Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6E-tfZ21INDb5r8INt_9XCXcioQ.roa
File: 6E-tfZ21INDb5r8INt_9XCXcioQ.roa (raw, json)
Hash identifier: uNt0H+cjOLlXUVSrZzIUAXwL9Dmh92HG8BjWO96QDmc=
Subject key identifier: E8:4F:AD:7D:9D:B5:20:D0:DB:E6:BF:08:36:DF:FD:5C:25:DC:8A:84
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0476
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6E-tfZ21INDb5r8INt_9XCXcioQ.roa
Signing time: Tue 13 May 2025 00:37:57 +0000
ROA not before: Tue 13 May 2025 00:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 00:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E84FAD7D9DB520D0DBE6BF0836DFFD5C25DC8A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:57:1e:1e:e0:1a:97:86:8a:d2:2d:7e:ac:
ed:23:da:de:59:f8:f2:be:6a:36:4c:8f:70:ba:66:
00:13:23:65:46:b4:1b:54:83:df:4e:b1:9f:0f:5b:
87:a9:a5:b9:31:1a:69:3d:74:0a:ad:82:eb:76:15:
f1:d5:4f:fd:d0:63:10:25:58:e1:28:e8:46:f2:89:
91:55:a2:4b:b8:d7:30:46:0d:f9:d5:50:3a:27:47:
9d:c9:05:eb:16:20:ff:88:b2:63:64:bc:d2:c4:b3:
86:dc:ea:d8:59:ab:c9:45:76:2f:9d:5f:f9:e2:c6:
61:32:a0:e1:f7:c9:5d:f3:cf:45:79:1a:9c:cd:02:
b2:e5:55:4c:71:2b:7f:4e:b6:4e:4e:35:5f:43:68:
10:0c:9b:62:c6:44:88:c5:22:c1:5b:cf:ad:72:bf:
cd:99:22:40:24:f5:1b:2e:06:c3:88:22:16:35:0d:
31:87:24:df:31:e4:a0:01:bc:c9:d2:94:d5:5e:78:
29:7d:48:21:ae:70:3b:75:50:a1:59:15:14:18:c4:
79:2d:c3:47:2c:ea:72:83:7e:bb:c6:1e:d6:db:ae:
a6:9f:a6:2d:1a:6b:b9:85:dc:9c:8d:c5:80:53:af:
aa:08:3e:0c:d0:9b:55:9f:64:c7:b2:d1:16:45:a8:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:AD:7D:9D:B5:20:D0:DB:E6:BF:08:36:DF:FD:5C:25:DC:8A:84
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6E-tfZ21INDb5r8INt_9XCXcioQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:83:a7:02:77:09:05:c1:a7:84:67:95:18:d4:5e:f0:03:3c:
47:7e:39:15:ac:b5:2b:ce:9c:26:99:a9:25:25:b4:c2:5b:28:
89:43:3a:1b:9b:0d:a9:cb:24:23:0e:fe:88:48:4f:32:45:8a:
30:e3:49:5d:36:19:97:73:02:c2:29:ae:c7:0d:2a:b9:0b:81:
d0:07:ec:81:53:8a:f6:d3:b7:8d:c5:e7:a7:e4:76:49:61:33:
ff:d4:87:cc:c6:c9:af:b8:31:ca:4f:23:c4:d8:53:ff:69:4e:
98:37:96:e1:c0:05:94:81:bb:e6:bc:e3:e6:1d:bc:1e:0a:74:
32:e6:a7:9f:a9:f5:a6:70:f3:f6:d8:26:c0:39:7d:41:9f:01:
88:17:d1:57:fe:60:05:4a:aa:c9:66:81:4d:5f:c0:94:80:63:
63:9e:b9:6e:5a:56:28:d6:8f:3b:3b:42:bb:9f:4f:3a:8b:e0:
36:c6:b6:ab:24:fe:4e:23:75:c3:08:8c:58:5c:d6:ec:94:eb:
ca:d4:d0:0c:82:d6:cc:5c:f5:a4:54:ae:b0:15:ab:d9:21:31:
6d:69:b5:02:9e:6b:dc:0b:ef:d2:ae:ab:73:c6:d6:a2:12:10:
d6:76:90:d9:0d:6c:e9:fe:3e:a2:a3:8c:ba:98:e7:92:cf:3e:
57:21:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:15:14 2025 by rpki-client