Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/18UQdAg5KbwAVbdZA3qMM5U414A.roa
File: 18UQdAg5KbwAVbdZA3qMM5U414A.roa (raw, json)
Hash identifier: SwFyb5LJiBlkvUeXZ3PUth+pU+isPJi9hSQf7yRicUA=
Subject key identifier: D7:C5:10:74:08:39:29:BC:00:55:B7:59:03:7A:8C:33:95:38:D7:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1386
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/18UQdAg5KbwAVbdZA3qMM5U414A.roa
Signing time: Mon 02 Jun 2025 02:39:11 +0000
ROA not before: Mon 02 Jun 2025 02:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4998 (0x1386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 02:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D7C51074083929BC0055B759037A8C339538D780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:0d:bc:dc:62:2e:71:c0:22:bf:53:30:10:
ef:bd:61:77:93:93:37:fb:84:cd:ec:84:f5:e5:59:
38:14:62:bf:bd:39:52:a7:a9:31:fb:d2:ff:98:da:
10:56:d5:d0:76:49:d8:44:4c:ef:74:99:a9:98:8b:
4b:b8:f0:5d:2d:9a:f6:72:6b:48:1d:dd:b6:f0:e0:
8f:1d:43:77:14:32:33:ff:4e:80:52:ca:f0:f8:71:
98:62:75:a4:d1:73:40:85:d0:37:58:cd:2c:2a:99:
c6:56:f3:62:bf:43:bb:03:81:d6:71:76:8c:1e:ca:
d9:4f:31:03:ee:94:7d:d9:9d:5c:f4:0e:0e:b1:12:
44:df:a3:3a:15:58:61:90:6b:9d:07:4b:89:b7:11:
46:6e:71:c7:ce:31:1b:30:d0:6f:26:0b:e2:db:c6:
30:93:2a:0f:5f:5a:58:a1:df:cd:df:d0:70:ec:09:
b0:9b:2b:ce:74:86:1a:63:be:1f:53:69:05:e2:cb:
b8:f9:2d:5c:de:f6:3a:a2:7b:9b:e1:47:ab:56:85:
03:a6:32:89:87:37:ac:e4:0e:25:e6:5a:a8:36:49:
68:19:b8:aa:eb:c1:bf:b6:ab:20:11:4b:f1:05:da:
4c:a0:cc:ff:f6:58:59:a6:d2:43:ea:2c:47:4c:7f:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C5:10:74:08:39:29:BC:00:55:B7:59:03:7A:8C:33:95:38:D7:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/18UQdAg5KbwAVbdZA3qMM5U414A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:3f:1a:7c:c0:de:ca:6b:ac:86:43:72:a4:c0:a7:bc:99:6f:
77:d8:1b:0f:3c:49:6b:13:e1:66:1e:04:d7:86:b9:be:93:73:
02:5a:83:53:47:c8:e3:e8:5b:18:08:17:13:04:64:18:1d:48:
e7:5e:d8:7a:9e:e8:1b:e4:b2:98:bd:70:89:a5:70:6e:d9:4b:
2d:0a:5b:0c:ed:0b:62:83:b6:53:aa:03:18:bc:af:9f:ee:ba:
ec:94:92:da:c0:c7:da:d8:b3:c7:c8:75:b6:8d:0a:54:f8:dd:
dd:5b:ae:62:52:03:e3:77:4c:d2:d0:04:cc:de:81:12:5d:84:
f8:1a:8c:44:83:37:c9:ab:cd:a5:28:a8:53:89:36:91:f8:05:
2e:1f:b1:21:69:e6:13:54:42:6c:da:0e:9b:d7:02:6b:16:ee:
5d:b9:a8:33:db:ff:73:ba:5d:e9:00:89:52:39:37:22:a4:e9:
9e:9e:e9:54:60:f9:ac:1b:91:8b:90:bd:54:a6:91:1c:d5:98:
e0:7b:00:ee:12:4e:a0:bb:00:66:92:c5:2d:1b:af:7d:14:7a:
41:48:7d:b9:a9:eb:92:cc:70:53:b4:2f:70:5f:16:b1:00:fa:
5b:28:8b:a6:68:d6:e3:51:64:c9:8a:34:7b:3b:39:af:97:c8:
63:69:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:54 2025 by rpki-client