Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o_c-w5nluzDDSQXkFUmYDMQdyjg.roa
File: o_c-w5nluzDDSQXkFUmYDMQdyjg.roa (raw, json)
Hash identifier: uVaoCpxgP1ygHZW+Z8SOnpb2LvMpqXxYY8jSs9Ie660=
Subject key identifier: A3:F7:3E:C3:99:E5:BB:30:C3:49:05:E4:15:49:98:0C:C4:1D:CA:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o_c-w5nluzDDSQXkFUmYDMQdyjg.roa
Signing time: Thu 08 May 2025 03:37:40 +0000
ROA not before: Thu 08 May 2025 03:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 03:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3F73EC399E5BB30C34905E41549980CC41DCA38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:32:a6:8e:15:13:e7:9f:59:0c:39:02:39:
b5:91:a8:ae:b2:0f:8d:9c:05:1e:53:1c:0b:17:72:
79:e6:2f:a0:c6:65:2f:96:5a:07:e6:d5:ec:c8:27:
9d:b9:f3:9d:44:02:dc:eb:e4:31:9b:30:25:ee:dd:
13:a5:15:47:3a:a3:d8:6d:97:7e:c7:55:1d:3b:5b:
48:9d:50:a5:3e:a4:4a:f1:72:80:ae:67:04:08:64:
f4:22:e7:2b:61:25:9f:45:47:9a:5a:55:c0:1c:a7:
78:04:62:01:52:c5:bb:6b:55:de:cf:2f:11:40:61:
f6:48:b8:e8:5f:0c:0b:aa:93:c3:75:b6:aa:23:01:
c4:d8:d5:0f:93:1b:38:8a:d9:58:43:af:e7:5e:62:
59:39:0a:07:16:e4:2b:a1:b9:b0:6d:19:29:ad:11:
36:4a:d2:4a:4a:c4:01:90:a3:50:86:13:c4:38:f1:
5a:9a:2f:55:4a:03:9b:85:b2:2a:12:4f:b0:88:72:
cf:6b:37:52:f4:58:57:ee:49:b8:d2:9c:ef:b5:bc:
83:64:da:b2:39:a3:07:e0:3e:59:cc:03:5f:09:36:
93:5f:1c:53:1e:7a:d3:d8:da:d6:87:30:1a:7f:16:
98:56:a4:63:7f:d6:af:ab:75:ce:44:26:fb:b8:94:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:3E:C3:99:E5:BB:30:C3:49:05:E4:15:49:98:0C:C4:1D:CA:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o_c-w5nluzDDSQXkFUmYDMQdyjg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:77:c4:e0:ef:f3:74:73:29:0a:11:30:aa:30:30:54:94:1e:
2b:25:1b:79:6f:c3:6a:cc:9c:0c:be:d4:ca:be:2c:97:a3:46:
9c:7c:24:a3:89:5c:38:96:36:14:12:95:62:1f:3d:d5:7b:51:
3a:95:c3:fc:e6:7c:23:58:48:4a:0b:50:e2:57:d0:e4:64:10:
72:3c:77:7c:ed:8c:03:8a:53:29:72:4a:7e:66:82:83:f3:c4:
1e:dc:c7:37:9d:08:57:80:46:a0:d5:28:50:e3:d1:16:ea:e6:
d3:bc:1b:d4:dc:69:51:f3:68:cc:8a:c8:b5:ef:dd:43:7b:9b:
01:e2:1c:35:84:0f:fd:ad:46:22:e0:fe:86:c2:22:fd:ce:a7:
2e:d6:94:f0:c2:f3:30:90:39:92:39:12:2e:31:5e:cf:04:b9:
69:e6:82:ae:68:23:92:96:a1:a4:eb:2b:d1:39:c3:8e:95:b5:
f3:9d:97:03:d9:15:70:8f:5e:93:3c:07:ed:dc:14:44:9a:2b:
6a:ec:28:00:74:87:b4:7b:89:37:1a:cb:01:45:9c:85:c3:bf:
24:8e:ec:05:3d:5c:7a:8c:d9:e3:46:4a:21:58:f0:20:fb:47:
f9:23:36:72:b8:dd:bb:61:bd:3f:e0:c4:4e:10:61:de:2d:f6:
da:ee:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:17 2025 by rpki-client