Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/43RL-prylwWZFL45CNK69ctk3iI.roa
File: 43RL-prylwWZFL45CNK69ctk3iI.roa (raw, json)
Hash identifier: X33x6dC8M+t+SvZWZ8kkV+OD3TzfL6loDtmHB5/+d30=
Subject key identifier: E3:74:4B:FA:9A:F2:97:05:99:14:BE:39:08:D2:BA:F5:CB:64:DE:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1ED6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/43RL-prylwWZFL45CNK69ctk3iI.roa
Signing time: Tue 17 Jun 2025 04:40:04 +0000
ROA not before: Tue 17 Jun 2025 04:40:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7894 (0x1ed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 04:40:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E3744BFA9AF297059914BE3908D2BAF5CB64DE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:0a:ca:e4:de:aa:11:54:bf:17:57:e6:7c:
0b:c3:28:7d:dd:fe:95:de:f3:30:38:2f:d7:43:eb:
a9:91:b1:4e:26:39:e5:56:94:01:a1:73:da:e4:2d:
b3:31:71:5d:5a:89:67:0e:a8:30:0f:fa:f3:ef:94:
dc:f1:7d:11:7a:b7:74:85:1e:23:ab:fe:52:68:df:
ed:48:26:4e:ff:7c:b7:63:21:28:6d:03:ae:d3:ac:
2d:51:24:92:cd:4b:36:1c:48:41:27:78:f2:4d:72:
72:2f:38:65:8d:d0:85:9a:54:e9:cc:38:1d:73:87:
00:35:52:41:5d:70:b4:48:a2:50:12:4b:1f:ce:20:
32:6c:51:e3:a9:15:a3:e0:28:88:c3:49:3d:ea:df:
17:3d:8a:40:76:d3:54:30:2a:75:17:a3:d5:63:63:
4b:b7:be:f2:fb:e3:89:a2:49:8f:bd:5c:bb:ec:64:
e4:05:5e:0f:4a:70:9f:d1:e3:4d:27:30:86:70:96:
f4:bc:ab:f0:b9:a3:37:53:97:e9:93:02:c8:3b:a9:
c5:fe:f7:8e:36:32:55:16:c4:a4:c0:4d:8c:c1:ed:
de:e7:18:c3:a1:14:f0:c2:cc:e7:c9:b5:02:e2:2c:
c2:a7:26:e3:e5:9e:a7:5b:9e:be:7f:3c:8b:44:39:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:4B:FA:9A:F2:97:05:99:14:BE:39:08:D2:BA:F5:CB:64:DE:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/43RL-prylwWZFL45CNK69ctk3iI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:b6:6b:67:3a:bc:cd:1d:a3:ff:d7:ce:4f:56:e5:c1:39:2a:
f0:4e:8f:87:5e:d1:9c:f8:a8:90:79:5c:ac:b0:3e:5f:6a:b6:
88:28:d5:74:bb:9b:7e:4e:b4:f2:de:88:e2:4d:54:2a:54:a2:
b0:dc:9a:46:00:3a:fd:ae:44:49:48:7f:da:d0:0f:97:32:e2:
ca:70:d5:71:7c:31:0e:c0:ad:cd:46:c3:dc:a0:e3:f2:6c:38:
0e:dc:7d:44:a7:05:e2:ec:e2:b2:b9:73:0c:03:68:5a:f3:35:
bb:71:96:53:bf:4a:9c:7a:3c:90:71:33:19:28:fb:24:79:8f:
24:93:2f:15:19:ce:b0:44:70:cb:eb:9e:9c:3c:df:4f:67:cb:
cc:bb:45:ff:79:fc:71:09:b2:7c:be:66:f8:45:f1:ee:cc:cf:
ca:eb:fa:78:bc:62:dd:28:c3:67:4a:be:0f:d0:a4:00:82:52:
1d:e2:af:88:81:49:12:74:30:f6:c1:d3:c9:30:70:3d:fc:94:
f3:85:38:f1:ff:97:59:5d:01:b6:a8:92:39:cc:a0:b1:f7:28:
ba:e8:db:65:41:fc:99:d9:48:f1:af:bc:c2:83:0b:38:f9:bc:
b7:ff:82:6f:e0:0d:17:20:f3:4e:e1:b5:20:b7:3e:0a:56:04:
c2:20:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:11 2025 by rpki-client