmHGw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:80:a5:ad:9b:6a:cb:e8:26:71:12:0d:1f:92:d6:9c:e8:8a:
db:36:11:a1:e5:91:1d:0c:25:59:34:08:56:bc:b2:44:69:41:
ab:18:24:42:86:55:db:46:05:e4:8a:fc:b7:ae:46:bc:0b:e8:
ab:04:b7:02:02:b8:2d:61:f9:dc:55:ab:17:df:74:cb:cd:7d:
c9:31:f8:fe:32:7d:f7:66:d5:ab:0c:75:77:78:ae:31:ca:42:
e9:9d:55:1a:5f:c1:c6:bf:cf:d6:be:be:d3:33:87:fb:b5:a7:
eb:e2:2e:17:e5:6d:47:ae:2f:cc:21:f3:dd:cf:3b:80:f2:f8:
ea:a3:ad:65:ce:dd:74:5d:c3:c6:f0:65:a6:96:fc:f6:06:d0:
6d:5c:c4:3d:49:ab:38:d9:fb:19:78:7e:f0:df:6e:dd:90:72:
a9:02:83:e9:0d:af:7d:ed:33:b6:2f:79:45:99:b7:d5:fd:76:
60:5f:a9:cb:6d:fc:e7:d3:67:bf:2c:70:09:87:65:3e:ae:40:
64:fe:4c:ee:b9:3e:9b:d0:8d:54:69:d2:0b:98:b0:06:fd:23:
8c:02:cd:1d:f5:cf:39:88:e7:a3:78:73:74:73:6d:f2:e9:e1:
af:fd:00:bd:ff:72:2e:24:46:72:ff:12:c7:53:d6:09:04:5d:
44:a7:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:28 2025 by rpki-client