Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iu-ygN64I0UJUdakhXmiHeQ8AOQ.roa
File: iu-ygN64I0UJUdakhXmiHeQ8AOQ.roa (raw, json)
Hash identifier: RzCkHhQyiKYg5aVNMULRfZjxClVsmqhk4Ncmz0EwJ3c=
Subject key identifier: 8A:EF:B2:80:DE:B8:23:45:09:51:D6:A4:85:79:A2:1D:E4:3C:00:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0554
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iu-ygN64I0UJUdakhXmiHeQ8AOQ.roa
Signing time: Wed 14 May 2025 04:38:10 +0000
ROA not before: Wed 14 May 2025 04:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 04:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8AEFB280DEB823450951D6A48579A21DE43C00E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:d8:2e:cb:83:f5:5b:2e:5d:8c:79:8b:d3:
34:1a:ee:c2:da:ad:53:ee:bc:52:a1:5e:5d:87:a3:
b7:1f:c2:94:27:b0:9f:59:58:0f:d5:9e:f3:58:d5:
68:19:41:22:fc:49:b7:c1:29:80:83:3c:cb:86:d7:
fa:14:25:66:d6:24:01:e2:cb:15:af:30:b9:2e:cf:
b5:9b:c2:ba:01:53:a0:84:89:6d:89:90:39:3b:07:
75:0b:68:c5:e1:ce:98:51:07:ca:13:c2:02:58:ad:
e8:77:fe:bb:c1:5f:1b:a9:37:b5:8d:ba:78:cf:68:
5c:39:32:6b:62:73:67:c0:3a:70:ba:0c:0b:1c:8e:
fe:20:26:4c:66:4f:bc:e2:bc:54:ca:e5:b0:f8:0f:
ae:85:22:b5:d6:f6:99:77:34:dc:b8:68:e3:0a:63:
ab:7e:f9:91:d9:bc:aa:df:f4:68:7a:2d:02:75:98:
f5:78:81:48:ff:54:83:3b:55:bd:c8:e2:c1:64:e0:
a8:28:0b:c6:8e:72:74:99:63:86:16:ed:6a:0b:2d:
0a:e2:15:5d:1e:06:80:2b:2b:48:eb:31:ff:79:a6:
bc:8b:8c:02:a0:39:be:23:85:1f:dc:f8:ec:42:92:
33:44:df:58:ae:01:95:2d:52:88:f1:0e:d9:0b:0b:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EF:B2:80:DE:B8:23:45:09:51:D6:A4:85:79:A2:1D:E4:3C:00:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iu-ygN64I0UJUdakhXmiHeQ8AOQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:21:e9:34:c0:0e:a4:e0:08:45:42:8e:ea:30:0d:9d:26:4d:
0a:5e:c2:a8:7f:87:ac:70:e8:6a:25:98:0d:ca:c2:6a:4c:25:
49:f0:78:a8:c8:b6:16:d7:0e:fc:54:d4:47:fb:07:06:08:65:
ed:90:2a:72:2c:cb:6d:56:cd:d1:b4:fa:87:0f:8b:c9:6a:ea:
e7:c4:b4:83:95:1b:1e:be:da:c9:49:83:f3:bd:81:af:b5:6d:
c3:df:4d:4e:f1:0d:dc:f3:6c:67:1d:a1:33:84:d8:54:7b:00:
71:8f:08:15:75:7a:0f:39:20:af:a9:77:79:79:fe:69:92:6d:
c8:db:20:e9:8f:b1:09:e7:f8:aa:97:76:15:39:d6:4a:3c:5d:
96:0c:fe:49:9a:e2:90:33:72:62:32:d2:0f:c1:a2:3e:aa:d3:
b9:4f:f6:20:59:56:7e:f6:d2:28:06:e7:c0:3f:20:7f:5a:9c:
f8:58:fb:9e:34:b7:3d:da:d7:dc:2c:d6:4b:ca:db:e7:06:bc:
37:a0:2e:58:7a:65:2c:e2:e6:9a:87:8a:e0:1c:be:0d:57:89:
9e:04:8e:f4:8a:c7:8b:a5:49:0d:29:09:a1:de:0c:eb:0c:81:
56:fb:42:98:03:64:8d:25:c9:2f:91:a9:1b:a4:d4:69:9d:02:
cd:d0:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:41:38 2025 by rpki-client