Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/boQUz1Fp4c1b3oADJnHDGLH0SLs.roa
File: boQUz1Fp4c1b3oADJnHDGLH0SLs.roa (raw, json)
Hash identifier: U30VJtUFwnZ0Xx5Aoko9s3bok72CDgK0vakcoSDn5h4=
Subject key identifier: 6E:84:14:CF:51:69:E1:CD:5B:DE:80:03:26:71:C3:18:B1:F4:48:BB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B1C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/boQUz1Fp4c1b3oADJnHDGLH0SLs.roa
Signing time: Wed 21 May 2025 21:38:29 +0000
ROA not before: Wed 21 May 2025 21:38:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 21:38:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6E8414CF5169E1CD5BDE80032671C318B1F448BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:a3:10:e1:3b:73:9f:87:82:8c:da:61:b8:
e5:a9:80:17:92:ef:a1:69:a8:8a:b8:09:49:16:1f:
d0:15:69:71:f8:95:6a:ba:d7:eb:fe:ba:05:ed:de:
5c:36:b2:2b:74:f5:8c:37:d1:47:7b:9a:81:40:b2:
9d:4a:e4:81:22:d6:33:53:cd:f0:2e:1b:72:26:c8:
a2:cf:0f:21:98:55:92:a7:a6:53:39:0b:11:98:16:
c1:73:a8:ca:22:df:76:b3:41:4f:87:2b:61:e1:b3:
f9:42:8a:dd:bd:b5:4d:a2:31:14:49:7c:be:17:c0:
ea:e4:1d:9d:a6:1d:22:8a:05:47:d3:ec:dd:da:93:
bb:d1:3c:b6:f8:11:ad:e5:1b:f7:ec:9d:88:7e:d7:
55:01:25:0a:d1:54:73:46:39:54:0e:82:63:e7:58:
a7:83:9f:c3:2c:4a:e1:84:c3:43:04:e5:c9:74:e8:
ff:75:e0:93:0a:49:ad:3e:00:64:6a:c3:54:4a:86:
98:7c:bf:c2:cc:78:30:47:40:5f:64:99:7c:aa:22:
bc:38:90:2c:fd:a2:e7:3f:76:45:fb:bf:5a:23:41:
64:6a:52:e5:57:53:e4:10:27:75:2d:87:4b:96:91:
6e:eb:bd:eb:af:a2:bc:d4:14:f8:fe:6b:79:90:0c:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:14:CF:51:69:E1:CD:5B:DE:80:03:26:71:C3:18:B1:F4:48:BB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/boQUz1Fp4c1b3oADJnHDGLH0SLs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:05:17:2f:66:4f:97:db:19:82:0c:57:d2:4c:a4:5d:89:75:
62:49:88:5e:8e:62:1e:41:94:97:4c:69:eb:98:5f:23:fa:f7:
ee:41:23:ba:29:82:ba:0e:c6:10:4d:c2:74:9b:e5:07:a7:04:
aa:77:f6:ab:43:7c:b5:f7:0a:94:46:16:9f:68:a6:7e:89:83:
66:9a:f1:94:5d:6e:94:c3:e6:34:41:04:ed:34:d8:bf:a4:91:
a5:01:a7:75:b6:24:61:1a:c4:d3:78:29:83:25:25:e0:d5:02:
6d:ee:ca:b1:c2:63:40:fd:a6:4f:47:64:1e:bf:ff:b7:97:5e:
be:3f:01:59:8b:6a:69:9a:d5:0b:6b:91:dc:10:11:79:ed:c7:
2f:10:b8:83:c8:e1:d3:70:b8:f3:34:d9:c0:ef:27:52:56:12:
ed:70:3c:27:9d:f9:80:ea:7e:14:91:48:26:76:78:ad:7a:05:
77:94:d8:fa:9e:9c:a1:65:14:8f:1c:b8:fe:5b:e2:c2:2c:be:
3c:64:43:ec:0a:17:50:9b:1d:8e:1c:c3:af:72:ec:29:ed:40:
39:c3:2a:9c:c3:f6:54:d4:ae:5b:9b:e1:59:a7:87:1a:1f:d3:
8c:3b:2f:1d:3d:eb:2d:cd:ff:11:73:4c:84:48:67:ff:05:b6:
c4:2d:57:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:09 2025 by rpki-client