Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xaI6fk8c91raIKFZGWJjOLAT27o.roa
File: xaI6fk8c91raIKFZGWJjOLAT27o.roa (raw, json)
Hash identifier: Tp6xviIYoPHPU/a7mgRDSCHWzUVIydEGy11gXd46nJk=
Subject key identifier: C5:A2:3A:7E:4F:1C:F7:5A:DA:20:A1:59:19:62:63:38:B0:13:DB:BA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0710
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xaI6fk8c91raIKFZGWJjOLAT27o.roa
Signing time: Fri 16 May 2025 12:08:07 +0000
ROA not before: Fri 16 May 2025 12:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 12:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C5A23A7E4F1CF75ADA20A15919626338B013DBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:3b:2f:0c:98:35:3b:82:6d:b5:c4:6b:98:
32:c5:65:b1:65:cd:ea:84:77:ea:cb:07:3f:ad:ed:
ae:03:b0:a4:52:fa:9c:e9:f5:c2:02:56:4f:86:f2:
f9:54:7d:6c:6e:a9:aa:53:b9:da:3e:a9:7f:b3:2a:
c2:2d:a6:dd:0b:cd:74:c6:04:2c:1e:2f:2f:5a:f1:
eb:e6:bb:33:2d:e2:79:79:6a:e9:2f:0a:3b:6b:1e:
06:96:8a:a0:ed:4f:d1:02:91:c9:e9:42:36:cc:a4:
40:ef:fd:17:eb:4f:4b:e6:60:30:2d:df:fc:19:e8:
24:b5:d1:3c:30:6b:89:87:2a:b4:99:ee:a0:47:c8:
6c:1b:f4:fe:2b:0b:5c:1e:03:df:40:7c:56:e3:a9:
00:43:9c:ac:5c:95:bc:e5:2c:95:76:31:72:25:6f:
fe:58:4d:3f:96:e7:84:26:7e:5b:1e:57:61:1e:79:
89:42:fb:6f:4f:55:2f:1d:e5:cf:f8:fe:c8:09:eb:
79:90:19:39:d5:b7:e4:11:26:c6:9a:4b:26:81:07:
e8:9e:37:05:5b:63:cd:d2:1e:5f:05:03:a6:d4:fb:
6d:0e:76:4c:a4:1a:cc:35:9f:b4:5f:e2:69:c3:a3:
39:25:2a:8e:89:a4:f4:e5:aa:9e:8d:56:82:10:23:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A2:3A:7E:4F:1C:F7:5A:DA:20:A1:59:19:62:63:38:B0:13:DB:BA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xaI6fk8c91raIKFZGWJjOLAT27o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:e5:66:db:4c:3f:dc:cb:bb:3b:2f:68:de:33:64:32:2a:b4:
61:6d:41:fa:3e:f9:83:dc:6a:74:b5:ed:bf:1e:15:7b:e7:5e:
9b:4b:d0:e8:49:4e:44:c4:e0:22:b9:8c:f4:35:75:d8:fe:19:
98:83:99:0d:8b:89:83:b5:17:b0:1a:6d:f7:5b:dd:9c:aa:65:
90:43:ef:bd:e6:35:46:07:d9:f6:f1:31:fc:83:4f:b2:36:6c:
a0:12:95:57:b1:39:ef:4c:cb:ce:e3:7c:2f:a4:af:f7:80:a9:
f5:cc:a2:4d:c8:e5:1d:4f:02:13:8c:58:0e:07:1c:6d:0f:57:
3f:cd:d5:e4:f6:02:70:16:13:8c:78:22:63:76:72:68:a9:ca:
7a:eb:fa:24:58:3f:db:40:61:8d:0e:15:03:ba:ea:44:0f:7b:
f3:86:98:fb:54:da:c4:1e:6c:7a:1c:a5:c4:ce:55:d6:2f:1f:
fb:9d:ad:5f:f2:56:70:9b:0b:b5:2a:82:53:aa:84:6d:20:19:
eb:8d:9b:ae:d3:8d:14:14:df:53:2c:c9:c3:fa:53:72:2d:bd:
fd:3f:81:82:b2:ea:33:a0:c6:33:0b:86:06:43:07:3c:bb:76:
6b:fc:1d:62:d4:e2:af:7b:58:6b:6c:fb:59:a8:46:6c:d2:47:
40:2f:f0:12
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYx
MjA4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEM1QTIzQTdFNEYxQ0Y3
NUFEQTIwQTE1OTE5NjI2MzM4QjAxM0RCQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCybTsvDJg1O4JttcRrmDLFZbFlzeqEd+rLBz+t7a4DsKRS+pzp
9cICVk+G8vlUfWxuqapTudo+qX+zKsItpt0LzXTGBCweLy9a8evmuzMt4nl5aukv
CjtrHgaWiqDtT9ECkcnpQjbMpEDv/RfrT0vmYDAt3/wZ6CS10Twwa4mHKrSZ7qBH
yGwb9P4rC1weA99AfFbjqQBDnKxclbzlLJV2MXIlb/5YTT+W54QmflseV2EeeYlC
+29PVS8d5c/4/sgJ63mQGTnVt+QRJsaaSyaBB+ieNwVbY83SHl8FA6bU+20Odkyk
Gsw1n7Rf4mnDozklKo6JpPTlqp6NVoIQI8tzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxaI6fk8c91raIKFZGWJjOLAT27owHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni94YUk2Zms4YzkxcmFJS0Za
R1dKak9MQVQyN28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAF3lZttMP9zLuzsvaN4zZDIqtGFtQfo++YPc
anS17b8eFXvnXptL0OhJTkTE4CK5jPQ1ddj+GZiDmQ2LiYO1F7Aabfdb3ZyqZZBD
773mNUYH2fbxMfyDT7I2bKASlVexOe9My87jfC+kr/eAqfXMok3I5R1PAhOMWA4H
HG0PVz/N1eT2AnAWE4x4ImN2cmipynrr+iRYP9tAYY0OFQO66kQPe/OGmPtU2sQe
bHocpcTOVdYvH/udrV/yVnCbC7UqglOqhG0gGeuNm67TjRQU31MsycP6U3Itvf0/
gYKy6jOgxjMLhgZDBzy7dmv8HWLU4q97WGts+1moRmzSR0Av8BI=
-----END CERTIFICATE-----
Generated at Sat May 17 20:29:35 2025 by rpki-client