Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z3Ym75WMpaKYej0k0cU6MAmfjvU.roa
File: z3Ym75WMpaKYej0k0cU6MAmfjvU.roa (raw, json)
Hash identifier: 97Q2GISJ57abRU/H33hMsbmfP/1UNGGtbgplvPNtmFw=
Subject key identifier: CF:76:26:EF:95:8C:A5:A2:98:7A:3D:24:D1:C5:3A:30:09:9F:8E:F5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0504
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z3Ym75WMpaKYej0k0cU6MAmfjvU.roa
Signing time: Tue 13 May 2025 18:37:58 +0000
ROA not before: Tue 13 May 2025 18:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 18:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CF7626EF958CA5A2987A3D24D1C53A30099F8EF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:24:75:4f:11:00:13:8a:8d:70:a2:3d:13:
d8:22:c7:17:56:10:16:e1:b5:c3:a9:46:57:57:c9:
a5:30:25:52:45:0d:12:f1:10:5d:f8:a8:61:4d:9e:
d6:de:9b:f2:ce:91:d8:57:30:f9:f1:11:ae:f7:a0:
0b:b4:b4:27:4c:94:f1:1a:4e:39:f4:c8:09:76:a4:
ce:59:b8:0e:0d:89:a4:7b:97:d0:60:7b:19:b9:70:
38:0d:5c:1e:6e:85:65:6b:6c:6c:1c:30:7e:98:ea:
bc:17:08:1b:1d:ae:07:bf:42:c3:1c:7c:e3:ea:ab:
99:ea:d5:f6:c4:c7:b1:88:f0:37:8c:9d:3f:a7:00:
c8:15:0e:35:6b:7b:1d:62:0f:c3:48:1a:df:92:68:
1e:7b:be:91:64:8f:75:7c:88:35:b1:01:3a:ac:e7:
8b:0a:a2:cb:e6:1e:cd:a7:7a:91:da:8d:fe:fc:8b:
2e:a1:9e:20:3c:2b:99:4f:62:1a:a9:9a:29:1e:f8:
a6:b6:7d:d3:5b:9a:fc:5c:18:72:78:7d:a5:b1:a1:
8c:b6:e8:f8:36:96:d2:56:d6:57:d0:5b:3a:e6:ac:
ad:5a:c0:bd:a7:0c:21:48:f8:5a:7b:bb:f9:ab:ac:
cd:bf:15:36:8d:e0:22:1e:44:22:86:a7:67:c3:b7:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:26:EF:95:8C:A5:A2:98:7A:3D:24:D1:C5:3A:30:09:9F:8E:F5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z3Ym75WMpaKYej0k0cU6MAmfjvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:e1:6d:15:b1:1d:71:6d:53:dd:54:0f:ea:80:ef:7e:a4:9a:
62:ce:2a:8a:1a:70:93:ec:b5:63:1c:69:9b:ab:f4:23:08:19:
83:bc:a5:a4:f3:51:05:e6:08:aa:76:56:bf:2f:e4:ea:a2:2d:
4f:90:93:23:56:44:65:19:12:47:22:71:5c:64:e8:f5:b5:e4:
4c:20:76:4a:0a:9f:76:9f:fa:3e:c5:8e:95:4d:a5:66:fd:75:
43:69:f8:60:3f:f0:f7:d2:f5:3e:25:6c:04:36:3f:85:f1:10:
14:f6:88:38:fd:e2:4d:e9:2d:37:de:9f:55:c3:e4:2e:48:a0:
cb:01:5f:44:82:23:c3:82:2c:d6:7f:aa:38:44:7f:ef:8a:c2:
9a:e7:00:4e:f4:e1:50:58:e1:8c:0c:35:af:1f:48:ba:94:4e:
70:36:02:d0:72:34:8a:02:d5:47:46:7f:ff:85:89:f5:01:41:
ea:04:0b:72:b3:23:00:48:ac:87:66:41:80:78:f8:c5:fd:b6:
df:8f:4c:86:87:12:cf:85:66:90:fb:80:1c:67:fe:22:85:e8:
8a:8e:fa:4d:d5:61:a4:5b:9d:c6:b5:28:8a:f8:e9:66:c3:d3:
f0:3d:f7:26:5e:76:b9:19:62:56:4f:ed:c3:34:a7:2e:7f:d2:
34:7b:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:27:47 2025 by rpki-client