Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NSolqKOSK-4RQ_9rHof5o2BFQvU.roa
File: NSolqKOSK-4RQ_9rHof5o2BFQvU.roa (raw, json)
Hash identifier: 9M+GPTrZdG5N60KcpJF6ONF6q3pMJT6mr1y2hQfB700=
Subject key identifier: 35:2A:25:A8:A3:92:2B:EE:11:43:FF:6B:1E:87:F9:A3:60:45:42:F5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0864
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NSolqKOSK-4RQ_9rHof5o2BFQvU.roa
Signing time: Sun 18 May 2025 06:38:08 +0000
ROA not before: Sun 18 May 2025 06:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 06:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=352A25A8A3922BEE1143FF6B1E87F9A3604542F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:80:1a:cb:91:ee:9c:62:06:ba:cd:d1:a5:
c2:9f:f1:82:3a:7d:43:6e:6f:b6:e2:59:f6:8a:68:
37:f9:d9:50:de:52:97:f9:9c:19:12:59:5e:af:b5:
d7:fa:fd:26:8a:3e:6a:7d:c9:8b:b5:e1:67:c3:37:
7b:19:38:03:f8:90:f1:96:1f:ba:34:ca:8e:68:95:
f0:2a:60:07:b3:ee:b5:b0:fb:f1:b6:ec:fb:66:a3:
e8:3c:d5:74:ef:c4:b0:b5:35:88:12:26:f0:6c:2a:
27:36:b0:5f:30:45:ec:8a:df:37:15:ac:f1:b5:f4:
e2:b9:08:04:c4:ef:d7:3f:62:98:9e:95:cd:9d:07:
cd:a3:bd:27:c0:eb:d2:d3:b2:14:38:bc:bf:65:97:
3b:b1:96:55:4b:2f:9d:f1:66:8f:e7:13:e7:c8:9f:
09:06:19:23:ab:4e:d7:1c:9c:6b:f8:03:0f:20:09:
69:63:97:78:77:b6:66:f4:e3:ac:4f:b7:8c:c6:7c:
c0:32:98:d4:54:1e:d8:43:91:8a:ac:36:b6:1e:37:
b1:a2:b3:ec:f5:59:f6:c3:ae:5f:45:5a:59:99:1c:
e2:25:a6:c1:74:29:0d:ed:39:5d:a8:d7:10:af:47:
82:f8:87:a5:21:9d:03:e1:ff:38:e1:08:91:4d:77:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2A:25:A8:A3:92:2B:EE:11:43:FF:6B:1E:87:F9:A3:60:45:42:F5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NSolqKOSK-4RQ_9rHof5o2BFQvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:c2:15:91:57:a5:82:55:b2:e9:d8:77:5c:84:43:02:55:55:
2a:cf:8e:41:8a:07:18:a6:47:20:d1:77:df:32:08:aa:12:00:
e5:49:54:77:b7:fc:69:73:d9:83:62:06:0a:14:f7:85:75:de:
77:5d:0b:09:d3:37:06:a9:e9:90:fb:31:b2:59:3b:2e:82:65:
69:e2:a8:fc:a1:26:76:21:3b:1c:92:ca:e1:c4:4f:0f:0f:24:
6b:cc:fe:45:c5:0e:45:04:09:ca:eb:e7:49:21:13:27:b6:a6:
ec:49:70:c9:c3:68:5e:4d:6e:f6:24:2b:01:71:8a:d7:63:b5:
1e:e2:5c:13:49:19:c6:47:dd:ed:5a:a2:c4:f8:09:1a:7e:b1:
de:5d:c5:e1:9b:88:03:32:b2:f0:36:ff:54:70:ee:58:f1:28:
87:75:77:81:b5:86:58:ad:0b:48:1a:7d:ea:e6:2e:c9:18:32:
0d:47:aa:e1:f8:e6:11:8b:b7:b0:3a:e1:5a:be:03:3d:9b:de:
57:e0:2d:a4:21:17:89:b9:3a:1b:2f:13:49:84:71:58:3f:60:
8a:18:87:b8:e9:f5:b8:30:38:d9:8d:99:8f:e4:06:1a:f3:43:
db:99:14:90:84:b7:8c:1d:6b:ab:be:d0:ac:34:fc:99:0e:ad:
2a:34:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:34 2025 by rpki-client