Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/31rbQW8I-FLXAkvxplJjViUVuVA.roa
File: 31rbQW8I-FLXAkvxplJjViUVuVA.roa (raw, json)
Hash identifier: hVVyBFYrF4cOOeiLU4VS9tyheo/HAD5vHgbBwLMs3LM=
Subject key identifier: DF:5A:DB:41:6F:08:F8:52:D7:02:4B:F1:A6:52:63:56:25:15:B9:50
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/31rbQW8I-FLXAkvxplJjViUVuVA.roa
Signing time: Mon 23 Jun 2025 00:41:56 +0000
ROA not before: Mon 23 Jun 2025 00:41:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8922 (0x22da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 00:41:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DF5ADB416F08F852D7024BF1A65263562515B950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:60:c6:f1:d4:2e:94:d2:fc:8a:dd:81:0e:f5:
27:92:c9:ce:b1:47:fc:26:17:79:c6:51:7a:c5:cd:
1c:5f:4e:4c:dc:d6:c3:2f:5e:21:c0:a9:71:03:09:
ec:95:5b:28:d8:c7:6a:01:ac:38:55:08:d6:b2:14:
36:61:2d:b4:bc:19:84:9d:01:af:a4:37:b5:9e:e9:
98:ca:50:d4:73:23:dc:25:5a:ce:f9:1e:2f:e4:98:
1a:79:32:d3:00:24:a5:63:54:9e:eb:69:6d:39:16:
49:76:ea:d0:99:81:11:40:9c:87:04:18:ae:9a:06:
a8:ae:0b:c0:a1:23:19:cd:43:b4:26:88:1b:91:62:
a6:24:52:7c:e4:f0:35:85:f0:76:ef:88:66:df:1a:
27:5d:9a:44:2d:39:21:91:35:3a:36:3a:e8:93:fc:
f9:32:19:f6:da:ba:7c:5b:45:ee:fe:76:e9:23:38:
2b:4e:2a:bd:c1:9a:6d:76:7f:ed:f1:9e:9e:7d:f4:
9f:f1:bb:02:41:cb:eb:47:9a:51:52:6d:12:57:d4:
a0:33:3e:97:f9:f8:af:c8:e0:1c:be:25:8c:39:7f:
16:89:d3:52:cc:35:86:bc:31:78:ae:ea:ad:d4:29:
b1:08:f7:85:18:81:d0:51:0d:ef:04:5f:02:51:e8:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:DB:41:6F:08:F8:52:D7:02:4B:F1:A6:52:63:56:25:15:B9:50
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/31rbQW8I-FLXAkvxplJjViUVuVA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:83:7e:10:e7:a2:fe:bd:b2:bc:ec:a0:61:3d:f9:cd:fe:c8:
23:f8:2d:46:f6:1e:4c:23:44:5e:56:51:3d:47:cc:b7:78:03:
4b:1c:61:9a:64:6b:19:b5:c8:f3:c7:8a:cf:48:13:12:b7:e0:
fa:30:06:c3:36:68:9c:e0:f2:0b:8e:2f:e3:64:93:77:d5:3c:
93:3f:76:6b:88:8f:31:ba:ba:ed:4f:e5:2f:76:61:01:92:96:
3c:97:9f:c2:6a:a7:87:36:36:3b:b8:f7:d7:78:b8:c3:96:f6:
69:d1:c9:fc:f4:fe:11:06:28:ff:ad:2d:db:5a:2b:fa:5d:9d:
24:1c:49:0c:85:35:cf:a9:3f:69:cb:a1:b0:f5:b0:0f:20:fd:
2c:a8:4a:47:82:5f:51:45:ec:b7:0e:a7:e5:75:5b:be:7d:d0:
1f:8b:fa:ab:db:95:b0:8f:04:20:98:b3:42:3c:9c:0f:95:bf:
95:8a:e3:db:7c:a9:ea:c7:2f:bf:50:29:01:d5:a1:20:a8:ce:
f6:52:74:e7:98:09:35:a8:64:52:89:42:e0:69:59:39:dd:dd:
41:8d:9e:b4:14:42:3d:a6:38:ab:68:6b:f2:9d:79:3d:af:e4:
0b:9f:5e:73:9b:1d:75:1a:9d:51:ae:22:78:ce:54:a6:d5:c5:
62:fe:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:16 2025 by rpki-client