Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lgPvYOyFg0igV-yudVdSDm9d6uw.roa
File: lgPvYOyFg0igV-yudVdSDm9d6uw.roa (raw, json)
Hash identifier: yg1lwTE/G0MnkExS8W7YOG/aoIxJK9uhhFDzp7LnVyc=
Subject key identifier: 96:03:EF:60:EC:85:83:48:A0:57:EC:AE:75:57:52:0E:6F:5D:EA:EC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23C0
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lgPvYOyFg0igV-yudVdSDm9d6uw.roa
Signing time: Tue 24 Jun 2025 05:41:57 +0000
ROA not before: Tue 24 Jun 2025 05:41:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9152 (0x23c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 05:41:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9603EF60EC858348A057ECAE7557520E6F5DEAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:80:eb:b6:42:9f:22:0f:8e:89:3d:cc:cf:
f0:ff:f7:e3:73:45:b2:3f:48:af:8d:b5:8f:4d:c9:
d9:fd:bd:ba:f8:02:f4:40:1b:99:e4:8a:87:bd:55:
73:d4:90:fc:12:5e:28:d5:14:ca:a6:17:54:3c:b3:
30:94:e4:4e:dc:a8:21:25:38:2e:b9:42:1f:99:56:
91:f7:00:f3:90:32:ac:3f:2c:dc:1a:57:17:ec:70:
a5:d1:4d:22:2f:9a:ab:b4:54:f1:87:3d:9e:e0:af:
97:32:6e:b9:9b:cb:01:ee:b1:64:2e:21:a5:1f:ac:
1b:22:a4:c1:c9:ae:33:df:ec:28:2c:7c:3c:75:9c:
ce:51:84:64:e6:35:f2:8f:4a:cd:6e:a0:21:9a:d0:
c6:7d:17:a9:00:4f:65:cc:da:c7:39:6c:0d:85:7d:
dd:3d:ff:01:8b:c2:d7:b2:13:78:6e:a3:f9:63:ca:
ca:23:10:14:3a:21:20:f2:7d:0a:64:96:a7:61:5b:
b8:90:11:79:3e:6b:95:6c:f2:0a:34:c5:27:a9:4e:
af:73:36:9c:f5:8e:9d:dd:b4:83:c5:a7:1a:27:31:
06:84:f4:01:16:dc:3c:5c:aa:1a:6a:29:89:b0:98:
34:1c:3c:45:6b:f1:cf:b9:c2:70:28:d8:68:8a:58:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:EF:60:EC:85:83:48:A0:57:EC:AE:75:57:52:0E:6F:5D:EA:EC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lgPvYOyFg0igV-yudVdSDm9d6uw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:20:b7:bd:02:ef:00:cf:e9:e7:44:c3:fe:dd:87:85:8c:20:
42:1d:74:6b:1c:fc:ed:f9:f4:7c:4c:c4:3c:a7:e6:eb:5f:7f:
1b:e5:16:25:98:aa:28:35:8e:c4:85:09:9d:29:f6:c1:11:92:
75:a7:da:44:8e:66:cf:ad:e3:f7:67:90:0c:9f:cb:c8:e2:ae:
2a:8c:22:b3:ff:2e:60:75:73:64:65:2f:c1:be:1f:fa:1f:4c:
56:90:f7:55:52:40:16:5e:dd:ad:e6:39:32:6d:18:87:0a:56:
a4:a9:00:35:59:21:5f:55:fb:7a:bd:cb:06:ae:1d:4e:18:81:
57:d3:17:b3:e3:37:8d:f8:b3:27:15:66:03:a9:43:e6:6c:51:
00:91:68:f4:a9:74:cd:db:d9:7f:63:23:6b:b6:3d:8f:8e:32:
9d:d2:ea:7b:71:07:fd:37:5d:da:4e:7f:07:28:db:59:07:d1:
c6:24:96:02:f2:ea:35:4d:76:49:8e:4b:b6:f6:f5:70:e2:98:
a2:bc:c0:ef:d0:1c:e1:24:50:33:32:29:36:3e:b8:0b:74:0a:
25:c4:a5:93:28:83:83:ab:0e:dd:f9:c5:c9:5f:11:0a:f1:a8:
e3:f9:1d:e9:a9:0c:6b:b6:6e:5e:8a:9b:8a:6f:10:d1:98:36:
43:fb:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:43 2025 by rpki-client