Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lms8RGCq1PXeFekvKCw-pQMmK5Q.roa
File: lms8RGCq1PXeFekvKCw-pQMmK5Q.roa (raw, json)
Hash identifier: 38p1cGrNmtMKxjIfOPu1Qf83qGP7MIHSu8fTRz4P79g=
Subject key identifier: 96:6B:3C:44:60:AA:D4:F5:DE:15:E9:2F:28:2C:3E:A5:03:26:2B:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 070C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lms8RGCq1PXeFekvKCw-pQMmK5Q.roa
Signing time: Fri 16 May 2025 11:38:10 +0000
ROA not before: Fri 16 May 2025 11:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 11:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=966B3C4460AAD4F5DE15E92F282C3EA503262B94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:12:87:35:6a:97:7f:19:4b:24:cf:44:24:
15:88:d1:c8:65:86:f8:e7:01:d2:80:cf:b8:49:14:
5f:b7:9a:c9:1e:15:0f:73:b2:0e:74:5f:c0:43:74:
3a:3c:bb:f3:40:17:23:95:20:20:d7:68:e2:88:62:
e7:51:ef:03:90:f9:9c:25:24:3c:94:4c:b5:c6:90:
2a:ec:bc:f5:46:fb:6d:9a:f6:07:79:90:ad:5a:db:
b3:27:b7:1c:68:d5:98:4d:cd:34:83:61:49:b5:ea:
52:f7:35:c4:ac:f2:5e:e1:d4:54:6c:80:8f:83:d1:
27:97:e0:16:12:7f:f7:83:ce:00:27:46:df:6b:ad:
c7:28:7f:e7:50:87:ec:6f:95:0a:54:e4:b5:4b:01:
54:cb:da:2d:09:db:cd:17:0c:cc:24:ca:7e:54:37:
02:2d:a7:45:c9:66:40:2b:c2:ad:bb:7c:4f:a1:ba:
ba:8f:dd:5a:4c:8d:9e:2d:6c:51:46:56:0e:d7:4f:
2c:f0:c4:f6:71:1f:f3:a2:39:04:dc:3f:7b:c5:78:
e2:ab:b5:19:2a:b6:ca:43:b7:12:72:10:8a:7e:f4:
51:9b:c4:bc:4c:1b:cf:b5:8f:be:2a:b3:20:fb:90:
df:a8:50:17:f3:02:c4:0e:fd:ac:cc:b9:90:e5:23:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:3C:44:60:AA:D4:F5:DE:15:E9:2F:28:2C:3E:A5:03:26:2B:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lms8RGCq1PXeFekvKCw-pQMmK5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:7c:af:cc:55:d2:de:bc:d3:52:94:2a:67:48:d2:d2:f2:6e:
57:d9:15:6a:b9:c1:49:70:6e:e6:2a:d7:3a:33:38:1e:1d:be:
cd:2c:23:d7:a6:a1:69:34:cc:ba:23:1d:b1:9d:08:61:af:23:
2d:55:ce:2c:26:f2:df:37:ef:26:bf:f2:04:3e:73:d1:8b:d3:
9c:26:4a:01:86:87:26:88:4d:3c:cc:b8:98:bf:f9:db:98:85:
a6:24:94:6a:27:0c:0b:41:73:97:d7:18:e5:6a:50:46:98:99:
74:a9:1b:7a:b1:c8:47:90:94:b5:db:90:a3:58:03:be:e2:98:
be:ba:54:33:f3:39:0b:66:3c:1c:4d:e0:23:ed:cf:35:88:b0:
92:04:c7:56:08:61:ab:18:0c:ef:7a:ed:46:0b:f9:90:42:26:
a6:f0:ac:0b:51:6f:ea:61:ed:e3:f4:0c:78:50:66:c7:45:05:
26:18:ec:3e:ee:dd:d1:b0:69:69:84:bf:a2:d7:de:e8:87:62:
70:5b:42:d1:7d:af:df:59:f3:24:66:2c:33:e8:5e:13:5b:51:
d7:9f:93:b5:9b:66:03:7d:95:3b:ab:ff:35:76:2e:b9:f1:4e:
9b:d8:1f:ef:36:8d:6f:21:0e:87:c0:d5:f3:12:ae:96:83:26:
e4:69:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:13 2025 by rpki-client