Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2rLh4YxGd892CoTx7CpFMwEzpVM.roa
File: 2rLh4YxGd892CoTx7CpFMwEzpVM.roa (raw, json)
Hash identifier: HAzR3ES22y/7F7DRm9cyp43DgbaBuYzipd7MgvE4zzE=
Subject key identifier: DA:B2:E1:E1:8C:46:77:CF:76:0A:84:F1:EC:2A:45:33:01:33:A5:53
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2rLh4YxGd892CoTx7CpFMwEzpVM.roa
Signing time: Wed 14 May 2025 23:08:02 +0000
ROA not before: Wed 14 May 2025 23:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 23:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DAB2E1E18C4677CF760A84F1EC2A45330133A553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:27:f8:81:9c:e5:ab:7d:f4:2b:63:0e:a3:
8c:b0:fd:4f:9d:2f:cb:98:49:a1:71:f8:7a:9f:67:
87:3a:81:73:a9:1c:b4:4b:19:31:a1:d2:ed:ab:73:
b2:66:f9:63:01:f3:8e:12:ea:2a:15:6a:24:61:ce:
73:7b:49:7c:c3:d0:c8:c3:7c:0e:41:fc:0e:cf:f9:
d0:c4:71:9d:b7:06:a6:43:88:39:41:3e:ec:e3:98:
18:f8:58:66:a0:3c:24:94:b7:95:1b:2b:12:82:37:
ef:91:20:d6:1a:6a:87:46:7f:05:f6:74:79:a2:32:
93:26:ef:5e:e3:bc:1c:e2:3e:d0:e5:a4:d8:5b:96:
e7:43:ec:db:7c:4a:26:05:7a:5b:eb:2a:bf:60:39:
a4:18:77:af:70:83:91:47:cb:89:72:8a:4f:0a:ff:
97:ce:ee:fe:d4:19:2b:61:34:fa:f2:6a:0b:51:6a:
cf:e0:bc:21:32:de:6e:c5:c0:4c:79:58:9e:fa:69:
f9:ac:32:ba:39:c1:de:e7:bc:da:68:5d:e9:19:6d:
f6:6d:f9:de:50:05:1a:43:8d:f5:87:77:bc:46:12:
72:6c:c5:8a:23:dd:7c:ea:9d:9a:1c:88:87:14:cf:
98:b0:55:ad:b5:08:a8:d6:4f:c1:2c:96:6f:4a:cf:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:E1:E1:8C:46:77:CF:76:0A:84:F1:EC:2A:45:33:01:33:A5:53
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2rLh4YxGd892CoTx7CpFMwEzpVM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:2c:27:cf:2b:aa:d6:5b:c9:a3:32:d0:7a:50:42:b3:fe:27:
04:19:3a:87:c9:64:7f:ff:e1:b1:07:8a:c3:a8:4a:37:53:15:
a0:45:d4:39:82:82:96:d7:5d:20:30:30:20:f4:fb:97:b6:b2:
4e:33:27:3d:bd:8d:a1:c6:2c:1c:9a:7d:fc:14:7b:95:da:10:
31:27:70:7e:e6:1e:a1:b3:bc:78:c1:d3:75:eb:3b:97:a6:f2:
e3:6c:65:0c:40:92:a8:96:c9:5c:c0:b4:c1:8a:02:f0:2d:6f:
50:65:d7:d9:9d:71:33:c7:5f:4f:45:b5:42:10:b0:9d:fd:4c:
57:01:ea:13:ad:dd:f7:a8:6f:07:1f:ad:68:0c:d0:26:b6:fe:
56:a8:b2:51:c0:7f:94:01:d1:95:c4:1b:5a:ca:0b:ef:ba:c5:
b4:28:16:3d:14:5c:64:15:14:ab:b5:36:63:45:67:53:a2:c7:
85:de:58:48:84:f7:15:d6:b3:e4:4f:0e:c1:d1:93:01:75:82:
55:e5:7c:ee:d4:7a:29:cc:05:a7:9d:9c:ce:70:7f:b5:3d:6d:
c2:9f:a6:bd:9c:28:9e:cf:42:d4:b0:2c:5d:a1:a7:aa:69:11:
0e:f5:35:03:ef:ba:b2:38:b1:dd:c9:02:12:13:48:15:02:9a:
31:6e:65:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQy
MzA4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKERBQjJFMUUxOEM0Njc3
Q0Y3NjBBODRGMUVDMkE0NTMzMDEzM0E1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuYif4gZzlq330K2MOo4yw/U+dL8uYSaFx+HqfZ4c6gXOpHLRL
GTGh0u2rc7Jm+WMB844S6ioVaiRhznN7SXzD0MjDfA5B/A7P+dDEcZ23BqZDiDlB
PuzjmBj4WGagPCSUt5UbKxKCN++RINYaaodGfwX2dHmiMpMm717jvBziPtDlpNhb
ludD7Nt8SiYFelvrKr9gOaQYd69wg5FHy4lyik8K/5fO7v7UGSthNPryagtRas/g
vCEy3m7FwEx5WJ76afmsMro5wd7nvNpoXekZbfZt+d5QBRpDjfWHd7xGEnJsxYoj
3XzqnZociIcUz5iwVa21CKjWT8Eslm9Kz+PRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2rLh4YxGd892CoTx7CpFMwEzpVMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8yckxoNFl4R2Q4OTJDb1R4
N0NwRk13RXpwVk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAJAsJ88rqtZbyaMy0HpQQrP+JwQZOofJZH//
4bEHisOoSjdTFaBF1DmCgpbXXSAwMCD0+5e2sk4zJz29jaHGLByaffwUe5XaEDEn
cH7mHqGzvHjB03XrO5em8uNsZQxAkqiWyVzAtMGKAvAtb1Bl19mdcTPHX09FtUIQ
sJ39TFcB6hOt3feobwcfrWgM0Ca2/laoslHAf5QB0ZXEG1rKC++6xbQoFj0UXGQV
FKu1NmNFZ1Oix4XeWEiE9xXWs+RPDsHRkwF1glXlfO7UeinMBaednM5wf7U9bcKf
pr2cKJ7PQtSwLF2hp6ppEQ71NQPvurI4sd3JAhITSBUCmjFuZeM=
-----END CERTIFICATE-----
Generated at Sun May 18 06:09:42 2025 by rpki-client