Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FRa3gr8OOdhcbhOduJ6bpMgYDas.roa
File: FRa3gr8OOdhcbhOduJ6bpMgYDas.roa (raw, json)
Hash identifier: FWkVkD2bbsRVK1g9l82iJYfJVtNnII6W6SHD0QIE4go=
Subject key identifier: 15:16:B7:82:BF:0E:39:D8:5C:6E:13:9D:B8:9E:9B:A4:C8:18:0D:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0154
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FRa3gr8OOdhcbhOduJ6bpMgYDas.roa
Signing time: Thu 08 May 2025 20:37:42 +0000
ROA not before: Thu 08 May 2025 20:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 20:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1516B782BF0E39D85C6E139DB89E9BA4C8180DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:30:28:29:31:2d:6b:ce:ed:7e:3f:43:5a:
a2:a7:33:dc:e8:4a:34:90:0d:03:70:a4:3f:82:7f:
24:ab:63:5d:24:a3:5e:d3:7e:4f:12:df:05:03:06:
4d:ff:73:4f:ee:90:af:94:38:69:ee:64:fa:0f:85:
43:5f:a9:70:27:09:61:24:3c:90:3f:b8:c5:0f:0c:
5d:c9:1f:19:ca:ec:5f:4a:11:0c:aa:c6:0f:a4:ed:
71:05:98:ef:50:38:43:86:c4:5b:b9:a3:64:89:2e:
2e:7f:ea:0a:49:38:83:a4:f0:34:9b:c7:cb:dc:ba:
ee:b1:b9:4c:c6:44:7b:38:fc:f8:a4:36:b9:1b:74:
a6:1e:51:9c:a2:e5:18:3f:0f:43:fb:e7:91:55:65:
c6:67:d4:33:83:d4:fd:c5:4c:1e:c0:59:4c:9c:65:
ae:bb:9f:bc:8b:19:fb:dd:05:2a:92:95:0a:75:74:
d7:95:05:37:80:d5:82:90:59:a2:58:69:0f:56:3b:
e4:13:31:3d:a1:03:19:1c:8d:cd:02:42:0f:7d:50:
22:0e:db:89:fe:68:3e:74:83:cc:b7:18:9a:7f:58:
35:9b:f8:57:05:c9:93:8a:c1:d9:46:88:3b:9e:28:
7f:7b:46:a4:f2:ad:a4:58:a8:91:84:3c:1d:89:53:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:B7:82:BF:0E:39:D8:5C:6E:13:9D:B8:9E:9B:A4:C8:18:0D:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FRa3gr8OOdhcbhOduJ6bpMgYDas.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:3c:c7:21:3a:d2:c2:5f:66:4f:be:88:ca:da:02:ae:f4:a2:
8a:74:80:df:38:3d:f3:49:15:dc:4f:bb:85:c3:10:79:1e:46:
9c:d1:3c:34:48:45:66:43:6f:68:75:99:f9:94:9b:09:be:6a:
b4:c3:09:f0:89:7b:a0:6c:1f:5b:3c:0c:60:78:c7:de:67:e6:
55:9b:27:46:ef:02:37:e8:fc:9b:26:cd:80:35:b0:cc:2b:76:
c1:d9:2e:87:69:2a:9a:81:c8:e0:df:4f:9c:68:b4:66:1a:1e:
49:4b:18:83:1d:ab:9a:d8:0d:b6:79:6d:aa:ee:de:a4:b7:d2:
47:03:1a:7b:28:1e:20:ce:8c:9d:7e:28:96:86:80:5a:a3:db:
67:77:1e:31:b2:a0:bb:79:ac:06:3a:82:41:28:d3:d8:52:41:
93:8e:c9:39:21:e6:cd:35:65:a2:2e:f1:1c:67:ad:32:0c:ef:
bc:46:d2:7f:ec:e6:27:a2:25:cf:42:8c:e7:ec:ec:8b:92:55:
bd:96:c7:dc:0e:3a:db:80:32:fd:56:bd:be:76:45:1a:cd:22:
13:d2:c3:79:95:ec:df:c7:5f:bf:37:89:31:5e:13:b2:1e:1e:
3c:8d:10:fe:98:b6:13:58:6a:dd:52:c3:65:94:e3:44:2b:f2:
68:45:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:30:15 2025 by rpki-client