Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3EEqls6M2XwjLSgI-5kEeTu7TGc.roa
File: 3EEqls6M2XwjLSgI-5kEeTu7TGc.roa (raw, json)
Hash identifier: BSGadqPQGFvqidMhg94X7gMDzEVvw3GX6fXPTHhkyDY=
Subject key identifier: DC:41:2A:96:CE:8C:D9:7C:23:2D:28:08:FB:99:04:79:3B:BB:4C:67
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2476
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3EEqls6M2XwjLSgI-5kEeTu7TGc.roa
Signing time: Wed 25 Jun 2025 04:12:16 +0000
ROA not before: Wed 25 Jun 2025 04:12:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9334 (0x2476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 04:12:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DC412A96CE8CD97C232D2808FB9904793BBB4C67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:f6:20:62:0f:3a:02:d2:d0:cb:83:33:ac:
a9:93:26:6c:5b:7c:33:f5:79:06:15:95:01:db:60:
78:d1:10:4f:cf:01:c2:11:98:bf:7c:8f:64:a9:4d:
28:d2:93:c7:0f:69:7d:da:7d:9e:1b:ea:89:56:34:
f1:d7:b6:43:1e:d1:80:78:08:13:d9:d6:9c:66:7e:
a5:cd:f3:52:97:f8:ad:bb:73:c0:a9:3b:2c:a5:cf:
07:77:74:5c:e9:42:ac:f9:b8:8b:3c:81:ef:44:04:
d3:4f:eb:7f:5d:29:cb:24:05:1e:22:73:84:52:20:
08:62:7d:79:27:93:41:3f:92:c8:cf:5e:79:d9:f8:
1b:78:9a:33:8d:8c:9d:ab:ff:c6:99:3a:18:da:fd:
ca:cc:8b:c9:88:8d:86:a1:7e:9e:3e:61:52:41:5b:
e9:86:3f:d3:12:09:55:f9:e1:6b:76:91:ba:98:b8:
8c:02:2f:76:bb:ea:a3:e8:3f:65:e1:be:ed:b4:c8:
89:ea:7c:bb:82:b8:8b:0b:4f:e4:e6:48:00:16:15:
8f:35:0e:30:e2:b9:19:26:2f:27:8b:6e:07:c7:da:
5e:5a:c5:e6:a0:87:2f:99:84:39:05:83:0c:46:40:
18:52:7d:7e:d1:03:ee:26:71:20:d7:00:44:1b:02:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:41:2A:96:CE:8C:D9:7C:23:2D:28:08:FB:99:04:79:3B:BB:4C:67
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3EEqls6M2XwjLSgI-5kEeTu7TGc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:e9:9c:00:ad:35:7b:24:f2:aa:92:d1:ed:6c:4f:bf:ff:97:
cd:89:1d:c3:b1:3a:bf:a9:fd:41:84:ff:b1:51:25:98:a4:60:
0f:56:c8:87:3e:54:76:2c:1b:32:bb:93:9a:5f:72:9e:f0:15:
64:82:e7:2b:f1:4e:16:f2:84:2d:0d:ef:11:32:a5:26:47:58:
c7:07:f2:95:5e:ae:90:0d:18:ac:52:4f:9e:30:c4:2d:d2:d0:
e4:9b:12:70:4b:b4:05:82:70:b4:db:bd:5a:bc:f7:69:21:00:
f0:85:0f:4b:ad:ed:12:50:64:bd:95:c7:3c:aa:ba:48:10:4e:
b1:94:dd:81:cc:31:62:ab:7c:9d:d3:b2:c2:61:97:21:de:17:
da:3d:3a:63:7c:6c:2b:c3:e9:62:9c:0b:e2:ae:8f:36:c0:28:
97:21:4b:f7:65:1c:45:3d:69:3b:8e:0c:04:6d:3c:7b:4d:6f:
02:0c:d2:2f:83:08:ab:ab:32:14:9b:c8:fe:65:32:82:a6:67:
f9:5d:a4:76:0d:72:6a:4e:7a:4e:8f:56:6f:b3:67:ab:e3:8d:
f7:2b:09:83:80:9b:5b:2c:a1:50:16:4c:52:47:c6:1f:51:18:
66:7f:1c:ad:2a:1f:ac:6a:a8:68:bb:27:84:c3:9c:78:c7:92:
49:52:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:17 2025 by rpki-client