Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xUokF-67zmKYnE6A2cM31QHWgqI.roa
File: xUokF-67zmKYnE6A2cM31QHWgqI.roa (raw, json)
Hash identifier: 3ZDzjnN5zNND+WNWWvf+ohjUO7cWjCgku5vu36xpyfU=
Subject key identifier: C5:4A:24:17:EE:BB:CE:62:98:9C:4E:80:D9:C3:37:D5:01:D6:82:A2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 035E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xUokF-67zmKYnE6A2cM31QHWgqI.roa
Signing time: Sun 11 May 2025 13:37:52 +0000
ROA not before: Sun 11 May 2025 13:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 13:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C54A2417EEBBCE62989C4E80D9C337D501D682A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:01:1f:c8:e2:b5:6f:f9:b1:cf:b0:67:a0:
d1:4f:12:51:f0:85:d6:0d:46:b3:17:d9:67:71:cd:
bf:75:57:14:c8:6b:aa:9f:ec:cf:ba:2e:3b:b8:90:
7e:ca:82:4b:52:35:4d:ab:3e:45:d5:41:df:2f:29:
63:83:52:81:f4:fa:f0:96:b4:75:75:4f:35:a3:ab:
69:fc:c3:5a:9c:e5:17:59:a4:50:f1:75:42:b5:49:
a6:ba:80:52:eb:d1:b2:51:cb:9b:b5:f6:b6:c1:73:
d6:4b:02:07:58:44:56:e0:94:90:91:a0:55:f7:91:
3d:3c:ee:f7:e9:01:81:7a:5e:8b:05:77:80:b6:ba:
c6:3c:3b:3a:ba:ab:18:07:d9:f2:2f:2c:eb:31:ba:
6b:b9:00:1b:23:d6:54:db:65:b4:a5:5d:d3:0e:31:
2a:fe:0d:21:77:e3:68:ac:a2:61:12:cc:3b:f8:63:
f1:81:b4:f8:9c:5d:ff:4c:dc:48:71:08:de:6e:3f:
b0:13:b9:33:cf:11:59:f6:f5:4f:c7:ea:15:cb:11:
24:6a:58:18:c7:98:08:66:07:35:53:a7:1b:bf:69:
7c:e6:50:b1:f2:67:8e:e2:aa:c4:89:89:89:21:d9:
c1:15:cf:70:30:68:d3:90:cb:29:a6:f1:d2:0a:c3:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:24:17:EE:BB:CE:62:98:9C:4E:80:D9:C3:37:D5:01:D6:82:A2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xUokF-67zmKYnE6A2cM31QHWgqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:34:7b:30:ea:0f:1b:2f:ab:ea:e2:8e:e9:b4:65:c0:c6:6f:
f8:59:2a:19:3e:84:30:e0:d5:b1:f0:0b:76:05:e5:d4:74:b6:
ba:d5:60:59:e8:56:e0:07:0f:0b:83:24:55:54:a6:c0:0c:64:
19:39:c8:fa:62:e3:c7:d4:76:67:e7:60:04:56:e3:a6:ff:96:
d4:37:99:44:e8:b0:0f:2e:41:c1:af:6d:14:c2:42:d1:6b:59:
56:d1:ad:ae:03:b9:4a:85:8a:37:b8:34:14:91:e8:41:de:e5:
6d:3e:6c:23:28:5f:2d:f2:53:a3:b8:e5:cc:71:88:5e:5f:e2:
22:85:c0:88:f6:40:63:81:0e:26:bd:39:95:dd:40:dd:1f:a3:
80:bd:7f:89:06:da:42:91:d4:27:d4:f2:a7:3f:df:1d:8a:c5:
7f:d5:92:a8:d9:0a:64:30:86:67:3b:5b:c9:73:db:18:d6:a8:
3c:49:a2:f9:b1:8e:49:41:c1:bf:ae:a0:ff:27:55:d6:2f:b7:
3b:cc:b4:99:f6:b2:e7:07:7b:00:ba:b5:13:58:b3:ce:f1:f9:
79:22:ea:8e:72:0e:ed:9f:db:82:58:d3:1d:f2:63:0a:90:13:
c4:77:e6:09:6d:87:e0:0f:ae:cd:d9:9a:bf:62:09:58:bd:dc:
d6:e5:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:12 2025 by rpki-client