Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/S4zqhEPXUi50rZp6WBRUpUZEE-A.roa
File: S4zqhEPXUi50rZp6WBRUpUZEE-A.roa (raw, json)
Hash identifier: 5XtNIezShUjy6O82UTGiOvm/Zy3tNP1BfRiMu+s6F24=
Subject key identifier: 4B:8C:EA:84:43:D7:52:2E:74:AD:9A:7A:58:14:54:A5:46:44:13:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04E8
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/S4zqhEPXUi50rZp6WBRUpUZEE-A.roa
Signing time: Tue 13 May 2025 15:08:47 +0000
ROA not before: Tue 13 May 2025 15:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 15:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4B8CEA8443D7522E74AD9A7A581454A5464413E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:d5:17:f2:16:39:8d:7d:bc:74:73:ea:c9:
21:e2:1b:8a:1f:9b:2a:79:ab:3f:88:1a:53:e3:3e:
50:d4:cd:3d:7c:5f:d6:d6:25:79:7a:48:83:32:2a:
a1:25:e6:d5:ca:15:64:2f:6c:aa:a2:94:0a:6e:d2:
69:2a:e9:fb:33:20:4a:21:d5:b0:0d:ed:a6:31:4d:
ac:31:fe:c4:3c:f9:55:be:82:49:d4:cc:f6:eb:bd:
e1:a5:bb:dd:b3:06:75:5f:c2:1f:6b:3b:2a:b7:e8:
ac:9d:d8:0b:8a:26:0d:97:f1:33:2e:a5:c8:22:39:
a5:f7:3d:c6:c9:0a:50:44:a5:8d:ce:b9:e2:73:0a:
ee:d1:1b:20:17:18:29:e2:25:bd:39:01:70:c7:c9:
20:f0:bf:32:3f:de:1d:ed:6b:de:c2:07:e3:37:0a:
ef:0e:3a:6a:6e:55:45:af:9a:93:59:c8:11:f8:cc:
1c:2e:71:d9:67:3a:fd:d8:10:49:55:5b:56:7c:31:
f6:09:3b:f0:04:a3:9b:69:cb:51:bd:5d:ce:2e:7f:
46:99:06:18:16:61:ba:26:94:96:f0:85:e6:c0:78:
14:6d:3d:8b:7d:6a:bc:62:88:a6:76:2d:d3:66:59:
2e:e4:26:15:d8:7e:3c:27:fe:20:14:51:73:74:33:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:EA:84:43:D7:52:2E:74:AD:9A:7A:58:14:54:A5:46:44:13:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/S4zqhEPXUi50rZp6WBRUpUZEE-A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:4b:00:e3:30:44:7f:6a:8c:d6:64:28:f8:ca:1a:76:92:9f:
f6:5d:a7:48:82:6b:7a:35:d6:ae:6b:78:ce:2a:30:55:e0:88:
d5:95:d8:a4:71:1e:c3:e4:60:3e:81:30:9d:d9:77:35:35:3a:
4d:5a:42:5e:6d:11:73:1b:22:fc:a5:56:70:4a:0c:3a:1c:a3:
6a:1b:10:d3:6e:d7:f6:9e:22:f5:cc:e9:de:fe:b8:1e:9f:41:
bd:c2:92:a0:ba:8f:f6:7b:26:c5:37:1c:47:e9:4f:8b:90:d9:
8f:b4:fb:0a:52:1b:57:81:29:9f:7a:41:86:00:9c:5a:e1:ce:
c3:52:16:49:bf:5c:a4:e4:14:eb:89:d4:0e:af:86:5c:ab:e7:
43:39:72:72:a1:35:88:f3:28:1f:6e:41:35:d0:84:99:76:66:
30:84:91:ee:11:06:36:fb:58:3a:f3:5a:5e:a9:5d:16:8b:b7:
9b:57:cc:2f:a4:2e:d1:bc:a3:d9:6a:4b:22:b0:c6:da:80:67:
32:7b:af:40:3a:07:af:a9:54:30:e9:d9:78:bf:4f:7e:f4:0d:
a7:7a:ee:ee:fa:81:b1:8e:3e:46:95:67:b0:3d:bb:c2:65:cf:
80:ed:d9:3e:50:22:00:9a:97:ab:22:67:dc:40:40:d9:de:58:
fd:85:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:09 2025 by rpki-client