Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XejithRGkyJlZbNqXGbDx047UcE.roa
File: XejithRGkyJlZbNqXGbDx047UcE.roa (raw, json)
Hash identifier: u4GxeocfsGoGBeictJsU5+zGwVVPJUpGkpJn65eXAW4=
Subject key identifier: 5D:E8:E2:B6:14:46:93:22:65:65:B3:6A:5C:66:C3:C7:4E:3B:51:C1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03DE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XejithRGkyJlZbNqXGbDx047UcE.roa
Signing time: Mon 12 May 2025 05:38:18 +0000
ROA not before: Mon 12 May 2025 05:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 05:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5DE8E2B6144693226565B36A5C66C3C74E3B51C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:b2:f3:84:64:28:68:e2:5c:82:3a:9e:58:
bd:ee:1f:4a:c0:67:87:5a:da:6b:20:03:d3:8f:d0:
26:ee:81:c7:a2:f0:ec:3f:f6:9f:b2:6f:ab:f6:6f:
11:5e:13:8c:d9:48:38:b1:7a:5a:d0:d4:4d:7f:89:
f0:89:f7:64:3c:26:60:dc:d8:76:1e:57:f1:45:ed:
fc:82:13:72:ee:f9:12:01:55:87:29:0d:7b:3e:55:
e0:d1:1e:5f:a0:b2:cc:a2:d4:2b:ed:f8:ca:64:80:
e8:c5:73:6c:07:0e:b5:1b:51:ec:aa:1e:ae:92:90:
c8:95:c0:c5:d5:3c:4b:37:30:33:f7:3d:29:4a:91:
63:09:54:70:ce:d9:c2:b1:11:67:cc:c1:c5:96:1b:
f1:b2:a0:5c:1b:f5:db:92:a9:56:b1:02:0e:73:a1:
0c:c0:ed:1a:ea:b6:35:4f:c8:41:de:79:9c:78:8f:
7a:61:c1:50:d3:8e:a0:91:df:46:ef:75:a5:19:3a:
7e:ca:ef:ed:8c:e1:94:c9:85:04:43:de:17:e5:4b:
ba:e1:96:58:a5:ad:45:a4:ca:9e:82:68:d8:21:79:
14:eb:5d:16:67:9d:3c:33:5f:ca:14:6e:52:0a:cb:
49:cf:10:4a:22:0c:da:5d:f9:51:97:95:f2:18:1c:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:E2:B6:14:46:93:22:65:65:B3:6A:5C:66:C3:C7:4E:3B:51:C1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XejithRGkyJlZbNqXGbDx047UcE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:13:68:7d:35:5f:58:96:a5:aa:0a:02:f7:06:2c:c0:56:82:
b8:c0:28:c3:ec:5c:1a:4e:68:da:44:6c:f2:cc:76:c3:0b:e6:
4e:57:3e:60:d3:c4:00:95:54:70:20:4d:c3:1b:c9:54:9e:32:
48:cd:89:ba:95:9b:8a:e9:e7:67:d8:36:e3:a2:98:ff:25:72:
e3:8e:ff:7f:9d:c0:df:2f:63:69:0e:fb:59:16:00:fe:f2:79:
38:5f:28:cd:45:3e:b3:b2:78:d9:f4:05:17:d8:5d:7b:e1:70:
09:61:ef:63:c6:19:4c:30:17:dc:3c:3a:27:4c:87:94:d4:94:
cf:7c:c4:32:d4:3a:c2:e5:58:32:99:83:83:02:e0:2b:09:45:
67:d9:7d:46:dc:b9:37:94:c6:98:28:d9:f8:df:73:c7:72:f0:
23:f2:7f:83:a0:31:1e:7e:9f:c6:44:47:79:51:52:eb:2d:53:
ec:8b:d3:a2:d8:b5:50:34:e6:fe:59:6a:c8:5f:6c:0a:94:7c:
e1:bc:32:cc:47:ad:8d:94:c0:ed:a9:01:d5:fe:d1:36:ac:39:
24:55:88:25:a3:45:79:4f:73:95:91:e5:e6:14:66:be:18:85:
82:a2:11:d0:07:10:a9:ee:f7:8d:c6:c0:f1:f0:15:52:0f:d8:
d0:79:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:22:04 2025 by rpki-client