Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jqEoBHrBbtGF03d47jLhb5XCG0w.roa
File: jqEoBHrBbtGF03d47jLhb5XCG0w.roa (raw, json)
Hash identifier: 6rvqfy9WB2ogSef2Nut90gkwNwohscpRKq+rArqbjm8=
Subject key identifier: 8E:A1:28:04:7A:C1:6E:D1:85:D3:77:78:EE:32:E1:6F:95:C2:1B:4C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 064C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jqEoBHrBbtGF03d47jLhb5XCG0w.roa
Signing time: Thu 15 May 2025 11:38:50 +0000
ROA not before: Thu 15 May 2025 11:38:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 11:38:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8EA128047AC16ED185D37778EE32E16F95C21B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:1c:af:e9:85:28:52:95:5f:f8:cc:97:cd:
13:cf:62:94:d5:87:3c:f6:9a:16:71:50:45:c0:62:
83:7b:89:05:97:f0:a9:09:70:f1:41:58:5d:e0:b4:
6f:b8:b0:89:20:dd:7b:1d:3a:79:71:bf:ed:95:bf:
49:5c:d7:47:34:d5:48:fd:74:1f:5d:f9:48:75:d7:
de:f9:38:63:3b:5c:f0:05:b0:f5:14:27:1a:26:39:
29:aa:3d:bc:fa:13:ab:71:6e:47:70:b0:fb:22:9c:
6e:60:d3:d6:82:79:74:2e:73:3c:7c:21:ff:03:ec:
69:71:0c:34:cc:ad:66:2f:50:ac:d7:af:1a:f0:29:
cc:4f:6b:40:e4:df:b1:32:fb:76:8a:05:78:ea:6c:
29:2f:da:1a:7f:35:11:11:43:29:bf:cf:cf:ad:96:
25:5f:7d:92:34:44:a6:0c:14:9e:05:f5:b9:6c:b1:
f6:e2:56:0e:d9:6b:a4:ac:29:f5:4f:55:6c:30:b4:
e2:de:e0:72:1c:ba:77:68:f3:b6:fb:2b:37:34:d8:
b9:a7:34:74:ef:ec:34:ae:0b:dd:cb:dd:66:e4:85:
0e:99:15:a3:2a:ee:b5:af:1d:a3:33:70:cf:75:1e:
f7:88:dd:39:83:5a:ac:f4:bb:c3:5e:6b:7a:2c:5c:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:28:04:7A:C1:6E:D1:85:D3:77:78:EE:32:E1:6F:95:C2:1B:4C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jqEoBHrBbtGF03d47jLhb5XCG0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:21:c4:e1:6c:9f:c5:fb:36:e4:99:30:1f:8a:11:7f:43:a8:
0f:ee:1c:37:95:b3:f3:84:9d:ea:2e:4d:e2:7d:58:d3:60:61:
c8:fc:d8:2a:b4:1b:b9:1f:c3:77:b7:a5:c7:30:87:61:a7:8e:
b1:1e:6b:d0:51:c2:eb:4d:c5:e6:fc:49:7d:c9:83:ef:3c:9d:
34:ef:18:4e:02:e4:a4:43:1f:d3:eb:05:10:ca:26:4f:78:cc:
de:c5:07:6c:91:4b:2c:00:71:96:1e:db:d3:a0:61:08:a5:95:
a4:4e:94:c9:03:fc:8c:45:c9:a5:99:96:11:fc:88:85:e8:36:
c5:59:41:4b:54:b0:98:34:ca:13:36:c0:ac:7b:9c:3c:26:3a:
7a:d5:fd:e4:f9:f3:fb:0c:24:ec:f0:cf:3d:a8:bb:ca:9d:91:
1a:44:20:3c:8c:f8:28:7f:3e:b5:8b:0d:5f:b6:5d:13:2b:a3:
5c:53:36:1e:74:74:75:cd:b3:50:33:70:fd:ea:a9:9a:7a:3c:
5a:ce:25:ad:29:61:fd:26:47:0f:5b:89:88:cf:6c:e4:bd:d4:
7e:44:51:d1:86:1b:c0:99:48:45:73:28:79:16:26:69:f8:d2:
d8:ce:b6:f3:8a:81:1a:a1:cf:75:fe:ff:d4:df:74:b3:93:57:
e2:ff:6c:42
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUx
MTM4NTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDhFQTEyODA0N0FDMTZF
RDE4NUQzNzc3OEVFMzJFMTZGOTVDMjFCNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlxhyv6YUoUpVf+MyXzRPPYpTVhzz2mhZxUEXAYoN7iQWX8KkJ
cPFBWF3gtG+4sIkg3XsdOnlxv+2Vv0lc10c01Uj9dB9d+Uh11975OGM7XPAFsPUU
JxomOSmqPbz6E6txbkdwsPsinG5g09aCeXQuczx8If8D7GlxDDTMrWYvUKzXrxrw
KcxPa0Dk37Ey+3aKBXjqbCkv2hp/NRERQym/z8+tliVffZI0RKYMFJ4F9blssfbi
Vg7Za6SsKfVPVWwwtOLe4HIcundo87b7Kzc02LmnNHTv7DSuC93L3WbkhQ6ZFaMq
7rWvHaMzcM91HveI3TmDWqz0u8Nea3osXC7vAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjqEoBHrBbtGF03d47jLhb5XCG0wwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qcUVvQkhyQmJ0R0YwM2Q0
N2pMaGI1WENHMHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBADYhxOFsn8X7NuSZMB+KEX9DqA/uHDeVs/OE
neouTeJ9WNNgYcj82Cq0G7kfw3e3pccwh2GnjrEea9BRwutNxeb8SX3Jg+88nTTv
GE4C5KRDH9PrBRDKJk94zN7FB2yRSywAcZYe29OgYQillaROlMkD/IxFyaWZlhH8
iIXoNsVZQUtUsJg0yhM2wKx7nDwmOnrV/eT58/sMJOzwzz2ou8qdkRpEIDyM+Ch/
PrWLDV+2XRMro1xTNh50dHXNs1AzcP3qqZp6PFrOJa0pYf0mRw9biYjPbOS91H5E
UdGGG8CZSEVzKHkWJmn40tjOtvOKgRqhz3X+/9TfdLOTV+L/bEI=
-----END CERTIFICATE-----
Generated at Sun May 18 01:06:26 2025 by rpki-client