Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mNrhQ_3JBXPMohn4me5hvYv3dCA.roa
File: mNrhQ_3JBXPMohn4me5hvYv3dCA.roa (raw, json)
Hash identifier: AlmKougHuDUlbCvoIqY6icOFfI07jd/sVe64bMm0XHY=
Subject key identifier: 98:DA:E1:43:FD:C9:05:73:CC:A2:19:F8:99:EE:61:BD:8B:F7:74:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 087C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mNrhQ_3JBXPMohn4me5hvYv3dCA.roa
Signing time: Sun 18 May 2025 09:38:08 +0000
ROA not before: Sun 18 May 2025 09:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 09:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=98DAE143FDC90573CCA219F899EE61BD8BF77420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:b8:c7:45:d2:3c:87:48:fb:c1:da:f1:2a:
71:18:85:59:6b:17:28:2d:ab:f8:89:5a:f3:3a:14:
35:7b:e5:57:d6:0f:e0:19:62:c1:62:0d:bc:50:0b:
66:69:11:19:79:c4:15:13:9c:4a:06:e0:84:27:26:
a2:6a:fb:ab:27:48:1d:34:d3:d7:0c:ab:04:5b:01:
b7:c4:6f:10:99:38:1e:96:be:26:0f:43:cb:e6:e3:
10:c2:fc:cb:a7:11:26:93:da:d5:fc:8c:1a:b3:be:
02:37:d0:da:f3:97:78:ec:e5:44:94:03:4d:75:14:
6e:50:7b:6d:ed:fb:9d:a0:f6:dd:9f:ec:7b:3d:30:
cb:4d:dc:96:a6:a5:0e:1c:fe:af:b3:bf:9a:eb:cb:
e9:0b:0a:80:b8:f7:d0:6e:e6:50:d4:20:d6:b0:19:
46:75:4a:55:bb:e8:f2:aa:eb:8b:49:e0:95:8f:08:
ec:2e:0a:11:48:b5:30:93:9b:ca:74:da:e7:79:b4:
8a:ce:c2:09:01:8d:51:13:ad:6d:36:ba:bb:d7:c1:
6a:bf:6f:0f:0c:55:82:ed:03:c0:4e:8b:25:b7:87:
f3:15:5b:3f:43:b6:30:b3:e9:df:3c:03:ea:0a:ed:
b6:3f:a4:5f:1e:1b:a1:e2:72:da:ce:05:5c:64:d6:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:E1:43:FD:C9:05:73:CC:A2:19:F8:99:EE:61:BD:8B:F7:74:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mNrhQ_3JBXPMohn4me5hvYv3dCA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:51:85:a6:8b:bc:6f:38:12:87:5b:45:dc:b8:4a:cb:93:4d:
ba:a1:d3:0e:16:7d:e5:6f:23:e4:6e:5c:6f:6e:90:85:d0:09:
c2:fe:58:1b:54:2b:71:b1:d3:1b:c9:a2:ad:5a:0d:d2:d6:c2:
78:74:c7:52:67:ab:a6:27:f0:88:b3:76:be:86:d0:27:37:6b:
09:b1:22:15:dd:e6:80:f8:09:69:e4:ad:56:ad:66:9b:ab:08:
81:63:a9:d4:54:9a:25:ec:66:d9:46:7e:ef:ca:b8:72:1a:f1:
4a:7a:9c:77:b0:86:83:cb:1b:fc:91:a0:34:55:c8:f4:49:33:
ac:56:92:2d:3e:93:2a:bd:89:14:e8:d5:2e:fb:55:02:27:06:
8a:30:ee:77:7a:43:7c:18:45:5a:5f:16:ee:54:10:ad:bd:c8:
d5:16:83:05:3e:4e:d1:1c:13:2e:0a:9f:aa:2a:ce:35:2b:bc:
8d:38:2d:69:5c:6e:93:3a:5c:ca:00:b9:22:cc:4d:e3:70:2f:
a0:3e:0c:9c:47:ae:e4:dd:5b:32:59:ce:fe:5f:8c:e2:0d:c9:
90:dd:e0:58:4f:0f:87:1f:8c:06:fa:40:67:d3:6b:e9:7f:31:
e7:09:96:62:fd:8d:d7:11:25:c4:67:69:0b:e7:30:c4:c2:0b:
26:cd:4f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:09 2025 by rpki-client