Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E8iKVOWZ7UpffeolF1S8ckpYeDY.roa
File: E8iKVOWZ7UpffeolF1S8ckpYeDY.roa (raw, json)
Hash identifier: Afnc/5CmPuYVmYLnoUZ8fGcaAX12RKcneFSbyUyI/bI=
Subject key identifier: 13:C8:8A:54:E5:99:ED:4A:5F:7D:EA:25:17:54:BC:72:4A:58:78:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E8iKVOWZ7UpffeolF1S8ckpYeDY.roa
Signing time: Fri 09 May 2025 13:08:18 +0000
ROA not before: Fri 09 May 2025 13:08:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 13:08:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=13C88A54E599ED4A5F7DEA251754BC724A587836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:1a:52:fb:5b:72:3a:6c:2e:27:78:a6:a4:
60:40:86:72:f2:61:1d:ae:70:1e:d7:cc:4d:cb:a5:
cd:57:c8:ef:99:0f:dd:d4:bf:54:fb:25:40:d3:c1:
67:71:2d:c4:bb:9a:7a:6e:fb:7a:bb:84:1f:23:a6:
c9:cd:3e:2b:a6:e6:69:ad:2a:e3:97:b6:b6:3b:6e:
46:0c:18:48:09:3b:f2:c3:01:d2:90:a9:76:98:ba:
dd:a9:fa:cb:7b:98:34:b4:56:56:52:d8:1e:cc:7d:
87:3f:c0:3d:e7:c6:c8:be:4d:d2:0a:ac:00:34:8a:
2e:5c:f1:fc:d5:9f:47:85:4d:e7:b8:3b:a1:5f:30:
e1:eb:bd:83:a0:03:76:bb:2f:ba:cb:5d:0e:1c:12:
ad:52:13:8e:0b:0a:3b:cb:d7:e3:f7:f8:ea:4a:b6:
35:0f:8e:e8:38:03:9e:7d:f6:70:4f:17:b5:f5:50:
3d:a8:b4:fb:64:e8:11:8c:85:a8:0d:6e:07:2a:3b:
5e:3c:31:3f:80:d6:b8:2c:30:c3:5e:47:8a:ef:25:
e8:27:95:a7:90:0c:e3:56:60:ea:60:18:c7:bf:9d:
3b:66:67:dc:00:88:60:13:76:96:56:6b:64:17:77:
8b:74:74:9e:25:d4:78:2f:37:de:a6:24:fd:27:05:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:8A:54:E5:99:ED:4A:5F:7D:EA:25:17:54:BC:72:4A:58:78:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E8iKVOWZ7UpffeolF1S8ckpYeDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:59:ad:68:f8:60:42:25:73:ca:bc:b9:9a:af:75:2f:4b:2c:
65:e7:0b:5b:4a:67:04:2b:7c:36:1b:e2:6e:5c:4a:44:64:25:
0f:6a:85:ec:1e:a3:af:d9:d0:45:f9:44:ec:3b:f0:62:79:e3:
77:02:48:2e:f0:ec:b8:67:f0:fa:eb:a2:83:e1:f2:a6:4f:34:
4e:b0:6a:24:89:43:c0:42:a6:dc:31:75:74:91:08:28:8f:3b:
f0:4d:fe:22:92:17:34:b5:67:77:28:c7:0e:28:09:12:7f:d5:
f9:90:c9:44:e5:f1:2e:3b:9d:ca:de:b4:22:f1:3a:57:58:f0:
35:95:c5:8a:8c:07:f4:2a:d7:8e:bb:66:64:6c:94:1a:6e:f2:
25:23:37:f8:56:8a:b1:e2:52:9e:68:93:64:75:97:05:ed:87:
ff:ee:07:8e:13:c8:59:ae:f5:1a:46:4b:83:c1:54:46:a3:03:
d4:cc:e4:ee:13:da:c4:aa:b5:64:4f:6f:01:37:6a:02:53:f1:
45:2d:b7:09:a6:3b:52:cf:dc:21:c2:f4:45:1d:af:f6:99:b0:
0f:62:66:32:54:3a:d3:b7:0c:84:9e:5b:44:80:d6:bb:47:07:
90:cf:4b:66:02:e8:c8:1c:ca:89:8d:4f:df:19:d2:a5:f4:b7:
bb:35:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:31:20 2025 by rpki-client