Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qUzjhidXZDSMAcSWecUSAIaXLec.roa
File: qUzjhidXZDSMAcSWecUSAIaXLec.roa (raw, json)
Hash identifier: YUWBusEcWBm5m0TrtCoZrWwXVfzaxWQDdzzZsfxvWvo=
Subject key identifier: A9:4C:E3:86:27:57:64:34:8C:01:C4:96:79:C5:12:00:86:97:2D:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C40
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qUzjhidXZDSMAcSWecUSAIaXLec.roa
Signing time: Fri 23 May 2025 10:08:26 +0000
ROA not before: Fri 23 May 2025 10:08:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 10:08:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A94CE386275764348C01C49679C5120086972DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:98:bb:09:1a:69:45:cb:4d:01:7b:64:af:
d9:3d:7d:7e:7e:6a:ca:16:57:ac:2e:86:c2:44:81:
59:9b:3c:dc:d2:ac:20:51:36:e6:98:a4:4a:f2:86:
dc:2e:de:ab:66:f8:04:b4:2d:97:e2:58:6e:7f:68:
7c:18:ee:2d:4d:86:45:14:86:5e:a1:d3:b2:cb:8d:
2c:34:31:de:b7:7c:72:b2:3e:1c:d4:dc:80:46:3c:
26:aa:51:ec:ec:c7:12:d6:5c:39:23:93:dc:1a:9c:
21:ea:6d:90:d3:5c:29:81:06:d0:0b:fc:dc:ef:62:
68:07:b2:88:30:f8:cd:cf:07:61:9a:89:88:73:7e:
66:69:37:46:3b:d4:4e:4f:3d:fe:a1:9e:23:61:54:
a7:ac:45:fc:3a:18:f6:da:99:16:be:21:d8:49:f0:
54:3e:2e:94:86:e1:92:71:b1:c4:fe:1d:f2:09:86:
51:15:d4:81:bc:64:ce:6c:ef:08:f9:b0:af:b6:99:
b1:45:1b:45:17:87:96:a4:3a:ea:3a:49:ac:1d:58:
ed:e4:7d:c1:f7:6b:92:de:cf:d9:d3:4e:21:3f:73:
61:45:6e:20:e0:f6:9d:dc:2c:91:09:45:9f:a3:82:
8b:c3:6f:9a:7d:0c:a0:7b:3b:ed:28:5d:c2:3a:fc:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:E3:86:27:57:64:34:8C:01:C4:96:79:C5:12:00:86:97:2D:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qUzjhidXZDSMAcSWecUSAIaXLec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:37:8e:9e:3e:63:b1:08:26:b1:8e:a3:32:15:32:18:d8:63:
9a:63:c4:84:dd:33:0a:e9:6c:34:6d:bb:84:11:fc:5e:39:f7:
06:8a:44:6c:57:e5:10:10:51:4e:d4:f3:25:b7:7f:b1:49:1c:
8e:a5:40:67:d3:f2:27:85:06:24:80:a5:0f:3b:77:8a:c0:41:
07:af:0b:9f:a1:ed:e7:d7:9b:d9:f9:f5:e8:b6:6f:4b:fe:2b:
9f:43:93:0e:c1:ee:06:f7:fa:eb:bc:37:d4:50:b6:c6:f3:10:
2d:d5:b7:ac:81:72:7a:5b:d9:0b:c0:d5:4a:e1:da:25:45:f3:
fc:d8:57:ca:48:34:9e:f3:38:c8:53:51:37:66:60:cd:de:b5:
88:1f:05:c0:27:b5:cf:ae:1d:34:c1:87:58:9c:24:2e:90:e3:
f7:3e:ed:b3:52:67:5d:3f:de:29:67:34:87:42:92:07:72:26:
1a:01:38:2c:d7:09:db:e8:83:bc:df:74:e9:16:6f:25:88:59:
b5:70:c0:13:41:d3:9b:3a:36:d7:98:7f:1a:0e:aa:00:19:6e:
d4:b3:a2:ae:67:74:b8:2e:54:f1:a9:ef:0a:53:ea:c2:d9:f8:
17:08:e4:3a:57:b5:0a:aa:4f:23:a9:43:c9:eb:39:e5:86:cf:
62:5d:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:20 2025 by rpki-client