Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_Qi8BeV9BwtBtWlie9x2qtMYXP8.roa
File: _Qi8BeV9BwtBtWlie9x2qtMYXP8.roa (raw, json)
Hash identifier: cbT/pr1mdFdV2rGSwbXR/0GJ6sdrl7cwKoO+GOBTrDw=
Subject key identifier: FD:08:BC:05:E5:7D:07:0B:41:B5:69:62:7B:DC:76:AA:D3:18:5C:FF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 053C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_Qi8BeV9BwtBtWlie9x2qtMYXP8.roa
Signing time: Wed 14 May 2025 01:38:05 +0000
ROA not before: Wed 14 May 2025 01:38:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1340 (0x53c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 01:38:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FD08BC05E57D070B41B569627BDC76AAD3185CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:55:81:bf:1e:4f:3b:90:6c:11:19:d8:ca:
25:c9:21:84:32:73:12:db:87:0f:be:fe:8c:45:e4:
47:9e:87:cf:44:41:f3:5e:b6:dd:51:7d:6a:07:04:
e4:90:72:a5:82:9a:a5:50:da:ef:ec:ae:39:68:ea:
b5:75:3a:51:ad:56:b6:5c:37:40:9b:44:97:94:9b:
01:6b:18:90:cb:06:77:30:66:6c:be:6f:45:0a:f8:
84:d2:32:08:04:2d:fe:d2:08:37:ef:c0:5f:34:4f:
84:b8:a4:32:2a:85:34:3b:43:df:4c:b1:24:9a:29:
50:12:5d:a3:f1:c7:15:35:77:53:8d:ad:ac:62:93:
3e:f0:3c:79:b1:8c:cf:d4:d2:14:9a:c6:f2:ab:68:
ac:e3:b5:c6:59:33:fc:c6:2b:f5:46:1d:f4:1a:23:
b0:91:ba:b1:54:93:ea:a2:f1:5c:35:61:ae:92:77:
cc:34:f7:14:8a:e6:bf:f6:c8:ea:12:1c:2b:4c:ed:
55:2c:84:31:c3:b7:ff:7f:e6:1a:00:c2:af:ae:ee:
99:70:7f:8a:18:b8:d4:a6:49:31:50:0b:59:a9:32:
b3:7c:03:61:14:35:48:b8:17:b3:d0:b9:e1:ee:c8:
11:2c:15:58:9f:d1:96:a8:ae:e6:de:8d:2e:9c:f5:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:BC:05:E5:7D:07:0B:41:B5:69:62:7B:DC:76:AA:D3:18:5C:FF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_Qi8BeV9BwtBtWlie9x2qtMYXP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:03:68:89:74:7c:dc:a3:07:27:e2:77:fc:c4:0a:4b:90:83:
c6:0b:71:6d:ff:58:40:a8:26:8a:f6:3d:b6:d2:03:a3:81:ef:
70:9e:89:fc:fb:b3:14:8a:57:b7:42:54:90:37:14:4d:67:45:
12:f1:13:0e:0b:c4:21:8e:68:58:11:c2:2f:b6:bd:77:94:8c:
b2:55:9a:02:7d:71:c3:6f:8b:a2:7e:41:17:ba:df:81:a8:99:
69:7b:dc:df:c4:ef:60:83:97:5c:70:88:ff:71:b7:7c:1a:3d:
fc:27:de:ae:62:22:80:34:4b:0f:57:3a:1b:63:be:a0:a9:77:
9f:96:6f:e3:7c:e9:96:6b:41:2e:43:9a:55:06:a3:04:91:91:
4c:89:98:f8:9c:11:0a:5e:7c:be:67:cb:08:f4:92:da:9d:27:
21:2a:50:e1:fa:02:c8:73:d3:10:22:3d:5a:b6:28:a1:f8:97:
08:f6:49:a1:e4:b2:54:af:74:62:d8:d1:80:e7:cd:6c:5e:10:
99:70:54:f0:df:96:bc:7c:34:6f:d3:cf:f3:6c:fc:d1:1b:78:
a8:36:0e:93:53:8d:4e:73:33:e0:de:d1:3d:36:4e:38:29:b0:
19:b2:2e:15:7c:81:25:e5:a5:83:4e:57:c5:d1:09:0f:b9:61:
19:3a:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:56:32 2025 by rpki-client