Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JxL97tQdoga8lQfK1YaCfElhQu8.roa
File: JxL97tQdoga8lQfK1YaCfElhQu8.roa (raw, json)
Hash identifier: bzjlFM4SBAjFiuczQQZNmxDsvXF8qOEsEoO1M153qN0=
Subject key identifier: 27:12:FD:EE:D4:1D:A2:06:BC:95:07:CA:D5:86:82:7C:49:61:42:EF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06E6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JxL97tQdoga8lQfK1YaCfElhQu8.roa
Signing time: Fri 16 May 2025 06:38:09 +0000
ROA not before: Fri 16 May 2025 06:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766 (0x6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 06:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2712FDEED41DA206BC9507CAD586827C496142EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:5a:6c:46:ef:cc:71:16:86:e0:13:20:fe:
6c:01:df:3b:e1:ce:81:e7:cd:fb:af:ee:c6:ae:eb:
12:c4:0e:5f:b2:f7:a2:f8:b4:5a:3c:4a:e6:56:4f:
c6:b0:c7:68:66:32:70:d6:87:89:5e:96:89:ea:47:
d2:c0:12:c6:6f:21:ba:b7:00:7f:5e:a6:83:29:44:
5c:26:55:d5:f3:63:b2:c7:39:0f:3f:29:01:53:98:
01:e0:d4:c8:a7:e5:7d:b7:cb:33:0b:ec:e4:62:ec:
f8:44:1c:e1:7f:17:88:b4:63:5a:46:31:ee:6d:87:
1f:2f:5c:e3:06:9b:ba:01:7d:f9:6a:0a:40:c7:91:
0f:99:bf:62:91:a3:73:d4:82:b6:6d:2a:87:25:7e:
5d:8f:ef:28:6e:73:c1:56:da:5f:36:5d:d4:08:f5:
b8:8c:a6:7d:89:d7:35:b0:68:0d:8f:ee:dd:1c:b5:
cc:ae:14:dc:1c:45:d0:69:54:aa:42:66:fa:fb:d5:
f5:1b:9e:0e:13:18:2d:e3:28:e1:55:82:6e:4b:e7:
6c:80:37:24:44:ed:d5:0d:e1:82:ff:ce:23:c1:5b:
2b:ed:74:a1:d6:76:1e:9e:52:19:b7:d7:bc:21:27:
27:20:1e:ad:f1:20:64:80:88:7a:ee:dd:4e:b8:fa:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:FD:EE:D4:1D:A2:06:BC:95:07:CA:D5:86:82:7C:49:61:42:EF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JxL97tQdoga8lQfK1YaCfElhQu8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:b5:f3:a7:28:38:a8:b9:3a:3c:33:2a:1d:fa:b3:22:9b:0a:
b6:3e:a9:6b:62:39:6e:e6:3f:e7:5c:c9:9f:63:b4:ef:09:8c:
be:11:7d:28:21:56:41:96:b5:25:6b:83:cf:40:ba:09:98:d0:
de:53:1a:a1:df:04:89:c6:f3:39:9e:f0:e9:a3:13:9c:81:3c:
27:b3:27:c3:0d:50:28:7c:d5:20:6f:0e:97:40:d2:0e:d9:ce:
5b:c9:f7:6b:9e:66:0a:97:e7:e3:74:2d:6a:40:02:4d:09:5c:
e0:97:3f:6d:6c:0e:d4:e8:ca:d0:5a:57:c6:55:c4:eb:f0:86:
09:d9:06:fa:a0:a2:1b:98:13:47:07:83:f5:66:1e:a2:03:3f:
33:3d:aa:e7:b6:b7:84:ec:c3:b9:67:dc:98:f3:b8:70:d6:49:
19:cb:bf:53:26:f1:d8:0a:d4:2d:65:7c:ac:17:6f:57:64:5b:
ad:97:38:55:73:4e:aa:97:3d:a3:47:60:64:f3:e8:09:c2:7a:
4f:90:cc:f9:ec:e5:08:ab:5f:cb:c6:7c:ef:81:31:1d:db:47:
da:61:2d:78:5e:3f:dc:06:6c:f2:b5:a3:05:ba:d8:34:fe:03:
39:74:27:78:6c:d3:5b:81:12:74:0f:d1:0c:a4:9b:cb:50:b4:
ce:45:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:13 2025 by rpki-client