Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_f-Q7jHJPMtuZJGIHY2qgh7euEo.roa
File: _f-Q7jHJPMtuZJGIHY2qgh7euEo.roa (raw, json)
Hash identifier: GVDvaabagOFnsxyAOJCaPwVlcbHMHQYSg2Jxtwo0Juk=
Subject key identifier: FD:FF:90:EE:31:C9:3C:CB:6E:64:91:88:1D:8D:AA:82:1E:DE:B8:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0948
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_f-Q7jHJPMtuZJGIHY2qgh7euEo.roa
Signing time: Mon 19 May 2025 11:08:11 +0000
ROA not before: Mon 19 May 2025 11:08:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 11:08:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FDFF90EE31C93CCB6E6491881D8DAA821EDEB84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:be:e0:34:e0:01:7c:d6:4b:99:da:15:00:
a1:89:38:17:f4:00:3d:34:d2:ff:dc:26:4b:d7:54:
cb:5a:d5:d9:2c:24:5b:34:8e:66:9e:f4:e6:cc:55:
81:54:2b:af:00:c5:e1:d1:88:a2:6d:40:bb:44:10:
46:01:1b:3f:ee:65:53:2b:3e:71:c4:98:2d:9a:c6:
35:d4:9e:ed:5f:d5:c5:c1:42:0e:09:52:58:20:da:
33:2a:da:d7:c4:fb:1a:97:ef:55:5a:d1:42:cf:6a:
72:8a:f6:20:01:a0:10:40:12:3e:46:85:09:5d:17:
1c:a1:dc:90:91:42:73:65:73:8d:e8:9e:73:b3:2a:
86:18:f4:c6:ee:f8:15:ba:db:cc:18:5e:23:e1:00:
fa:2d:5f:90:be:c9:6c:91:5d:fa:c8:b6:2c:f1:f2:
0c:ca:cd:3d:26:12:fd:70:eb:10:19:76:64:f7:f0:
30:e2:71:6d:c6:6d:88:60:9f:05:a0:33:48:91:1e:
c1:fd:2b:6a:7d:e6:d9:38:d1:d8:b1:f5:d5:22:94:
78:1e:d2:f7:0b:b4:d1:cc:2c:a2:ee:2d:16:e0:39:
09:28:52:34:11:04:cb:57:ae:7e:bc:9d:dc:31:39:
c7:39:94:4b:87:ec:b3:90:4d:b0:a4:8f:b0:cc:90:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:90:EE:31:C9:3C:CB:6E:64:91:88:1D:8D:AA:82:1E:DE:B8:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_f-Q7jHJPMtuZJGIHY2qgh7euEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:4f:87:36:3b:b7:c9:2d:31:6b:5b:f0:59:5a:84:b6:73:92:
a4:2a:19:44:33:10:12:2f:05:06:26:91:95:d9:a9:2e:e9:aa:
16:c1:4f:fa:1d:e4:34:9c:bd:9d:52:ec:ca:0e:b7:a8:4f:aa:
69:25:02:93:66:a5:d9:e8:b8:31:fc:1b:6d:63:07:0a:da:1f:
b6:ea:4d:d9:60:a5:34:91:de:86:87:99:43:36:73:1e:a5:be:
48:26:6f:c1:ab:f3:40:de:55:1d:1c:8f:f4:b4:85:1f:9a:e1:
cb:41:48:ab:ed:ad:4f:39:06:7e:4c:1d:9d:2e:d8:32:97:8c:
0f:29:ab:4c:b0:5f:2c:45:64:68:b9:cb:43:1a:d1:b7:b5:fb:
8d:0a:d0:f4:4f:27:4d:39:ff:23:13:67:42:ee:60:56:66:ad:
04:43:2f:13:5b:55:71:c6:04:f5:5e:a6:9b:5a:92:98:ce:0c:
7c:9f:af:44:3a:19:ff:59:05:17:76:97:83:6d:ec:cc:24:bc:
95:ee:4f:75:69:27:e6:83:6f:40:de:56:ed:3d:55:96:4d:6c:
c4:d6:68:0f:1d:15:2a:3a:f8:8b:4d:ea:7e:98:46:ae:9a:ad:
6a:72:82:23:30:1f:18:b9:34:21:76:46:93:dc:00:fc:2c:ac:
d7:6a:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:56 2025 by rpki-client