Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PqaU3-J2Yne15MUr0mVD8EfVdOg.roa
File: PqaU3-J2Yne15MUr0mVD8EfVdOg.roa (raw, json)
Hash identifier: BGBZB7MNmZ6T4hy3165CH1yE48n7kQ2IphxRkn3E7gQ=
Subject key identifier: 3E:A6:94:DF:E2:76:62:77:B5:E4:C5:2B:D2:65:43:F0:47:D5:74:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PqaU3-J2Yne15MUr0mVD8EfVdOg.roa
Signing time: Fri 16 May 2025 00:08:04 +0000
ROA not before: Fri 16 May 2025 00:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 00:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3EA694DFE2766277B5E4C52BD26543F047D574E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:fd:88:35:29:31:7a:82:f3:5b:94:6f:b6:
bb:c3:01:47:b5:91:a6:71:69:3c:29:bf:1d:24:fe:
e5:a5:75:df:c8:9b:68:b4:7b:bf:5e:18:46:fe:c5:
21:86:2c:12:51:58:75:0b:05:a0:14:df:69:60:5d:
4d:dc:23:95:31:fa:4b:b5:09:79:c1:dc:96:8e:fb:
c5:96:c2:b9:fb:01:5e:99:5b:6d:1e:d8:26:53:50:
48:ba:de:15:04:b0:68:f9:74:6f:0c:77:17:c8:e0:
65:4e:a6:22:4c:31:76:db:cf:ed:59:58:1a:89:cd:
a3:9c:27:75:38:ff:af:69:5a:03:10:69:4d:8f:b3:
e7:e4:18:6d:fe:7c:a6:29:4f:f2:b0:76:3f:8c:f0:
f1:c4:e7:3f:59:dd:6e:40:e1:22:e5:d1:19:57:71:
25:4f:80:a5:66:d7:8a:55:6e:15:53:18:ca:b3:6d:
dd:bf:5a:17:77:ce:35:9b:22:75:1b:20:9a:95:4c:
3d:2b:bf:91:36:c2:60:c6:d3:2c:f9:44:5c:6d:51:
52:d6:c3:0a:a2:72:ed:e8:9f:f2:2b:09:4e:3f:ce:
c5:68:4e:2b:8b:13:58:15:14:49:a6:2b:ba:56:89:
1e:ec:e8:74:43:a8:91:2a:9d:da:45:5f:d4:42:46:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:94:DF:E2:76:62:77:B5:E4:C5:2B:D2:65:43:F0:47:D5:74:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PqaU3-J2Yne15MUr0mVD8EfVdOg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:54:7c:fb:37:76:56:58:07:2d:20:ff:46:2e:d0:df:6b:e1:
b4:3b:88:b5:15:9b:bf:05:fe:d2:ce:dc:57:08:b0:3f:59:31:
bd:04:61:dd:a2:7c:58:17:79:f6:32:a7:0f:d9:50:62:90:70:
46:6b:84:3c:c9:e2:fc:4f:db:eb:33:44:7c:2f:1a:ed:80:ee:
1a:d3:00:5c:a4:2a:3f:97:a7:0f:a7:27:5f:e3:2a:77:c9:5e:
5f:35:1c:81:45:aa:51:60:e9:13:47:21:33:39:7d:ac:5b:5a:
f0:ed:1f:aa:cc:cc:40:0b:81:84:a1:7d:cb:04:a0:99:47:f7:
ab:13:72:4c:d2:24:a8:7c:be:77:db:e9:00:87:e0:e9:a7:96:
7d:cb:c6:98:02:71:28:8e:c8:50:03:a0:2d:a9:5f:0b:dd:bd:
e1:54:81:b5:db:e9:51:e3:61:9a:bd:f1:b5:53:9e:c1:11:c4:
11:4b:b2:fe:5e:10:42:56:99:4e:31:9f:a3:50:e8:3e:c8:89:
68:e6:c1:67:86:c9:61:52:06:f4:03:72:1a:64:f5:77:1b:b1:
a5:32:96:6c:e0:32:2e:e1:36:02:86:f6:5a:0b:70:c3:a9:38:
88:ef:7a:7a:e4:d6:77:93:8e:3d:d4:66:a2:cb:10:70:ee:4f:
85:41:d1:f0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYw
MDA4MDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNFQTY5NERGRTI3NjYy
NzdCNUU0QzUyQkQyNjU0M0YwNDdENTc0RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN4P2INSkxeoLzW5RvtrvDAUe1kaZxaTwpvx0k/uWldd/Im2i0
e79eGEb+xSGGLBJRWHULBaAU32lgXU3cI5Ux+ku1CXnB3JaO+8WWwrn7AV6ZW20e
2CZTUEi63hUEsGj5dG8MdxfI4GVOpiJMMXbbz+1ZWBqJzaOcJ3U4/69pWgMQaU2P
s+fkGG3+fKYpT/Kwdj+M8PHE5z9Z3W5A4SLl0RlXcSVPgKVm14pVbhVTGMqzbd2/
Whd3zjWbInUbIJqVTD0rv5E2wmDG0yz5RFxtUVLWwwqicu3on/IrCU4/zsVoTiuL
E1gVFEmmK7pWiR7s6HRDqJEqndpFX9RCRt1rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPqaU3+J2Yne15MUr0mVD8EfVdOgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QcWFVMy1KMlluZTE1TVVy
MG1WRDhFZlZkT2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAE5UfPs3dlZYBy0g/0Yu0N9r4bQ7iLUVm78F
/tLO3FcIsD9ZMb0EYd2ifFgXefYypw/ZUGKQcEZrhDzJ4vxP2+szRHwvGu2A7hrT
AFykKj+Xpw+nJ1/jKnfJXl81HIFFqlFg6RNHITM5faxbWvDtH6rMzEALgYShfcsE
oJlH96sTckzSJKh8vnfb6QCH4Omnln3LxpgCcSiOyFADoC2pXwvdveFUgbXb6VHj
YZq98bVTnsERxBFLsv5eEEJWmU4xn6NQ6D7IiWjmwWeGyWFSBvQDchpk9XcbsaUy
lmzgMi7hNgKG9loLcMOpOIjvenrk1neTjj3UZqLLEHDuT4VB0fA=
-----END CERTIFICATE-----
Generated at Sun May 18 15:39:35 2025 by rpki-client