Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/66HhvSmmrjVRjSm6BloGtzPH2ac.roa
File: 66HhvSmmrjVRjSm6BloGtzPH2ac.roa (raw, json)
Hash identifier: DmYvO4nV1khvrQMYqtYUy5uvMdrmEQ2/7efld0EwZ68=
Subject key identifier: EB:A1:E1:BD:29:A6:AE:35:51:8D:29:BA:06:5A:06:B7:33:C7:D9:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DBE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66HhvSmmrjVRjSm6BloGtzPH2ac.roa
Signing time: Sun 15 Jun 2025 17:39:59 +0000
ROA not before: Sun 15 Jun 2025 17:39:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7614 (0x1dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 17:39:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EBA1E1BD29A6AE35518D29BA065A06B733C7D9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:27:06:16:eb:76:f5:b3:9e:0c:a2:ca:4e:
77:28:c2:1b:d6:1f:a2:97:d1:f9:90:e1:3e:3d:42:
57:4c:b2:11:1e:0e:e1:9c:cf:b5:bc:7f:96:28:5a:
8c:be:5f:04:4f:c9:4e:32:14:c2:1c:35:3b:36:a9:
e3:66:b7:91:8d:76:48:07:a3:ff:08:e3:c8:26:22:
bb:eb:41:27:b1:f7:66:c2:11:29:ed:03:24:f6:61:
05:0f:b1:a5:99:bf:75:06:35:64:89:1e:7f:f4:11:
3a:56:51:37:fa:f9:e2:39:62:a4:5d:94:19:8d:73:
43:e7:3c:cc:2e:db:93:70:77:c7:d6:5a:07:b6:17:
cc:88:a1:f9:13:54:43:4e:dc:c2:b8:f2:67:eb:fe:
ff:d2:dc:ab:71:ef:25:5e:87:86:43:3b:46:26:40:
bd:73:21:5e:fc:7a:08:d1:b7:c5:c2:5e:d3:66:27:
c7:e4:03:33:27:78:44:d8:81:68:41:84:cd:ab:88:
c4:38:1c:43:3f:38:65:76:4f:a0:28:a8:d0:cc:7b:
70:7e:a8:0b:44:3f:2e:a2:a3:b1:8f:cf:2d:d4:df:
0c:d8:65:82:25:f0:75:5c:ba:1f:68:4d:f8:78:1d:
0a:9c:48:42:ef:67:8d:72:49:5b:ff:fd:56:e7:34:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:E1:BD:29:A6:AE:35:51:8D:29:BA:06:5A:06:B7:33:C7:D9:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66HhvSmmrjVRjSm6BloGtzPH2ac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:d0:a7:22:18:3e:a3:78:23:fa:3c:8f:3b:64:76:e3:5c:0d:
db:67:63:bc:3f:68:fd:bc:26:af:dc:47:40:9d:7c:5c:54:21:
40:99:1e:e9:cc:99:24:f4:33:58:3d:91:fc:9c:13:48:b2:f9:
4e:cb:79:cf:9a:0c:ae:ff:72:f3:4f:46:c8:ff:63:76:c5:08:
d6:e2:25:85:5d:78:21:49:61:5b:54:43:1a:5e:25:b5:09:63:
7c:27:dc:e8:58:05:d3:f2:22:54:15:db:7e:c2:62:b8:ca:7b:
96:d6:a3:9b:19:de:64:87:79:19:fa:a1:eb:1b:5d:de:ef:d2:
71:75:8c:1a:12:a8:83:47:42:bd:e6:59:6f:92:e2:02:c6:fa:
65:e5:b2:74:fd:f7:49:7f:33:c4:6c:37:ad:98:46:47:14:2b:
8e:4f:a4:fa:a8:0c:21:c9:84:86:31:8f:c0:03:22:fe:28:82:
68:09:91:27:32:06:02:29:23:78:cb:ca:5f:29:a8:11:01:34:
42:d2:b6:5d:b6:27:aa:60:56:a0:42:8a:78:2b:03:ac:77:a4:
a1:33:b7:58:7c:5b:49:2c:2e:67:57:43:a1:4a:29:77:b1:bc:
73:a3:e2:aa:43:f4:17:39:00:8d:1e:c5:f2:63:47:a3:21:c7:
72:1d:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:20 2025 by rpki-client