Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jJxnT3E_QyMZuSNOAtrQwLkzRek.roa
File: jJxnT3E_QyMZuSNOAtrQwLkzRek.roa (raw, json)
Hash identifier: sQToNnS3+yHlxzXTdynL+kC6hywW7GYTTAdN2BnypIk=
Subject key identifier: 8C:9C:67:4F:71:3F:43:23:19:B9:23:4E:02:DA:D0:C0:B9:33:45:E9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EE0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jJxnT3E_QyMZuSNOAtrQwLkzRek.roa
Signing time: Mon 26 May 2025 22:08:47 +0000
ROA not before: Mon 26 May 2025 22:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3808 (0xee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 22:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8C9C674F713F432319B9234E02DAD0C0B93345E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:73:89:f1:58:02:19:59:30:6a:a1:86:57:
0c:98:ed:eb:4d:e3:62:b4:a6:4a:7f:7d:51:2c:03:
5d:43:3a:3a:01:80:84:6c:42:cd:1b:f0:1a:35:72:
91:c3:cb:06:ac:fe:63:57:8a:f1:d4:53:fe:58:cc:
41:3f:ab:cf:8f:3a:c9:d6:b3:e9:b8:9a:8d:a0:4f:
c4:fc:54:d2:9f:9c:7c:8d:f6:b2:16:60:8d:73:c9:
4a:41:b0:10:54:f8:e8:e3:fb:f9:8c:49:5f:57:26:
98:8c:0c:79:ac:5c:a9:03:28:e5:a7:42:16:de:2f:
f1:7a:1b:06:8f:16:2e:fe:a1:d9:62:90:da:26:0d:
2a:ac:04:19:66:de:7a:f7:d0:2f:aa:2c:11:36:a9:
45:39:06:ca:c6:cf:f4:ad:10:87:e5:36:65:8e:c3:
cf:b8:3f:19:b4:07:72:43:a1:64:13:c5:2b:87:58:
b2:16:e6:20:97:e3:75:a2:e6:06:d6:a0:b6:e2:d4:
f7:29:ad:fa:95:65:f5:72:8d:8e:bf:22:36:3f:19:
84:d6:90:e0:12:18:22:00:25:ce:76:d3:58:0b:82:
45:91:44:1f:29:69:6e:25:87:52:22:83:c5:91:b8:
3f:d7:c9:5a:20:18:3f:81:9a:57:7a:82:95:fb:db:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9C:67:4F:71:3F:43:23:19:B9:23:4E:02:DA:D0:C0:B9:33:45:E9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jJxnT3E_QyMZuSNOAtrQwLkzRek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:49:a9:8e:7f:63:10:57:dd:8a:f7:c9:4e:ed:48:99:de:cb:
99:d9:e6:a0:8c:f4:c2:40:27:ff:d5:8f:98:99:9e:10:4a:65:
e6:03:50:ef:dc:ff:4e:48:14:c3:77:e9:bb:74:71:05:61:f4:
b0:d1:04:71:98:87:65:86:2a:2c:fe:8b:b3:a2:e3:16:30:c2:
b8:7f:33:a6:44:b2:75:a3:c8:36:ea:39:1a:28:34:98:ed:4a:
c7:bb:36:41:9e:a0:c5:2e:4d:f0:c2:32:5c:10:11:20:da:f6:
69:03:dd:d2:d7:a7:fe:f2:da:12:29:1b:91:cc:51:e2:00:39:
e0:5a:3d:9e:6a:7a:f0:88:9e:c1:87:f5:11:ad:68:f7:19:5b:
75:4a:9c:5e:e4:5e:34:c8:66:cb:1e:61:c1:7d:c7:27:bf:8e:
02:8d:1f:62:32:d3:9d:89:6d:71:56:a7:c6:66:56:77:b8:8b:
6b:de:aa:fe:48:8b:ac:9c:d5:46:91:1e:8a:84:c1:6d:8a:72:
71:4d:26:0a:fa:1e:87:36:d9:96:3a:56:c2:b9:00:2c:e0:ce:
d9:44:41:fb:6e:95:69:0a:32:80:ce:1f:36:b2:13:ad:b8:33:
cf:08:fe:c7:97:50:e0:1f:66:6c:88:64:51:95:89:a2:1a:db:
01:fd:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:58 2025 by rpki-client