Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/x0P-ecRAuVIC5D_KGpJryYqywsU.roa
File: x0P-ecRAuVIC5D_KGpJryYqywsU.roa (raw, json)
Hash identifier: 1UPl4OAYB8YBFKMS23IC4B/N93R5jYv38jLA3FKFnq0=
Subject key identifier: C7:43:FE:79:C4:40:B9:52:02:E4:3F:CA:1A:92:6B:C9:8A:B2:C2:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B9C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x0P-ecRAuVIC5D_KGpJryYqywsU.roa
Signing time: Thu 22 May 2025 13:39:04 +0000
ROA not before: Thu 22 May 2025 13:39:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 13:39:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C743FE79C440B95202E43FCA1A926BC98AB2C2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:f6:1c:eb:9e:a1:7f:bc:39:b4:b4:e6:a3:
36:3f:f1:18:83:1a:5b:07:50:15:23:cf:23:23:f3:
da:25:70:23:ce:c2:5c:ef:89:85:d3:c5:6e:70:14:
66:21:35:70:06:fb:b6:7b:3b:a8:6c:17:70:aa:6f:
e3:48:e4:0b:3a:ae:a8:41:05:c2:9a:a4:58:5f:57:
ae:6d:26:0b:7f:21:d3:ba:fd:2d:a8:2e:a3:61:5c:
04:25:aa:78:8b:0c:f2:db:4d:4d:c0:36:91:33:cd:
b8:bc:a2:cb:41:2f:5c:23:29:be:61:21:98:5e:9a:
0f:80:9d:5c:80:56:a9:be:5b:cb:85:96:63:00:d0:
60:5d:ff:2f:c7:23:95:3c:64:83:fb:67:fe:29:92:
ee:c8:86:b5:a8:21:6f:7c:cb:41:26:3c:1e:56:80:
9f:e5:82:70:37:84:c1:01:c3:cc:14:50:f3:e7:01:
80:da:9e:71:ac:0b:fb:ea:76:fe:53:fb:67:4c:07:
34:57:cc:dd:2b:d9:4b:3a:c4:75:f9:93:a1:f9:ef:
3b:b1:e2:be:62:ec:b2:61:ea:25:16:44:ca:ee:82:
f9:19:1b:39:82:43:71:a0:73:b2:f0:10:eb:50:a9:
3a:60:40:0b:22:ca:ea:9c:fa:ed:78:eb:3c:bf:38:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:FE:79:C4:40:B9:52:02:E4:3F:CA:1A:92:6B:C9:8A:B2:C2:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x0P-ecRAuVIC5D_KGpJryYqywsU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:57:4d:5c:04:15:64:37:e2:e7:0a:a0:ba:86:99:07:cd:57:
8a:36:bf:41:e8:06:80:b2:04:84:1a:69:40:67:14:b6:a9:aa:
a2:67:67:52:c5:d9:35:f6:98:3d:49:ab:97:2c:96:0f:86:38:
e4:24:b0:cb:48:7d:40:f5:14:4a:6e:fd:65:79:6e:fa:cc:3e:
e4:5f:87:bc:93:71:6a:46:29:89:32:df:17:0f:ab:08:1e:f2:
13:3d:47:b0:10:b4:5a:e5:d7:b1:6f:f9:3d:fe:c2:b2:90:b7:
4a:af:1b:47:06:45:88:32:65:17:42:4c:b7:72:26:a0:fc:c7:
4c:d7:81:1e:dd:4f:cf:65:6c:9c:34:51:f2:97:b0:b2:3e:86:
1f:98:af:7f:76:30:20:91:9b:2e:ba:e4:10:57:e4:56:53:d6:
fe:e9:bb:f5:4b:4f:70:c7:99:0d:c9:d5:e7:6c:be:66:14:b9:
4d:e1:ae:e9:c9:26:36:e0:2c:7e:bf:39:6f:84:c9:b5:c6:e7:
d4:14:f5:dc:43:0c:d8:b0:24:69:9f:44:d8:81:a5:68:ac:22:
0e:dc:73:21:d3:4b:2a:ad:30:5a:fc:09:b1:57:90:32:a0:1a:
d2:af:91:48:ca:ac:86:71:47:c4:14:ed:d4:5f:e7:56:c6:cf:
ca:7f:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:31:36 2025 by rpki-client