Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5NM6Qtd_cnfzfCZJQCf2JvyIong.roa
File: 5NM6Qtd_cnfzfCZJQCf2JvyIong.roa (raw, json)
Hash identifier: nN5zqfcC4T7mW8y+i81wFBQFPu449wLxEuY2iDn5tI0=
Subject key identifier: E4:D3:3A:42:D7:7F:72:77:F3:7C:26:49:40:27:F6:26:FC:88:A2:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0104
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5NM6Qtd_cnfzfCZJQCf2JvyIong.roa
Signing time: Thu 08 May 2025 10:37:40 +0000
ROA not before: Thu 08 May 2025 10:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 10:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E4D33A42D77F7277F37C26494027F626FC88A278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:19:21:f6:8d:7a:15:b1:64:9d:c8:2c:df:
f5:34:08:d7:f4:73:24:d5:40:01:67:33:50:50:4f:
39:00:b7:cc:2f:b6:79:60:c0:e5:e1:17:b2:27:f4:
e8:e4:86:f9:e0:7a:a7:e7:8c:d0:60:f1:49:ab:c6:
96:b0:03:77:01:ed:1b:56:70:30:22:5f:d1:19:51:
14:fd:62:7f:33:34:98:95:75:18:c0:b0:07:5f:77:
b5:1c:6f:f2:7f:65:9f:76:96:48:f5:90:31:ab:95:
44:ad:93:d1:53:54:78:22:c2:fe:10:2f:2f:f2:7f:
2a:48:e3:97:0f:75:c6:9c:3f:9e:7b:43:84:8e:9d:
01:31:f2:e8:c0:92:be:46:4c:21:bf:28:92:3a:e8:
79:4c:60:4a:9a:3e:0d:ce:02:d5:ef:0e:84:30:37:
62:8d:3e:60:9a:69:67:47:71:4c:d6:03:e3:b3:57:
f7:28:a4:06:87:cd:b4:f6:bb:c2:b9:db:5f:6e:61:
d8:7c:c4:b4:d7:48:a6:8f:01:48:64:7a:df:20:33:
ab:8a:15:d7:b5:80:11:a6:a1:0a:66:6e:74:cc:7f:
ef:71:54:8e:90:9d:d0:3e:83:f0:95:72:33:d7:cd:
10:36:ca:a6:17:d8:e6:53:e5:21:21:ee:6d:78:84:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:3A:42:D7:7F:72:77:F3:7C:26:49:40:27:F6:26:FC:88:A2:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5NM6Qtd_cnfzfCZJQCf2JvyIong.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:b8:9e:5e:de:12:ae:ae:6c:66:09:d0:ca:c4:85:bc:d7:1d:
65:21:02:9e:02:1f:79:fe:4e:01:d5:57:a4:e4:2b:e3:17:a2:
0f:12:1c:e4:e1:cf:f6:40:05:21:18:50:f9:b2:06:ba:4e:f7:
ab:66:ac:6d:58:b9:a3:ba:98:b8:08:16:1f:fc:af:ee:e3:dd:
ca:80:6a:72:2e:d3:6b:9b:fc:82:31:17:d9:5b:b2:3e:d2:aa:
31:c8:fc:fe:24:a9:70:0c:51:18:60:10:b1:49:80:9a:d2:bd:
7c:63:cc:87:62:bd:43:0c:65:ca:40:8c:6d:a2:2f:0e:00:50:
37:de:ae:e0:aa:e4:9f:10:bc:95:a6:93:7e:14:e9:06:5f:d4:
1f:57:59:98:10:7c:ad:7a:f6:e4:d0:ba:f2:9d:3f:d4:d1:49:
f5:8c:76:ad:9b:fe:f6:39:c7:d8:4c:75:c0:5a:2d:be:48:c0:
de:46:a9:24:43:45:f4:6e:2c:71:e4:a2:7a:01:42:e2:4b:0b:
57:c3:d0:2a:04:34:89:c3:b3:96:18:68:9c:71:1f:03:19:a6:
10:c0:f4:c6:90:bf:5b:d7:63:6c:b9:90:78:22:52:6b:ed:3d:
c1:16:af:50:78:b1:48:d2:97:73:24:35:b7:d3:b2:78:00:d5:
41:38:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:43:23 2025 by rpki-client