Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UI7VqOrpy0nBfivRzX7MbftY6fY.roa
File: UI7VqOrpy0nBfivRzX7MbftY6fY.roa (raw, json)
Hash identifier: IYdTZXzsCU0aEyQMjyzPqJBFLnzsoXVRU2770RmUqMk=
Subject key identifier: 50:8E:D5:A8:EA:E9:CB:49:C1:7E:2B:D1:CD:7E:CC:6D:FB:58:E9:F6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1264
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UI7VqOrpy0nBfivRzX7MbftY6fY.roa
Signing time: Sat 31 May 2025 14:39:11 +0000
ROA not before: Sat 31 May 2025 14:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4708 (0x1264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 14:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=508ED5A8EAE9CB49C17E2BD1CD7ECC6DFB58E9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:04:c7:df:ee:5b:04:95:e3:6f:5a:57:81:
94:8b:dd:69:7d:04:a7:0e:5a:50:87:8d:a8:d2:2b:
26:66:05:b8:de:73:fc:02:b8:33:00:59:a7:5d:63:
98:35:ae:e2:ad:1c:5b:d2:f8:90:f8:06:5f:7e:7f:
fb:5b:76:dd:ab:16:16:de:65:da:91:4e:df:0a:e5:
48:11:0c:4a:33:6b:ee:4c:c0:61:1e:3d:18:9e:d3:
f5:92:b6:5d:3d:70:8b:9c:38:b8:ea:a5:6d:37:16:
de:59:6b:aa:a7:37:31:43:1e:27:3b:4a:87:75:bc:
cb:eb:01:d4:f8:76:97:b0:b2:c7:5b:0b:fb:2f:89:
2d:69:a8:41:2c:c6:f3:86:66:ce:21:c1:c7:a3:ba:
a8:37:2e:5c:79:1b:03:16:4c:a1:43:f0:f6:9f:cc:
59:a4:14:88:9a:1d:0e:4f:50:39:30:d1:fa:d5:1c:
ef:3d:d6:ef:d9:4c:26:26:49:0e:bc:98:fb:e1:ec:
b8:64:60:95:4f:36:ff:ac:ef:a9:5d:19:45:b6:13:
cb:a8:9b:c3:f9:03:13:52:4a:4c:a7:49:2a:9b:4e:
69:b0:8d:21:ec:27:20:14:98:44:51:f4:f6:d2:bc:
75:69:2c:81:b0:c0:40:a6:4d:53:b1:b2:79:24:c4:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8E:D5:A8:EA:E9:CB:49:C1:7E:2B:D1:CD:7E:CC:6D:FB:58:E9:F6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UI7VqOrpy0nBfivRzX7MbftY6fY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:d4:dd:d1:cd:21:a1:8f:c1:ac:e4:9d:ee:c5:2c:1e:9c:0b:
cb:92:08:44:d8:0a:3e:45:25:d3:e1:0e:37:cd:39:0b:d8:f3:
b6:35:19:f1:1f:a1:54:c4:8c:51:a4:d0:d3:07:aa:da:b8:eb:
be:b0:17:eb:8f:f9:f6:a2:33:ef:1f:9c:58:9c:95:30:83:2c:
dc:29:ab:e8:25:12:7d:10:81:8f:28:ca:94:af:be:e5:84:56:
8e:96:9b:f7:8f:75:9e:4a:80:b9:49:d8:bc:ce:2a:74:1e:3d:
cd:99:41:00:3a:f9:39:17:2a:1f:33:0b:33:bb:94:55:cb:5f:
43:94:a9:73:5e:24:6d:48:38:db:3d:12:17:82:d9:5f:e7:f9:
23:a7:25:2e:61:45:85:a2:77:06:e7:e0:6e:c8:9e:d5:12:af:
7c:c3:f6:dd:09:97:97:26:71:b9:77:c0:b3:fa:93:60:6c:7e:
83:95:5e:b9:eb:20:2f:c1:ee:1b:40:b5:63:4c:4e:6e:3a:62:
fa:d0:13:09:fc:e1:01:83:f6:0c:f2:91:38:96:ff:b6:53:99:
dd:e3:19:0d:22:80:61:de:f1:6f:34:b7:36:26:63:47:28:0a:
56:34:d1:a9:86:13:ee:47:04:f2:84:2b:ee:56:cd:ce:ea:a3:
95:d7:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:53 2025 by rpki-client