Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/08U4BVJWGw5s2GGqKrAwRb8yWUY.roa
File: 08U4BVJWGw5s2GGqKrAwRb8yWUY.roa (raw, json)
Hash identifier: qAB+u3vTNdzox1GSYlfq7BRcMmjxGFoP+ev+Fu76r2A=
Subject key identifier: D3:C5:38:05:52:56:1B:0E:6C:D8:61:AA:2A:B0:30:45:BF:32:59:46
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F3A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08U4BVJWGw5s2GGqKrAwRb8yWUY.roa
Signing time: Tue 27 May 2025 09:08:48 +0000
ROA not before: Tue 27 May 2025 09:08:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3898 (0xf3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 09:08:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3C5380552561B0E6CD861AA2AB03045BF325946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:e8:40:90:c4:d9:27:85:2a:25:42:dd:cd:
f9:62:f1:8a:29:2e:13:93:af:a8:f5:32:9d:3e:f5:
34:5d:02:9e:6f:c8:30:75:70:5a:f9:24:cd:36:c7:
31:a7:a1:d6:df:76:2e:e8:63:75:9e:85:04:8c:de:
4c:ac:9a:dc:62:82:f7:70:ca:0f:6b:e9:0f:b0:ec:
b5:76:0b:36:b3:c1:81:8e:a9:91:b6:3a:c1:3a:9a:
4c:38:77:67:35:a1:ed:9a:68:7f:44:76:f1:96:d0:
8c:f2:8a:82:fa:f9:b7:27:2e:d0:da:35:1b:a0:53:
cf:ec:45:88:2c:e9:ce:a6:e2:6c:7f:f0:91:1c:b0:
fd:8a:63:94:72:8f:06:53:2b:aa:4a:48:06:19:a8:
a0:81:a4:9d:ef:01:0c:dd:ac:47:85:4b:91:47:37:
dd:9d:0c:03:08:69:7c:7f:e9:18:5e:7c:f6:dd:49:
47:3d:74:90:e2:00:ae:c1:11:25:60:05:29:05:c0:
a0:e6:72:90:31:65:ad:ab:1c:61:c0:42:9a:7d:6d:
e1:e6:fd:54:6c:52:98:b2:40:60:65:4b:db:38:68:
e5:a7:38:63:47:a3:14:76:54:d8:1f:bf:7a:d3:ac:
0f:84:9d:be:de:67:ed:61:c8:51:ad:fa:0b:24:2b:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:38:05:52:56:1B:0E:6C:D8:61:AA:2A:B0:30:45:BF:32:59:46
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08U4BVJWGw5s2GGqKrAwRb8yWUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:8f:ed:07:ae:67:86:5c:50:e4:b7:9a:e0:5c:01:e0:59:98:
a8:6b:2e:71:59:16:b7:f2:64:04:80:09:cc:f7:c3:ad:cb:0d:
e1:16:8d:d4:9e:fb:cd:9e:8e:ee:5c:c1:5a:7d:d3:cb:d7:67:
79:15:69:03:af:3d:f2:b6:00:d6:d2:50:57:50:44:14:d2:6a:
86:bc:60:20:7f:61:68:90:e6:eb:15:fe:15:75:2b:93:e1:df:
6e:9a:de:e3:c9:03:2f:3a:e4:8a:44:d9:ed:32:6e:de:78:d4:
af:90:6c:6d:79:4d:39:e3:90:c0:0e:cc:63:26:ad:6e:e6:b3:
57:26:8c:19:59:f6:48:76:7e:eb:2b:48:02:f6:16:83:ee:6a:
b4:29:73:ab:4b:f3:ed:69:8b:f9:a8:8a:73:57:2c:2a:f4:e4:
b0:f4:3e:b9:ef:f3:ee:a8:a8:ba:12:92:f3:8b:2b:d8:d7:e8:
44:53:f8:6c:1f:68:98:45:75:ee:7d:aa:0c:e3:94:65:73:b1:
11:88:00:7c:d5:39:f2:9f:54:5f:e2:c4:54:8c:3a:f7:92:0f:
03:34:05:26:0c:71:b4:6f:53:8f:e6:9e:88:96:43:e0:16:1d:
95:19:c5:50:71:32:72:06:84:45:40:f4:8c:6e:15:a0:b7:2f:
6a:21:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:41 2025 by rpki-client