Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kQkNMasxFtPSFJx4GXt6uiOaFRw.roa
File: kQkNMasxFtPSFJx4GXt6uiOaFRw.roa (raw, json)
Hash identifier: up83R/ZiyjgCtdlezds4LER6oSnMZ05qx3Z02fzD+5Y=
Subject key identifier: 91:09:0D:31:AB:31:16:D3:D2:14:9C:78:19:7B:7A:BA:23:9A:15:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0380
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kQkNMasxFtPSFJx4GXt6uiOaFRw.roa
Signing time: Sun 11 May 2025 18:07:52 +0000
ROA not before: Sun 11 May 2025 18:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 18:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=91090D31AB3116D3D2149C78197B7ABA239A151C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:7f:92:51:50:d2:fc:b2:56:1c:5d:9c:b8:
dd:5d:e3:c0:07:f1:17:15:3f:13:e5:86:e6:a4:15:
b7:76:d2:64:c0:aa:3f:08:38:27:d5:80:d4:c5:26:
33:9e:d9:71:82:dc:4e:e2:94:3f:08:89:82:83:97:
f4:d9:60:4a:ef:d2:dc:5d:65:d9:f8:12:82:57:87:
50:22:43:13:c0:00:b6:45:d9:a0:52:6d:33:ce:ec:
78:95:fd:cd:e5:8b:c2:b0:40:f9:4c:cb:85:90:fa:
db:29:70:ee:04:29:d6:e0:6f:49:8f:c5:a9:64:a4:
65:11:45:02:40:e8:0e:ac:ba:ca:37:fc:cc:82:73:
1c:61:3f:18:98:71:7e:14:7b:d1:9a:f8:4c:dd:bf:
a8:15:09:11:76:1d:e0:88:c7:ad:42:9d:ab:7a:43:
2b:04:df:01:aa:37:b1:bc:5b:37:76:8d:ea:1c:f3:
56:18:9c:03:5b:82:22:3e:4c:cc:67:29:3c:b5:8f:
50:6f:47:5d:d6:a3:ba:24:2f:13:e6:8f:c3:53:75:
d2:5a:6b:3f:72:8c:9d:9f:01:66:ab:cb:de:8e:7b:
98:75:d9:55:cf:24:9d:32:89:63:5d:03:1a:72:07:
50:c5:2a:be:5e:bd:26:97:43:9c:07:fe:4d:9d:fd:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:0D:31:AB:31:16:D3:D2:14:9C:78:19:7B:7A:BA:23:9A:15:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kQkNMasxFtPSFJx4GXt6uiOaFRw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:d1:da:3b:90:9a:b0:2b:9d:04:0e:74:cc:71:d3:d5:76:f8:
09:e0:15:2e:32:55:a8:12:7e:0c:49:d7:09:68:eb:b6:5d:9b:
14:b7:b3:89:63:09:c0:b2:9a:a7:1b:de:26:6e:71:d7:e2:5c:
b9:f6:0f:a7:78:75:3b:1f:bf:35:23:e8:ec:8c:3d:89:28:cd:
33:73:32:c4:80:b4:d8:71:23:c1:14:f4:60:9b:e1:70:78:4a:
b6:e1:fa:36:75:fe:ad:a6:f9:e6:89:0e:e8:1e:9b:e5:1f:a6:
8a:43:91:f9:87:bf:bb:8d:c6:24:7c:73:d5:fb:6b:df:dd:b9:
c6:c6:21:71:65:da:33:39:bc:8c:85:2c:3f:9e:49:b6:df:e6:
41:1a:28:06:13:6c:64:68:9e:67:66:07:00:11:00:d4:9e:01:
c9:b7:94:6e:d0:96:8b:64:7e:a7:3c:6f:bd:40:23:34:7c:f3:
e2:8e:f9:6e:09:76:b7:c3:e1:f9:6d:db:11:52:70:f7:d5:51:
f0:07:88:8a:73:c2:07:3d:25:e2:70:2f:0a:5a:dc:c8:b7:2c:
c6:7d:0b:e2:65:19:f6:f2:49:be:3b:b4:73:4e:eb:08:1f:78:
4f:bd:de:e7:7d:b8:c6:ee:6e:31:60:28:5d:34:7e:e2:ce:82:
3f:64:4c:1d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEx
ODA3NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkxMDkwRDMxQUIzMTE2
RDNEMjE0OUM3ODE5N0I3QUJBMjM5QTE1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHYH+SUVDS/LJWHF2cuN1d48AH8RcVPxPlhuakFbd20mTAqj8I
OCfVgNTFJjOe2XGC3E7ilD8IiYKDl/TZYErv0txdZdn4EoJXh1AiQxPAALZF2aBS
bTPO7HiV/c3li8KwQPlMy4WQ+tspcO4EKdbgb0mPxalkpGURRQJA6A6suso3/MyC
cxxhPxiYcX4Ue9Ga+Ezdv6gVCRF2HeCIx61Cnat6QysE3wGqN7G8Wzd2jeoc81YY
nANbgiI+TMxnKTy1j1BvR13Wo7okLxPmj8NTddJaaz9yjJ2fAWary96Oe5h12VXP
JJ0yiWNdAxpyB1DFKr5evSaXQ5wH/k2d/Sf1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkQkNMasxFtPSFJx4GXt6uiOaFRwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9rUWtOTWFzeEZ0UFNGSng0
R1h0NnVpT2FGUncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBABXR2juQmrArnQQOdMxx09V2+AngFS4yVagS
fgxJ1wlo67ZdmxS3s4ljCcCymqcb3iZucdfiXLn2D6d4dTsfvzUj6OyMPYkozTNz
MsSAtNhxI8EU9GCb4XB4Srbh+jZ1/q2m+eaJDugem+UfpopDkfmHv7uNxiR8c9X7
a9/ducbGIXFl2jM5vIyFLD+eSbbf5kEaKAYTbGRonmdmBwARANSeAcm3lG7Qlotk
fqc8b71AIzR88+KO+W4JdrfD4flt2xFScPfVUfAHiIpzwgc9JeJwLwpa3Mi3LMZ9
C+JlGfbySb47tHNO6wgfeE+93ud9uMbubjFgKF00fuLOgj9kTB0=
-----END CERTIFICATE-----
Generated at Sun May 18 06:31:09 2025 by rpki-client