Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/16Ad6DjAFpI5jQL1_hGmnth2WqM.roa
File: 16Ad6DjAFpI5jQL1_hGmnth2WqM.roa (raw, json)
Hash identifier: HKsRWe6u/nRT8Jc92Un0jqpYAqvAVA+4UOXB50PICG8=
Subject key identifier: D7:A0:1D:E8:38:C0:16:92:39:8D:02:F5:FE:11:A6:9E:D8:76:5A:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0182
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/16Ad6DjAFpI5jQL1_hGmnth2WqM.roa
Signing time: Fri 09 May 2025 02:07:46 +0000
ROA not before: Fri 09 May 2025 02:07:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 02:07:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D7A01DE838C01692398D02F5FE11A69ED8765AA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:e9:0e:be:46:16:9e:de:8a:21:8a:80:7b:
c1:1f:52:8a:15:7a:a4:69:2a:38:29:69:ef:a9:bc:
4e:3c:ab:0a:b9:70:11:62:c1:d2:04:a3:e9:6d:2b:
bb:00:60:9c:68:0a:22:06:ff:00:ca:bf:c0:c5:bf:
63:50:71:19:0d:4d:a4:ee:19:1c:dd:60:c4:e8:40:
24:73:a8:d3:59:90:ef:d2:66:f3:8e:6c:7d:4d:47:
50:bb:ac:bc:b7:cb:6f:fc:83:a9:69:65:48:38:ec:
b5:e1:d4:88:81:15:f1:a7:cd:6e:30:9d:fe:df:b7:
28:24:79:3e:50:9d:81:87:b7:94:02:49:18:13:e4:
fd:98:3d:3a:b6:16:6c:cf:1d:10:dd:87:ed:2f:96:
f1:06:93:f3:9a:bd:1f:23:12:db:b7:d4:50:21:85:
de:69:84:6c:93:46:50:11:e4:90:3a:cb:f9:46:25:
91:95:7a:8e:4c:69:0b:ce:3f:76:e5:67:b2:a7:89:
a1:b7:a2:b2:3e:1e:94:f1:2f:7b:aa:13:ff:d7:f9:
07:47:dc:84:a6:90:08:53:0e:fb:06:43:e3:31:09:
46:34:9b:70:52:6b:e7:8d:52:b1:f7:5a:56:e8:84:
7d:77:9e:53:96:0b:85:27:e2:a1:65:6a:a4:f3:86:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:1D:E8:38:C0:16:92:39:8D:02:F5:FE:11:A6:9E:D8:76:5A:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/16Ad6DjAFpI5jQL1_hGmnth2WqM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:1f:a7:7c:72:79:1b:40:42:83:29:e8:11:f4:04:f1:47:7e:
ce:19:fa:ca:91:6f:b7:6d:f5:72:d0:dd:7f:01:f8:c6:62:80:
d8:27:bb:6f:18:75:bc:40:02:a9:9c:01:37:dd:e5:cb:7d:a7:
8e:5e:5e:e9:e4:77:2b:53:c7:bd:c8:66:8e:1a:92:90:9e:80:
44:93:f7:8a:32:1e:a1:53:d1:5d:78:70:31:25:b7:83:4c:2b:
8d:fb:3e:d1:41:bc:e2:85:21:28:26:4d:21:10:12:df:a5:ea:
28:31:1c:70:bb:38:5e:2c:04:da:b1:0d:bd:25:7c:5b:09:e4:
5a:d1:88:73:2b:a9:f5:fc:78:4d:fc:da:9b:03:96:28:15:07:
d9:b8:26:34:bb:4d:70:8e:b1:7b:3a:7a:00:de:da:77:77:07:
09:ef:e9:cc:20:81:54:26:aa:18:80:a1:58:85:50:ba:fc:7a:
6e:db:36:24:5e:f1:a2:b0:0c:5c:33:b3:94:6a:b3:df:6b:0f:
1e:12:08:08:56:f9:55:76:05:63:f7:21:de:79:43:89:a6:fa:
6a:9a:cf:c3:08:08:1e:74:fc:0d:c1:05:e5:7f:d8:e9:60:55:
92:04:47:62:03:c2:12:e8:f5:bf:45:1f:9a:60:03:78:2b:f2:
32:25:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:04 2025 by rpki-client