Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gzQNGi6k3gL0aryb9eE6UexrLTg.roa
File: gzQNGi6k3gL0aryb9eE6UexrLTg.roa (raw, json)
Hash identifier: pgGaLq8MnnqhjAoaYPUDBipEA6VLt8pVcFg0RI91Hsk=
Subject key identifier: 83:34:0D:1A:2E:A4:DE:02:F4:6A:BC:9B:F5:E1:3A:51:EC:6B:2D:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 078C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gzQNGi6k3gL0aryb9eE6UexrLTg.roa
Signing time: Sat 17 May 2025 03:38:08 +0000
ROA not before: Sat 17 May 2025 03:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 03:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=83340D1A2EA4DE02F46ABC9BF5E13A51EC6B2D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:65:6e:6a:6d:2f:b2:db:9c:45:1f:a5:2f:
2a:a5:7f:da:6a:cf:6a:22:1a:b3:b7:b2:88:67:f7:
fd:38:5b:05:7c:ca:29:52:11:fc:82:b8:e2:6c:8b:
fc:95:9b:ff:36:f3:ec:ad:5c:d6:9e:f5:8e:f0:c2:
14:6c:a5:6f:57:d6:0d:47:4a:d4:ed:c8:40:85:45:
78:fb:e0:09:2d:3f:e6:a3:da:ab:b2:22:c9:e1:a0:
f3:da:8c:59:8f:96:e1:71:68:cd:89:ad:c9:fb:9e:
2d:74:de:45:4a:e0:a2:6e:17:09:f8:0a:1a:fd:1c:
39:73:e7:32:1d:ad:0b:7b:49:fa:d3:9a:fa:17:5e:
40:53:65:5e:a0:a0:77:8d:28:2d:92:c9:4b:09:ce:
e9:e4:3f:ad:70:5a:2c:82:49:4f:64:0b:45:4b:bf:
bf:b0:b5:9a:86:9b:2a:23:1d:b6:bd:20:5d:14:dd:
70:31:f7:63:61:65:1b:97:a1:c1:0c:36:c7:bc:61:
39:a1:74:68:c6:21:9f:8f:45:c5:15:a8:87:9f:48:
b1:43:26:3e:2c:43:2a:ad:c9:bb:93:db:46:4d:54:
c3:bb:eb:0b:2e:67:21:01:a2:eb:df:01:6e:11:0d:
69:ca:fa:0a:0a:51:fb:ba:40:f5:a3:07:9c:c5:d6:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:0D:1A:2E:A4:DE:02:F4:6A:BC:9B:F5:E1:3A:51:EC:6B:2D:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gzQNGi6k3gL0aryb9eE6UexrLTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:df:25:b4:16:12:fd:fc:92:55:20:3f:28:ff:e0:0c:34:36:
8b:7e:74:ef:8c:df:b7:93:a3:e7:40:c4:03:59:f5:b6:8d:f0:
49:a2:ef:33:33:32:14:70:b6:62:d2:be:2f:df:3b:48:a1:67:
e5:f7:8c:96:aa:20:85:c5:52:2f:7d:78:76:2a:13:f3:8d:7c:
b3:ec:b4:b4:21:33:42:4e:68:5d:75:47:00:02:07:ee:67:d8:
9f:95:7d:91:0d:b9:2d:ee:46:41:90:b0:95:a3:8c:bf:e7:c9:
a4:f4:d5:13:40:fa:fc:e5:a2:87:7e:65:65:2a:ae:e0:0d:17:
40:7e:1c:5a:52:f5:dd:5e:be:77:c9:ff:52:7f:91:50:6b:92:
1b:fb:4c:a6:49:92:c9:8b:ee:f7:cb:69:99:76:94:5a:43:95:
27:ae:a0:f2:ca:b2:c7:81:8b:64:16:75:92:14:3f:3f:21:59:
e5:27:6e:f9:ae:a5:9b:c5:fc:f4:66:94:8a:5e:c0:91:fd:56:
7c:c4:bc:c4:b5:46:56:e8:a2:9c:df:55:bc:6e:74:bb:bf:17:
45:cf:4a:fe:9c:3b:52:f3:6e:b8:e2:eb:1d:d2:3d:d6:ef:9c:
87:19:00:10:53:ef:01:6e:d0:94:d7:9e:9e:ff:55:f5:e5:65:
96:2c:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:31:29 2025 by rpki-client