Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/R9x4eVlgwHLhNPm8PUnjdrUeoac.roa
File: R9x4eVlgwHLhNPm8PUnjdrUeoac.roa (raw, json)
Hash identifier: yE1DIS2C8bZZaEe2v+CwLV1EDKc8hNW0P4mJlmERhas=
Subject key identifier: 47:DC:78:79:59:60:C0:72:E1:34:F9:BC:3D:49:E3:76:B5:1E:A1:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BB4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R9x4eVlgwHLhNPm8PUnjdrUeoac.roa
Signing time: Thu 22 May 2025 16:38:26 +0000
ROA not before: Thu 22 May 2025 16:38:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 16:38:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=47DC78795960C072E134F9BC3D49E376B51EA1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:64:05:17:98:99:06:c8:00:4f:12:ba:7f:
1f:13:fa:93:71:d2:e6:2d:c6:62:a4:d5:64:2f:5f:
88:b6:7e:cd:d2:a0:af:7d:31:55:0a:e4:c6:9e:06:
35:d0:3c:24:ce:3b:7e:71:2d:f0:36:b9:5b:9e:d0:
bc:d2:a5:02:4c:6b:e7:f6:5b:89:8a:76:6e:04:6d:
98:c7:df:69:e1:27:48:75:93:8a:a9:d0:38:e1:06:
63:99:1c:6d:8f:57:d8:1f:4f:6c:c5:f0:4a:70:43:
8c:4d:ee:c1:f5:20:6d:33:53:e3:e5:fb:1c:d0:84:
ab:cd:34:fd:7d:04:49:61:59:57:e2:16:c4:68:4d:
2d:b6:80:d0:43:2f:97:29:3f:5b:40:fb:29:17:c9:
31:e8:fe:7b:3f:34:da:fc:e1:a9:ae:90:f3:8f:bf:
7a:7e:c8:0d:5a:d6:a4:4a:53:1c:a3:cc:40:91:4c:
f8:1a:c5:ec:63:a2:50:f9:5e:f4:b9:d7:18:da:43:
f1:11:66:0c:ab:3f:0f:e1:c5:02:51:c7:fa:3f:a0:
cc:41:23:d5:b2:7d:a5:a0:63:49:7a:2e:e5:55:59:
46:2d:ac:53:36:af:82:6b:42:e2:55:46:6a:6c:2c:
05:6c:3a:0b:ea:14:05:5e:f7:7d:1c:3f:b8:b0:50:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DC:78:79:59:60:C0:72:E1:34:F9:BC:3D:49:E3:76:B5:1E:A1:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R9x4eVlgwHLhNPm8PUnjdrUeoac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:9a:6a:69:d9:3b:82:f5:ec:7f:38:2f:dc:c4:3e:a5:a6:0c:
64:07:98:63:e5:4a:2a:99:b5:94:61:89:ca:48:30:2a:c5:9b:
3a:00:a6:e0:3f:25:50:71:51:ce:8d:e3:c7:47:23:eb:db:33:
62:ed:82:6e:3e:ba:07:cc:3f:20:51:70:bd:ff:8d:5d:55:d1:
10:46:5b:c3:f2:68:71:6f:61:e0:65:32:d8:3f:8e:ec:8c:7e:
3f:ae:8a:98:52:9e:d3:18:58:d3:ef:33:bf:ea:32:6d:22:0f:
50:79:c1:cf:9f:9e:21:49:86:4b:4c:2b:1d:0b:77:21:6d:fa:
e7:41:2a:78:96:a7:bb:6a:c5:de:90:8e:52:98:8f:fd:6d:f6:
eb:f4:2f:aa:43:46:32:ae:5b:cd:a7:4e:9e:16:e7:0d:ad:bd:
14:dd:73:d9:92:7a:ce:7a:59:df:1e:e6:2a:95:4b:2d:96:1c:
cb:41:67:8f:93:a4:81:27:4e:f7:3c:98:95:33:4a:6c:80:ef:
be:a0:0a:ee:21:fb:b3:c0:93:69:c4:88:6a:61:9f:58:f5:96:
2a:de:41:eb:1a:1b:71:41:59:97:cc:93:9c:be:0d:0e:db:d1:
cc:19:03:cc:00:85:67:70:e3:57:cf:3c:4f:33:81:09:d2:b0:
4d:23:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:26:05 2025 by rpki-client