Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4dmAyXaSeQbh4qulnFaJQSlA4rw.roa
File: 4dmAyXaSeQbh4qulnFaJQSlA4rw.roa (raw, json)
Hash identifier: H4bx5R9ep8kWb3XyZdK6+/B9GgN/4i16EicBtD8a97c=
Subject key identifier: E1:D9:80:C9:76:92:79:06:E1:E2:AB:A5:9C:56:89:41:29:40:E2:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C0E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4dmAyXaSeQbh4qulnFaJQSlA4rw.roa
Signing time: Fri 23 May 2025 03:38:26 +0000
ROA not before: Fri 23 May 2025 03:38:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 03:38:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1D980C976927906E1E2ABA59C5689412940E2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:44:cd:95:1d:03:e6:70:87:87:1e:c8:1a:
34:b5:f0:f7:b0:20:a2:e2:36:a2:a4:99:b3:67:82:
e0:f7:68:df:34:ee:92:67:47:54:f3:1f:4d:e3:98:
dc:8d:b2:bc:b7:93:82:3d:46:e7:c1:b0:de:63:f8:
9d:29:81:d6:69:3a:07:da:9b:73:e3:fb:d2:ad:d8:
6c:d5:9e:9a:87:a6:ce:41:d3:7f:09:9e:3b:47:5d:
63:5e:0a:21:ff:03:d4:50:7d:f9:7b:98:92:37:95:
00:1f:0b:7a:f7:63:a0:9e:40:17:29:8d:d1:dd:17:
12:a0:3d:46:48:e0:2e:69:e1:6d:fb:7a:b7:08:66:
28:6c:72:7e:6d:8e:46:77:5e:2f:b2:b9:8f:53:9d:
f6:dd:f6:26:92:7f:f9:16:8d:d5:63:58:f3:0b:1d:
67:81:c9:6f:09:56:03:0b:a0:bf:45:95:54:68:e9:
c8:18:eb:ab:55:33:ee:f7:4a:26:9b:49:33:e4:cc:
eb:34:13:17:8b:c5:54:81:bd:53:10:dc:d3:2d:74:
60:1e:0d:04:3f:02:4c:2f:1d:63:30:1b:80:11:c9:
76:10:cf:1b:2d:34:8c:3d:84:84:65:3c:00:7e:05:
ec:bd:dd:29:2e:35:5a:d5:d0:3a:28:d0:c9:a9:f8:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:80:C9:76:92:79:06:E1:E2:AB:A5:9C:56:89:41:29:40:E2:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4dmAyXaSeQbh4qulnFaJQSlA4rw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:9d:4f:65:18:1a:fb:72:6c:14:d3:72:78:f5:ed:9b:a3:6a:
ba:b0:a2:4a:a6:58:2a:a8:73:ec:cc:d3:9e:da:fd:3c:b6:df:
7e:b0:34:a6:09:88:41:20:0b:cf:34:93:6e:69:56:41:cf:44:
18:1d:37:cc:c4:61:61:08:12:1a:8e:1d:54:62:83:b3:af:1d:
b0:eb:08:2a:a5:9e:40:f2:38:a1:0d:89:d8:9c:ba:ea:05:bb:
0f:02:f0:75:5e:bc:bb:99:78:fc:25:14:82:19:2c:bd:ac:3f:
73:48:d5:0c:d0:11:77:0a:49:29:58:63:50:3f:f2:dd:85:db:
0d:ee:9a:31:40:44:2c:2f:83:75:d8:62:47:0c:c5:54:e3:51:
77:de:03:58:0a:d0:1e:03:48:b0:7b:7c:f5:0e:a3:4d:5d:b8:
72:e0:b2:9b:51:fd:ac:cc:07:a0:1f:48:d5:0e:79:e1:75:a0:
e3:0c:f2:b4:a5:8d:7f:30:9a:0f:06:ca:59:c9:3f:7d:59:fe:
a1:1a:40:ee:29:66:7a:c4:88:98:88:b1:6f:72:d6:a1:43:4a:
17:d3:f1:a7:f4:98:59:6c:b2:a8:e2:04:d7:2a:2f:8e:b1:6a:
fa:c4:ac:5e:b2:c5:2f:5a:2c:4e:72:46:c9:1f:d6:0b:fe:c8:
86:13:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:32:36 2025 by rpki-client