Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z5IUBLeVtNNDWP_iwxmyzIBoznY.roa
File: z5IUBLeVtNNDWP_iwxmyzIBoznY.roa (raw, json)
Hash identifier: Fw2M849QdZT8hGi0quwb/Klj1UK5lbrpulPMwYlMAeE=
Subject key identifier: CF:92:14:04:B7:95:B4:D3:43:58:FF:E2:C3:19:B2:CC:80:68:CE:76
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02C2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z5IUBLeVtNNDWP_iwxmyzIBoznY.roa
Signing time: Sat 10 May 2025 18:07:52 +0000
ROA not before: Sat 10 May 2025 18:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 18:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CF921404B795B4D34358FFE2C319B2CC8068CE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:ed:d5:0d:6b:af:6c:c4:61:89:9e:45:f5:
c2:a7:5a:f2:01:b0:9a:90:c4:5f:10:55:65:6f:20:
76:fc:9d:63:c3:f2:1a:58:9b:fc:93:72:df:49:b5:
17:69:87:9e:34:02:a6:98:fc:9f:30:ac:54:b9:25:
67:50:9e:40:f9:cd:76:85:7d:f1:94:0e:4b:f2:cc:
2a:d7:a6:0c:9c:63:ee:d3:d5:2b:fb:8d:b8:ba:01:
41:d3:df:12:d1:72:3d:8b:71:6d:58:2b:0a:ed:6f:
85:53:0b:b1:b3:a9:58:d3:40:53:07:0f:d0:33:f8:
66:e7:17:1f:d9:54:97:81:25:94:f8:67:e7:69:60:
3a:57:2d:e0:4b:11:01:e1:92:9d:60:ba:18:90:72:
ae:c9:0e:38:f5:2e:da:ff:de:58:5a:01:42:50:23:
4e:6f:a0:ec:d1:ce:18:b3:ec:c5:df:39:e6:99:2f:
49:aa:ef:26:81:17:e1:46:d2:9d:93:24:04:48:1e:
ca:05:3b:06:06:5a:91:e0:65:b2:91:b3:91:21:f1:
b7:5a:fc:a6:75:19:a7:1d:91:81:95:d3:e6:63:c7:
b9:78:99:41:bf:18:00:e9:88:3f:ca:11:fd:5e:0b:
7d:1f:e7:20:cd:99:4d:6e:10:27:fd:45:d4:f5:f4:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:14:04:B7:95:B4:D3:43:58:FF:E2:C3:19:B2:CC:80:68:CE:76
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z5IUBLeVtNNDWP_iwxmyzIBoznY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:fe:07:fd:bc:6e:a8:db:0c:c4:77:21:8c:6c:e1:69:b9:c7:
52:bb:c6:f7:74:f8:44:4f:12:77:b9:95:e6:19:10:79:73:30:
aa:2f:e0:b0:b9:44:c1:f1:15:a3:b4:02:d9:20:13:77:ef:5b:
77:c5:b5:a7:69:92:f2:2f:c8:68:23:c5:32:fd:83:4f:0d:03:
ed:27:0c:a8:ec:34:b3:f6:ee:5d:ef:d4:be:1e:82:a7:6a:52:
c6:38:a4:c7:3f:38:35:86:be:04:06:e8:92:24:6e:73:87:3c:
90:bb:36:da:0c:e2:fd:1d:56:e7:01:fb:0d:5b:5f:b5:81:81:
e2:94:da:59:fb:06:1c:c8:28:ec:65:1a:e3:0d:26:83:0a:57:
a7:58:18:93:1e:92:4c:31:ab:24:82:e1:37:62:03:b1:e7:ed:
cd:5c:8f:05:e3:12:30:7a:21:45:19:40:82:4b:13:6f:2a:b4:
d8:6e:42:53:91:6e:ee:17:16:dd:b2:03:b9:6b:d6:42:71:b3:
8a:48:e1:53:ca:99:a0:5e:dc:aa:30:f9:f1:1b:22:bb:24:e0:
88:5e:e8:6c:14:6a:17:f4:e9:70:88:25:ba:c8:bc:fb:64:2c:
89:9c:91:12:15:bb:c3:36:ad:19:06:b6:88:41:08:e4:cc:68:
82:c1:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 09:47:43 2025 by rpki-client