Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5YxggqULTYIlh3CEkLZlGzSAYUo.roa
File: 5YxggqULTYIlh3CEkLZlGzSAYUo.roa (raw, json)
Hash identifier: icQtkP5dXQ1ZQ2uv8XXvBse2x0UspPDDi/XbB1SC7bU=
Subject key identifier: E5:8C:60:82:A5:0B:4D:82:25:87:70:84:90:B6:65:1B:34:80:61:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03E4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5YxggqULTYIlh3CEkLZlGzSAYUo.roa
Signing time: Mon 12 May 2025 06:37:54 +0000
ROA not before: Mon 12 May 2025 06:37:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996 (0x3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 06:37:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E58C6082A50B4D822587708490B6651B3480614A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:0d:ee:32:d9:32:cb:0f:26:aa:40:d9:0a:
fe:76:41:0c:78:f8:6e:a5:00:b8:84:ea:d4:6a:8e:
cf:b8:24:a1:9b:6b:c5:82:c3:71:3a:99:aa:04:fb:
b4:49:cf:b0:5b:0c:8f:1d:3c:30:91:10:4b:51:6c:
23:59:ae:bf:ed:8e:49:e9:f9:e9:35:f4:3d:8f:fc:
1f:30:35:f0:ef:05:85:14:88:10:9f:8d:59:96:ff:
2e:0a:f5:84:ea:8d:96:38:1c:95:44:e0:8a:d8:7d:
9b:d8:6f:07:25:a6:92:d5:88:0e:dd:66:40:e5:89:
98:87:ab:a1:f4:6b:26:27:48:6a:52:a3:cc:a7:dd:
d5:50:c8:85:6a:8b:da:a0:8e:5a:d8:44:44:b9:be:
f4:64:00:7a:c7:9c:6d:9f:b1:60:e7:7c:b7:d9:83:
5c:6a:37:7f:3c:5b:53:5d:96:2d:5f:f0:1b:da:99:
88:99:9d:ca:67:b2:4c:da:86:2e:2e:e8:00:75:21:
95:b8:c0:07:53:d6:a7:bd:78:f0:46:80:ef:20:4f:
c1:bb:96:6d:69:74:fd:ce:b0:f5:9a:ba:bc:e1:42:
9d:86:3b:f2:89:01:df:69:c8:12:d3:9f:cc:bf:33:
80:32:12:76:7a:5f:b2:e6:3d:bc:ce:eb:b9:78:51:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:60:82:A5:0B:4D:82:25:87:70:84:90:B6:65:1B:34:80:61:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5YxggqULTYIlh3CEkLZlGzSAYUo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:ff:25:a9:14:78:fd:32:97:4e:c8:56:7f:4f:cb:bf:ae:27:
b0:bb:34:9c:71:3d:4c:00:fe:70:7d:3a:5b:e7:d4:e3:a2:d6:
8f:6d:8d:6a:cb:08:74:27:8d:a2:b3:71:18:0b:e2:85:88:eb:
87:2a:41:ef:06:6a:3f:ef:47:f2:87:93:52:ae:94:5d:ab:23:
76:9c:05:cd:65:06:67:b4:d7:e5:75:98:6d:22:80:36:e8:ff:
df:f6:72:e2:bb:ba:36:0c:25:51:2c:0b:8d:6b:8e:b5:6a:aa:
7a:86:87:d5:1e:a9:3f:1f:c6:43:e2:8e:c4:96:a0:6b:ab:6f:
18:29:f4:c7:1b:98:c9:3f:d5:60:64:c1:0d:1d:17:7f:4c:18:
4a:bb:6c:e8:30:71:ed:cc:f7:80:7d:5e:35:f8:7c:93:f7:17:
ad:42:4d:6b:e6:e3:a0:86:90:16:de:37:c0:3a:51:61:40:c5:
84:6f:39:0e:e8:ac:fa:99:c8:7c:c3:dc:f9:e0:1a:7d:09:92:
48:a7:a7:ba:a6:ce:dd:01:be:49:b5:32:ab:5a:a9:37:a6:6f:
5d:76:7f:2c:8e:91:2d:f8:4e:94:08:93:c9:94:62:35:7f:56:
bd:74:31:79:23:7c:0d:2f:59:c1:cb:86:15:24:81:f5:4c:31:
b9:b7:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:30:15 2025 by rpki-client