Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6jHIFBPmv79pE_szofbBb-NdhCY.roa
File: 6jHIFBPmv79pE_szofbBb-NdhCY.roa (raw, json)
Hash identifier: L/MD6vH3brXyPnAu6/HQPfzzESTXh4D+dbTPfpJ4H28=
Subject key identifier: EA:31:C8:14:13:E6:BF:BF:69:13:FB:33:A1:F6:C1:6F:E3:5D:84:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05C6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6jHIFBPmv79pE_szofbBb-NdhCY.roa
Signing time: Wed 14 May 2025 18:38:02 +0000
ROA not before: Wed 14 May 2025 18:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1478 (0x5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 18:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EA31C81413E6BFBF6913FB33A1F6C16FE35D8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:11:57:c8:9f:56:75:ad:4b:26:40:3a:61:
d4:83:db:b6:2d:fb:f8:4b:93:11:16:eb:99:cd:f8:
6b:09:e5:8c:d9:f0:85:30:fb:64:4a:29:f0:7e:36:
9d:c3:22:44:0d:e5:03:aa:f4:73:79:37:05:74:1d:
d8:c5:c6:5a:67:79:dc:a4:aa:94:2f:d7:f1:cd:c3:
5e:9a:39:46:72:2e:f7:7e:f0:2b:79:93:06:f4:11:
63:a2:16:ac:88:13:91:e0:c5:ba:1b:1e:76:56:77:
7b:0a:48:f8:31:ed:1a:32:cb:f8:c0:35:08:7b:02:
84:36:d7:33:20:33:a8:f7:25:85:13:0f:f9:fe:41:
0c:1d:96:2c:55:79:79:36:55:93:0b:ac:4d:51:4a:
96:8e:31:b7:68:9d:d7:81:b3:de:8d:f3:87:10:77:
0a:f9:22:36:10:5e:5c:d5:3e:c5:13:30:ee:e1:95:
55:ca:6b:7a:3f:71:19:9a:cd:01:73:6d:0b:87:3b:
56:73:85:88:f8:a4:5d:1f:cc:92:66:c3:9f:da:04:
08:7d:72:57:48:86:c9:78:a9:f1:b0:a2:12:15:3e:
7e:17:76:cb:3c:c3:45:7f:fc:83:a6:59:a4:76:c1:
8c:3c:d6:6e:15:76:13:5f:2c:81:76:31:87:ab:6d:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:C8:14:13:E6:BF:BF:69:13:FB:33:A1:F6:C1:6F:E3:5D:84:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6jHIFBPmv79pE_szofbBb-NdhCY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:92:3c:4a:07:f0:a9:b4:c4:4b:64:de:1a:ee:97:43:16:95:
6b:76:bd:60:ae:3f:b8:d6:bf:2a:86:bf:36:c8:cb:1f:d3:fe:
67:36:a4:c1:c0:84:d0:59:cc:ab:eb:aa:8b:dc:6a:8f:34:bf:
c3:68:cd:a8:a4:77:90:e6:f7:b6:24:2e:62:a2:b6:12:fc:14:
e5:c3:a8:18:48:54:79:cb:c1:82:de:c8:28:d5:91:7c:35:27:
74:0d:82:df:fd:74:c3:71:72:c8:e1:5f:c5:98:3f:7e:d1:d0:
39:32:c1:16:e0:34:63:d4:ec:b0:90:78:64:25:16:f6:6f:b4:
cc:f6:a7:0d:bd:30:25:38:4b:9b:39:8b:04:85:88:8d:f3:e6:
f0:f7:9e:ca:01:7d:ba:02:f1:99:47:26:a3:8b:ea:b3:dc:64:
08:c5:e0:d0:cf:f6:b7:95:f2:2d:aa:ca:21:58:bb:1c:a6:27:
b4:b0:62:2a:ef:a3:02:1c:1f:3c:27:77:21:4c:d9:14:98:e8:
9b:74:8c:d4:b0:ea:0a:34:11:99:02:c3:3a:51:0b:4d:3f:55:
46:e0:3e:42:24:f0:4d:08:ea:3b:50:2e:20:5e:2f:3c:50:14:
73:cc:d2:e7:ea:62:8b:24:d0:7b:7d:c3:4a:56:77:1b:47:bc:
48:ba:cd:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQx
ODM4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVBMzFDODE0MTNFNkJG
QkY2OTEzRkIzM0ExRjZDMTZGRTM1RDg0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8NRFXyJ9Wda1LJkA6YdSD27Yt+/hLkxEW65nN+GsJ5YzZ8IUw
+2RKKfB+Np3DIkQN5QOq9HN5NwV0HdjFxlpnedykqpQv1/HNw16aOUZyLvd+8Ct5
kwb0EWOiFqyIE5HgxbobHnZWd3sKSPgx7Royy/jANQh7AoQ21zMgM6j3JYUTD/n+
QQwdlixVeXk2VZMLrE1RSpaOMbdondeBs96N84cQdwr5IjYQXlzVPsUTMO7hlVXK
a3o/cRmazQFzbQuHO1ZzhYj4pF0fzJJmw5/aBAh9cldIhsl4qfGwohIVPn4Xdss8
w0V//IOmWaR2wYw81m4VdhNfLIF2MYerbafPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6jHIFBPmv79pE/szofbBb+NdhCYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82akhJRkJQbXY3OXBFX3N6
b2ZiQmItTmRoQ1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGuSPEoH8Km0xEtk3hrul0MWlWt2vWCuP7jW
vyqGvzbIyx/T/mc2pMHAhNBZzKvrqovcao80v8Nozaikd5Dm97YkLmKithL8FOXD
qBhIVHnLwYLeyCjVkXw1J3QNgt/9dMNxcsjhX8WYP37R0DkywRbgNGPU7LCQeGQl
FvZvtMz2pw29MCU4S5s5iwSFiI3z5vD3nsoBfboC8ZlHJqOL6rPcZAjF4NDP9reV
8i2qyiFYuxymJ7SwYirvowIcHzwndyFM2RSY6Jt0jNSw6go0EZkCwzpRC00/VUbg
PkIk8E0I6jtQLiBeLzxQFHPM0ufqYosk0Ht9w0pWdxtHvEi6zdI=
-----END CERTIFICATE-----
Generated at Sun May 18 06:09:39 2025 by rpki-client