Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ypLDRwjuNVhIY2We89CpcNwaJX0.roa
File: ypLDRwjuNVhIY2We89CpcNwaJX0.roa (raw, json)
Hash identifier: Z0MTELMADpIn5woe1wRMLStcnQPkq4qF+mzt08NcD3o=
Subject key identifier: CA:92:C3:47:08:EE:35:58:48:63:65:9E:F3:D0:A9:70:DC:1A:25:7D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0192
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ypLDRwjuNVhIY2We89CpcNwaJX0.roa
Signing time: Fri 09 May 2025 04:08:17 +0000
ROA not before: Fri 09 May 2025 04:08:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 04:08:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CA92C34708EE35584863659EF3D0A970DC1A257D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:62:f5:53:dd:0c:58:2c:1a:97:8f:ab:5e:
0e:46:11:fa:f9:bc:fd:26:9a:72:1e:b9:03:72:9a:
ad:ba:9a:b9:0a:2c:6c:d5:e6:5a:9f:ea:3d:2d:eb:
26:12:01:30:9f:12:46:c5:60:b2:02:6b:c0:8d:a2:
c8:9f:ca:ff:23:f4:3e:34:97:43:c8:ff:b1:08:8a:
91:7f:86:38:0f:b7:93:b6:62:29:f1:0e:d0:cc:62:
61:13:3a:c2:88:81:e3:55:4b:00:77:c5:fc:c2:64:
f7:ef:99:0c:9a:4f:71:ca:d2:b7:e2:76:d1:7b:f0:
de:ab:0c:53:2b:f1:75:ce:22:03:d5:2c:c4:9a:11:
ea:87:81:a2:9d:4f:f7:23:92:93:dc:dc:85:49:78:
0e:a0:e3:cc:62:af:14:99:05:db:db:84:b4:eb:27:
ae:81:b9:82:4e:5a:11:c9:94:52:97:44:f1:75:01:
80:6f:0b:30:18:8c:c5:7a:1a:6a:73:5c:d6:2c:a8:
ca:1f:2a:ca:b0:a4:87:02:e2:c6:cc:e5:d2:3d:38:
94:b1:6b:ed:a6:6a:c8:40:ad:c8:2f:52:ca:5e:d1:
dc:0c:06:ba:41:6a:6c:35:2e:40:46:07:a2:44:04:
c4:86:4c:9d:1c:c9:a5:b5:7e:91:3a:81:bf:01:00:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:C3:47:08:EE:35:58:48:63:65:9E:F3:D0:A9:70:DC:1A:25:7D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ypLDRwjuNVhIY2We89CpcNwaJX0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:18:3c:36:6a:68:d5:d7:a2:56:e4:7a:09:81:cd:8a:f0:2a:
c2:e6:13:19:6f:d3:1a:ac:c8:3e:89:d6:db:ab:50:dd:96:c8:
6c:46:61:50:d7:e4:fd:26:06:f6:20:25:b3:ee:90:03:7a:57:
42:77:26:79:78:1d:56:22:f1:7a:a3:06:4c:3f:ce:3c:f4:ed:
69:fd:9e:5d:c8:d0:9a:1e:b3:3e:94:96:d4:2b:c6:2d:24:5d:
c1:4d:b5:18:54:ef:72:f2:4b:6b:84:1a:b9:5a:b6:fb:74:02:
d8:03:a6:34:39:a4:3d:a4:cc:b1:2c:28:7d:81:ee:e8:e6:24:
00:16:8f:04:6c:83:9f:e3:4b:1c:67:9b:da:ee:de:6f:6f:f2:
cc:4d:a4:b0:8c:ea:4c:39:3c:85:eb:09:46:dd:05:92:05:56:
3c:b9:ee:20:fd:2f:66:93:d7:76:d2:52:28:ea:ee:4c:ef:6c:
43:a5:be:c3:ae:7f:d7:6d:03:5d:f5:7f:37:b7:e1:35:bb:20:
8b:73:ce:df:fa:b6:6a:93:cc:82:df:72:26:f6:55:8c:b1:f8:
73:61:17:7e:cc:f7:df:54:5e:83:3e:6b:6a:95:8b:99:90:1b:
7a:19:e1:4c:86:af:1c:e8:48:1d:09:58:a9:f2:4f:1b:65:d5:
ec:b3:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:37:20 2025 by rpki-client