Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6wxm_m5GtPnXrJxsJav0P60Y6vQ.roa
File: 6wxm_m5GtPnXrJxsJav0P60Y6vQ.roa (raw, json)
Hash identifier: BylFZshsOO4MXqN4DenXbZ7bcULC1JsSjRlYi/Z9KV8=
Subject key identifier: EB:0C:66:FE:6E:46:B4:F9:D7:AC:9C:6C:25:AB:F4:3F:AD:18:EA:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6wxm_m5GtPnXrJxsJav0P60Y6vQ.roa
Signing time: Sat 10 May 2025 16:07:52 +0000
ROA not before: Sat 10 May 2025 16:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690 (0x2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 16:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EB0C66FE6E46B4F9D7AC9C6C25ABF43FAD18EAF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:c4:f1:85:68:55:e0:63:a3:8e:57:5b:be:
a0:b9:21:ba:3d:eb:c0:2d:24:16:38:cc:36:63:1f:
b4:0c:bd:84:e5:58:a4:16:df:0c:94:2a:dc:11:ec:
da:9c:6c:ed:a1:51:19:e0:55:40:b5:b8:80:a1:7a:
dc:b5:96:bf:0e:e4:fc:b2:ff:04:b2:d3:25:e9:a4:
bd:bc:56:03:4a:36:36:86:b1:e0:6b:20:5b:91:59:
94:00:74:ff:e5:1e:19:c0:b4:71:52:9b:eb:cd:dd:
cc:f1:a4:42:10:86:45:ce:b1:5b:3a:5d:1d:b0:59:
50:3d:d4:4e:e8:60:3d:c6:e4:12:91:42:a1:4c:d0:
25:d1:3f:bd:b6:ee:8b:d0:15:2f:b3:67:8c:aa:8b:
0e:ea:c0:d8:84:e2:b6:cb:ff:90:8b:1d:0e:c9:db:
c2:32:50:e6:e8:00:50:aa:fa:3a:e4:2f:a4:a6:af:
3a:b5:9e:7c:07:fe:2a:ef:f5:b7:25:66:79:53:33:
d5:81:bb:a2:ab:d8:6f:59:6c:dd:98:36:c2:87:18:
e6:49:6a:0f:9c:f2:91:ff:a2:2f:58:dc:35:2f:63:
9b:80:37:d7:a1:2d:d9:2d:65:68:bd:97:ca:14:6f:
61:3c:bd:9e:fe:9f:3e:46:d0:24:62:99:8b:62:7e:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:66:FE:6E:46:B4:F9:D7:AC:9C:6C:25:AB:F4:3F:AD:18:EA:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6wxm_m5GtPnXrJxsJav0P60Y6vQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:78:9e:af:08:03:5d:2e:e4:50:81:00:75:a9:11:f6:3a:c3:
63:83:92:87:86:06:31:dd:11:aa:2b:be:23:0b:3d:19:22:50:
35:91:4b:cc:50:c7:5c:5a:5a:e4:04:38:56:05:66:be:84:c4:
84:6c:e9:ea:0e:f8:5b:95:d0:75:d0:fe:ff:75:13:25:99:9b:
04:c0:7c:e3:74:42:62:97:a8:71:33:ff:6e:f0:e4:d2:14:a1:
8c:f1:6c:9b:14:40:b1:87:ed:35:14:4c:a6:7d:ec:8f:99:55:
97:34:27:7a:3b:23:95:fb:4c:1e:36:71:3f:45:b7:ad:5e:f8:
43:de:9b:f4:b9:28:e0:fd:82:55:1b:53:ed:ea:45:61:1c:cb:
ef:8f:9b:1d:80:f9:52:ee:f5:4a:71:1c:ae:d9:4c:1a:4f:45:
e7:c7:81:35:b9:81:53:26:75:26:79:23:76:84:f4:98:4e:50:
cb:fb:32:bf:86:69:53:93:9b:78:85:cc:9f:c0:8f:a9:5b:be:
c9:01:85:70:d5:d1:61:9f:bf:99:a2:59:21:a0:f3:1e:7a:97:
19:41:0e:0a:31:c7:fd:76:cd:30:23:e8:23:5d:34:e3:da:03:
c5:b4:3d:2f:9b:b5:96:03:3b:37:43:16:d9:ed:c3:b9:3e:b7:
05:95:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:26:23 2025 by rpki-client