Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4f7yA5aE_ju154262hIIohUd90g.roa
File: 4f7yA5aE_ju154262hIIohUd90g.roa (raw, json)
Hash identifier: +gbNcvftF4P0oIBgQ8sk12bBGndlu3A/HWEG/LFhwrM=
Subject key identifier: E1:FE:F2:03:96:84:FE:3B:B5:E7:8D:BA:DA:12:08:A2:15:1D:F7:48
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 057E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4f7yA5aE_ju154262hIIohUd90g.roa
Signing time: Wed 14 May 2025 09:38:12 +0000
ROA not before: Wed 14 May 2025 09:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 09:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1FEF2039684FE3BB5E78DBADA1208A2151DF748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:a3:97:fe:0a:19:af:7e:fc:3d:aa:c5:5d:
6c:d3:89:87:e9:c1:f7:18:5d:a2:75:da:95:4d:f0:
0c:36:ee:90:6d:b1:b0:4b:c1:3d:8d:03:c9:a6:41:
1a:bd:b4:a9:4a:e3:55:f1:72:67:57:69:81:37:8a:
38:ce:87:56:ab:0e:7c:f3:cf:ce:41:46:04:31:9c:
67:c8:15:26:a9:2f:04:c9:51:19:ea:d8:55:ab:ae:
53:a7:ab:c6:0c:fa:12:30:a6:7d:93:bb:af:6d:f1:
cc:77:68:fa:d7:84:62:4c:19:b4:58:c7:ac:df:d8:
e7:d3:c4:64:88:82:87:b1:f3:46:72:b0:56:46:7c:
f0:e7:f2:a5:41:40:9c:1d:02:b8:d3:77:bc:b1:9f:
9c:88:0b:d3:f5:3d:c9:09:c9:51:20:f2:43:91:ce:
cf:0b:b2:d9:9c:fb:bf:e2:c6:9b:c2:6a:76:46:4a:
29:49:b1:fd:08:fa:58:a3:41:8c:2d:5f:5f:eb:a7:
51:bc:82:4a:d5:8b:46:fc:e6:35:a9:ef:e4:ab:d0:
56:3a:b5:49:5a:e4:e4:32:ba:d9:ba:b6:7e:38:de:
8c:79:dc:8b:9d:8a:47:a2:b9:84:68:b9:f6:df:ae:
a9:c3:48:63:ca:a9:ba:4b:3b:99:de:c9:80:39:a2:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:F2:03:96:84:FE:3B:B5:E7:8D:BA:DA:12:08:A2:15:1D:F7:48
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4f7yA5aE_ju154262hIIohUd90g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:dc:cf:2f:66:f3:d4:98:69:1b:06:5c:e8:8b:b8:dc:d6:53:
22:14:a8:5c:24:1f:36:e8:f5:fb:6e:b5:4a:97:ee:1c:f8:b6:
b7:2b:c9:2c:5f:38:af:33:96:ca:93:b8:fe:45:da:9a:5f:72:
36:1b:b9:41:3b:f5:32:3b:81:ee:b9:12:72:5f:e7:92:bf:48:
7f:c8:2b:57:ce:21:13:5a:a5:61:2c:3a:d7:ea:dc:3e:54:05:
6d:68:c4:48:85:e0:ea:63:61:54:e3:df:bf:35:b4:2a:c0:79:
01:e3:7e:bb:b0:b5:84:cb:db:15:04:4b:33:5d:74:27:10:e8:
14:55:a2:0a:33:ca:5b:d8:53:0f:ae:e2:65:e9:0c:f8:74:8f:
03:97:7f:4c:0f:4f:3a:aa:5f:37:93:89:f4:9a:6e:b3:91:38:
b3:6e:ff:00:94:58:a5:30:a1:b0:8d:4f:5d:da:cb:0e:66:ac:
17:d7:b4:2d:b1:7c:d8:5b:4e:a3:cb:9d:a1:b5:6f:dc:5f:ba:
f2:cd:6a:8b:2c:84:95:a8:7f:2b:75:60:8f:ca:d3:3f:3a:b1:
a0:1e:23:17:e6:cf:b0:3d:53:02:dd:d5:5b:b8:f9:94:88:ef:
f7:2d:6f:59:a8:88:3a:8f:04:5a:91:c9:9c:3a:9c:04:72:4a:
90:b4:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:30:16 2025 by rpki-client