Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tZAvJLaQz23wtTF6wjN-guQVusI.roa
File: tZAvJLaQz23wtTF6wjN-guQVusI.roa (raw, json)
Hash identifier: GT70MwY/R8mtIk0+LRjdSiuJh1YZ5P4cENQDfCLfjfA=
Subject key identifier: B5:90:2F:24:B6:90:CF:6D:F0:B5:31:7A:C2:33:7E:82:E4:15:BA:C2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 013C
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tZAvJLaQz23wtTF6wjN-guQVusI.roa
Signing time: Thu 08 May 2025 17:37:42 +0000
ROA not before: Thu 08 May 2025 17:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 17:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B5902F24B690CF6DF0B5317AC2337E82E415BAC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:13:89:a5:c6:22:83:cc:8e:60:17:47:fa:
e0:a2:19:dd:92:74:71:e7:5c:f6:7f:b6:67:32:11:
ed:0d:2a:92:8a:d9:53:e4:e1:b8:cb:52:2f:fb:cf:
10:5d:b4:95:ca:93:00:0b:4b:cc:cd:52:ba:06:8c:
5d:3f:59:ed:b4:89:1d:72:ce:be:5b:78:0e:e9:28:
39:33:05:1d:bb:14:6d:9f:26:46:1f:0a:91:88:28:
9f:b5:5f:5c:cb:87:f3:04:5a:73:85:43:83:59:d8:
bf:28:5c:05:97:4d:cf:4a:36:8a:13:d3:7e:2a:84:
ce:8f:f9:f0:06:a5:95:38:54:b8:b1:8d:c1:5e:04:
3d:1a:ab:53:98:c9:79:52:64:0b:4e:a3:fb:79:69:
99:6b:bf:8a:5d:d9:08:28:92:cd:b1:3a:51:1e:ed:
0b:5a:7e:32:c9:09:b4:a0:7c:28:1b:37:1a:17:04:
80:e0:21:36:5e:21:24:f1:7e:7f:a9:d9:9a:2d:76:
b7:af:27:0c:73:d7:3e:42:4f:88:48:90:15:c3:df:
92:43:2f:38:df:a1:ba:e3:c5:b4:da:25:fb:ce:08:
a0:45:fb:5b:35:df:e1:02:cc:2d:6c:ea:85:21:25:
33:28:9f:ab:d2:2b:12:9b:dc:a3:20:8a:08:da:92:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:2F:24:B6:90:CF:6D:F0:B5:31:7A:C2:33:7E:82:E4:15:BA:C2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tZAvJLaQz23wtTF6wjN-guQVusI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:a0:84:dc:bd:64:f5:53:0c:5f:a2:17:1c:c3:be:20:72:38:
8a:56:df:db:c0:8b:6a:d4:3d:d2:39:62:cb:fd:7c:e3:8a:a5:
8c:74:29:c2:45:ea:0c:95:79:24:ca:15:ae:df:81:2e:64:1e:
a6:d6:8c:67:be:9d:c3:9f:0f:e2:60:b1:5a:0b:c7:aa:19:2c:
33:47:d2:1a:bb:a5:b7:e0:a1:2d:3f:3c:ac:3e:1e:48:84:40:
3d:74:66:3a:48:7a:5d:9f:7d:79:88:3a:e5:58:8f:0c:ff:9c:
0a:dd:3b:90:ed:f7:f2:34:22:65:c0:89:e5:79:d4:26:d9:6a:
00:6a:7e:59:ad:16:d5:c2:33:a5:e3:53:07:54:64:72:a6:01:
08:2e:95:2f:6a:0f:19:12:e5:39:e8:ff:a5:1c:07:c8:36:46:
b4:a2:01:4a:b5:c1:30:a4:fe:86:c1:3b:39:bc:ea:cb:81:95:
4c:d2:f2:e3:97:23:52:29:cf:9e:ec:0f:10:61:24:9b:b6:17:
b6:1d:08:60:cc:f2:32:a6:c2:6c:b1:ee:a2:c0:f5:a8:ad:86:
ee:c2:c2:ef:08:7f:b7:a4:a7:17:65:34:d8:50:58:60:1f:c5:
59:00:4a:53:20:5b:f5:fb:80:05:f4:db:43:5d:09:d4:70:b7:
e5:07:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:41:59 2025 by rpki-client