Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w_k0xT35qUxjKbQv1T3GHysVXo4.roa
File: w_k0xT35qUxjKbQv1T3GHysVXo4.roa (raw, json)
Hash identifier: l96xH2jdnZL65zbDF7ywNQo7dGBXrr52YW0HK8j6pYQ=
Subject key identifier: C3:F9:34:C5:3D:F9:A9:4C:63:29:B4:2F:D5:3D:C6:1F:2B:15:5E:8E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w_k0xT35qUxjKbQv1T3GHysVXo4.roa
Signing time: Tue 03 Jun 2025 23:09:15 +0000
ROA not before: Tue 03 Jun 2025 23:09:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 23:09:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3F934C53DF9A94C6329B42FD53DC61F2B155E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:0a:f1:2c:02:32:7c:a9:9e:b7:96:73:9d:
29:8c:f7:a9:fb:c2:c5:8c:1c:b0:2f:dd:b2:87:e5:
60:20:42:e3:3f:a3:9d:ab:a0:6f:ad:9f:9b:1a:98:
de:1a:c0:54:cc:da:78:e5:47:31:28:cc:bb:eb:e3:
0d:17:df:05:04:bf:66:fb:fc:ff:60:43:83:e3:7e:
36:79:d9:5d:fe:99:be:b9:dc:0f:5b:53:2e:a8:fe:
be:e0:52:d9:74:8e:fe:22:dc:bf:69:02:d8:df:30:
7e:b7:eb:7a:e9:ee:a4:58:c4:aa:38:da:c0:2a:d5:
df:c2:a4:ad:8c:b7:33:f1:4f:47:a7:2a:0b:7b:cc:
25:64:1a:b9:50:25:b5:99:45:0d:b0:eb:d8:b2:bf:
28:21:5d:c1:39:2b:4d:d2:03:cb:4e:b1:5c:13:cc:
90:70:bc:91:fa:9e:7b:97:82:3a:93:76:10:d9:f4:
74:6c:0b:49:4e:38:8f:1b:ac:ce:40:d9:e6:46:47:
36:0e:fc:45:07:12:05:7c:78:f9:63:3c:98:18:a8:
d6:6d:8a:5d:2d:b7:66:6f:71:d3:06:14:84:8d:84:
4d:77:3a:62:03:24:aa:4e:eb:ac:bc:01:78:5d:e1:
1c:01:03:9a:64:e4:96:8b:d0:53:37:28:f1:3b:52:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:34:C5:3D:F9:A9:4C:63:29:B4:2F:D5:3D:C6:1F:2B:15:5E:8E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w_k0xT35qUxjKbQv1T3GHysVXo4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:48:f2:d2:f7:47:0e:26:3d:e5:3c:53:b3:21:dc:30:07:6a:
ea:11:ce:43:cf:8f:a6:c0:6c:97:d4:c8:68:62:73:80:f2:9b:
19:5f:f1:76:6f:ba:97:be:d3:27:9f:d1:4e:c3:b6:92:a4:ff:
06:dc:1a:9e:15:96:08:b6:ca:7d:1e:ed:2f:69:e7:97:a4:ea:
0e:82:28:7f:4a:cf:9d:ad:24:93:13:29:30:33:ee:78:a8:68:
54:cf:d6:f9:e4:a7:9a:d6:74:45:03:24:ec:24:39:a3:15:b2:
d9:4a:54:2b:f4:79:12:e5:24:1d:70:27:9b:1c:c6:09:5d:88:
42:30:fa:9a:09:d8:d0:b1:59:ef:20:0c:12:4f:54:eb:6c:40:
5f:fd:c4:43:61:b4:55:df:03:1c:9b:50:17:75:39:61:2b:83:
03:38:9d:b6:80:c4:af:12:8d:e3:08:3a:38:da:6a:28:71:d3:
f7:8c:51:50:7d:69:ec:f5:25:1c:ba:d4:f0:77:70:b7:97:18:
e1:25:73:a1:09:4f:2e:84:dd:92:fa:60:ae:d7:04:c0:01:c0:
21:55:34:8b:70:df:82:43:00:de:79:ee:59:8f:cc:e6:ed:28:
dd:f0:c0:62:14:74:65:7f:fe:eb:e9:61:50:5d:a6:e2:66:c3:
4c:96:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:15:15 2025 by rpki-client