Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UTLygC8VLDdwUKUT5_z60-faaC0.roa
File: UTLygC8VLDdwUKUT5_z60-faaC0.roa (raw, json)
Hash identifier: QTu12GS56ICK0ct84n/5XkmXCf0WQ1BDobZ8BuyuJEM=
Subject key identifier: 51:32:F2:80:2F:15:2C:37:70:50:A5:13:E7:FC:FA:D3:E7:DA:68:2D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FB8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UTLygC8VLDdwUKUT5_z60-faaC0.roa
Signing time: Wed 18 Jun 2025 09:27:56 +0000
ROA not before: Wed 18 Jun 2025 09:27:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8120 (0x1fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 09:27:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5132F2802F152C377050A513E7FCFAD3E7DA682D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:ba:ec:42:64:dd:31:84:2f:c6:8c:9a:69:
4f:49:a2:ad:f4:a1:a8:57:a9:26:ae:81:1b:7f:27:
6c:a0:ce:0d:c0:cf:84:fd:cb:12:69:e7:1d:39:a9:
76:73:95:18:7d:b4:fd:79:f0:0a:11:68:c3:f6:9c:
34:5d:05:00:20:d2:9f:ac:df:76:56:22:6a:dc:27:
ef:74:1f:23:f0:3f:e2:63:83:a6:cd:b9:13:6c:57:
fc:c8:51:34:3d:96:58:6a:db:69:0c:70:d1:94:ec:
9a:a6:fc:c1:27:58:ab:b7:a0:9c:da:a5:49:71:2f:
32:1e:8f:83:a0:23:60:f0:49:f8:dc:b8:cd:ca:4f:
a1:2d:8f:42:43:0f:40:be:d1:71:7b:eb:8a:08:5d:
a7:a2:bd:65:3a:a0:3a:b2:85:bd:06:fd:3c:39:aa:
7a:8d:25:d3:df:03:5b:09:3b:02:12:f7:37:e8:6b:
67:aa:37:f4:38:60:f3:f6:60:cf:a8:e3:49:07:ce:
a7:a4:1f:32:ce:bf:cb:b9:01:d5:a9:c5:c9:55:f3:
8f:be:ee:7e:80:66:e9:17:88:63:a0:92:8f:32:44:
ee:d4:71:ee:3c:cb:fb:1b:f9:2b:aa:63:ba:db:40:
6d:b5:cd:a5:19:f7:10:21:56:c8:18:72:38:a6:63:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:F2:80:2F:15:2C:37:70:50:A5:13:E7:FC:FA:D3:E7:DA:68:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UTLygC8VLDdwUKUT5_z60-faaC0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:9f:ee:28:5b:fd:4a:2e:86:a6:d2:c2:9a:a8:a7:4a:e6:09:
99:59:ee:12:a2:24:32:0a:ec:5c:fc:53:d3:79:60:1b:5c:ca:
d1:1c:b5:1b:68:39:b8:8d:1c:c2:f2:a3:d6:0d:35:6e:1c:ab:
26:5d:1c:d5:38:af:df:13:a1:32:c3:e1:39:fc:93:43:64:a2:
5d:e8:c8:73:e4:c2:61:92:bf:ea:22:b8:a8:55:d0:5c:0b:2b:
d0:ba:b2:3c:da:af:50:5f:41:a2:a8:44:ec:f6:8e:60:ba:08:
4f:d2:58:c9:51:7a:5e:5c:c9:71:9b:a8:fd:c6:e1:04:3f:0a:
93:c9:8c:1a:89:95:4e:6a:2a:30:dd:c6:e9:a2:00:1b:02:eb:
ae:82:5c:c7:e0:20:4f:dc:74:19:46:5d:e9:5b:40:b7:81:1e:
b3:b2:e5:f9:8a:33:15:be:14:3e:dd:58:0a:3e:a1:6f:2b:df:
31:f5:a3:12:40:4a:96:2b:ed:ee:73:a0:31:ca:0c:2e:07:9c:
97:d6:76:8e:c8:26:68:21:e0:31:12:25:ab:2e:29:31:16:7d:
87:b5:7d:ee:d3:ff:1c:86:a1:35:47:a0:48:2c:7d:fe:22:af:
3a:07:b1:fa:b1:1f:5d:18:e3:2e:99:30:20:9c:b7:9d:06:a1:
9e:19:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:35 2025 by rpki-client