Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2zsjzRhouBPmw8r6vG7qAgBU-gE.roa
File: 2zsjzRhouBPmw8r6vG7qAgBU-gE.roa (raw, json)
Hash identifier: saawzliGcJI6hV6u2s6DOasWb4jyF0kyMHzgrHtdKhM=
Subject key identifier: DB:3B:23:CD:18:68:B8:13:E6:C3:CA:FA:BC:6E:EA:02:00:54:FA:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BAE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2zsjzRhouBPmw8r6vG7qAgBU-gE.roa
Signing time: Thu 22 May 2025 15:38:36 +0000
ROA not before: Thu 22 May 2025 15:38:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 15:38:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DB3B23CD1868B813E6C3CAFABC6EEA020054FA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:15:df:15:bc:2c:67:2e:05:83:31:69:cd:
b0:55:26:fb:a3:2d:3a:f1:c3:c0:45:be:9e:80:10:
84:00:f3:d3:47:01:a4:93:74:b3:07:38:47:59:ae:
ba:9f:9f:be:c7:c8:c0:6f:ab:33:0c:22:34:10:ef:
60:33:a1:3a:9d:6e:d2:6e:08:72:a2:68:a7:6f:a1:
20:c3:07:7c:fc:51:e8:93:fc:d5:1b:8b:d9:36:13:
cc:4e:95:92:40:7f:34:f3:e7:9f:a0:48:c0:12:5c:
bd:e1:d4:99:7c:d7:c5:da:05:0c:08:74:43:da:f0:
4b:51:f5:8c:3a:09:11:2f:e8:ee:7a:31:58:41:37:
4e:78:e6:c2:e7:f4:50:b6:c0:e7:98:61:70:ad:60:
a6:69:01:23:1c:f9:0b:fe:86:5e:70:84:78:a4:cf:
37:be:05:5e:cc:74:4d:59:fb:87:eb:1b:1d:cd:ec:
9e:8b:2a:0f:a4:22:4d:dc:cb:ad:d0:b2:a1:f4:db:
58:d3:9a:3e:9b:64:95:97:55:fe:01:60:c2:f2:73:
35:1e:e4:54:cb:38:10:6e:50:68:84:1a:6a:de:82:
82:e1:bc:f5:ec:16:02:d0:74:43:6a:04:86:f9:79:
ca:35:c7:35:1d:48:69:22:5a:2d:49:5f:cf:39:e6:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:23:CD:18:68:B8:13:E6:C3:CA:FA:BC:6E:EA:02:00:54:FA:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2zsjzRhouBPmw8r6vG7qAgBU-gE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:a2:d9:0b:20:9a:92:ca:8d:f4:87:b5:87:01:ba:50:82:5b:
36:bb:7e:07:02:e2:87:e7:49:aa:47:4c:11:8a:b6:e1:df:eb:
f4:49:4c:d7:20:65:a3:57:51:b7:83:ec:4f:65:67:76:61:d0:
ec:cc:b5:1f:7a:ca:0b:c1:a9:6a:39:66:7a:69:bd:c4:2e:38:
85:91:34:9a:fc:b8:4f:7a:95:65:95:7c:84:6a:6f:5b:bc:f3:
82:11:45:2f:38:45:1d:b0:46:eb:33:89:b6:97:5d:97:9a:0a:
01:77:75:b2:21:0e:30:2f:64:30:47:01:9d:a7:60:f0:fa:ec:
e0:73:d6:18:c2:af:6c:a5:a3:cf:7a:f4:15:ac:ed:8d:7e:7a:
a7:c6:c5:7f:57:54:1b:a1:0a:6f:c2:26:b5:75:ef:b2:de:d0:
65:28:7f:59:0d:87:a7:bb:a5:a7:db:2e:7e:db:db:dd:a8:73:
ed:bb:57:ea:19:31:59:44:68:ac:56:77:a3:5e:07:7b:0c:fb:
9a:cc:89:3c:c0:dd:1c:91:b7:2a:ad:9f:8d:b5:99:ea:ca:2b:
d7:15:8b:c5:cc:95:46:5a:9a:c7:6b:cc:67:89:c0:d7:14:9d:
90:42:30:6f:c1:93:c4:8a:40:45:8d:da:b7:a5:0b:d2:98:e1:
66:ac:05:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIx
NTM4MzZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKERCM0IyM0NEMTg2OEI4
MTNFNkMzQ0FGQUJDNkVFQTAyMDA1NEZBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqrhXfFbwsZy4FgzFpzbBVJvujLTrxw8BFvp6AEIQA89NHAaST
dLMHOEdZrrqfn77HyMBvqzMMIjQQ72AzoTqdbtJuCHKiaKdvoSDDB3z8UeiT/NUb
i9k2E8xOlZJAfzTz55+gSMASXL3h1Jl818XaBQwIdEPa8EtR9Yw6CREv6O56MVhB
N0545sLn9FC2wOeYYXCtYKZpASMc+Qv+hl5whHikzze+BV7MdE1Z+4frGx3N7J6L
Kg+kIk3cy63QsqH021jTmj6bZJWXVf4BYMLyczUe5FTLOBBuUGiEGmregoLhvPXs
FgLQdENqBIb5eco1xzUdSGkiWi1JX8855vcvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2zsjzRhouBPmw8r6vG7qAgBU+gEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8yenNqelJob3VCUG13OHI2
dkc3cUFnQlUtZ0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAF6i2QsgmpLKjfSHtYcBulCCWza7fgcC4ofn
SapHTBGKtuHf6/RJTNcgZaNXUbeD7E9lZ3Zh0OzMtR96ygvBqWo5ZnppvcQuOIWR
NJr8uE96lWWVfIRqb1u884IRRS84RR2wRuszibaXXZeaCgF3dbIhDjAvZDBHAZ2n
YPD67OBz1hjCr2ylo8969BWs7Y1+eqfGxX9XVBuhCm/CJrV177Le0GUof1kNh6e7
pafbLn7b292oc+27V+oZMVlEaKxWd6NeB3sM+5rMiTzA3RyRtyqtn421merKK9cV
i8XMlUZamsdrzGeJwNcUnZBCMG/Bk8SKQEWN2relC9KY4WasBd0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:31 2025 by rpki-client