Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/66pW8PLLUNPq2jZmfg13yz1jOp0.roa
File: 66pW8PLLUNPq2jZmfg13yz1jOp0.roa (raw, json)
Hash identifier: 9BHOWny3WSSX8ILcheUq2ZjUV/Cs0+YQ/CCF1r7MCeQ=
Subject key identifier: EB:AA:56:F0:F2:CB:50:D3:EA:DA:36:66:7E:0D:77:CB:3D:63:3A:9D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 242E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66pW8PLLUNPq2jZmfg13yz1jOp0.roa
Signing time: Tue 24 Jun 2025 19:12:00 +0000
ROA not before: Tue 24 Jun 2025 19:12:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9262 (0x242e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 19:12:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EBAA56F0F2CB50D3EADA36667E0D77CB3D633A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:9b:8e:e6:e9:b3:a6:5c:4f:c9:ed:38:c0:
8d:72:ec:73:e6:4d:9f:e9:ea:bb:ef:d5:07:1e:eb:
1e:b5:41:42:37:6a:2d:51:05:c0:d1:be:fd:71:87:
31:24:fb:6b:c3:50:3a:9f:33:7a:81:5c:e9:17:71:
36:94:d7:d1:ca:13:98:9a:c8:59:b4:d5:3f:f1:66:
e3:b8:5e:6b:e8:0a:23:8a:94:5c:2d:ec:eb:91:bf:
e1:0f:25:59:50:58:9d:89:33:9f:36:88:48:01:b9:
42:c9:33:70:74:bc:da:d4:7f:d3:53:33:c7:ac:c1:
00:f4:e0:f3:96:d8:a5:52:5c:65:60:32:04:37:1d:
26:5c:a4:af:eb:5a:e0:73:9c:fb:79:9e:0e:5b:57:
60:ef:fd:54:56:d4:e9:c2:03:e3:af:37:bc:3b:b3:
26:d9:bb:e1:4f:76:02:b8:f7:c1:4d:10:e7:ca:be:
4e:a2:2f:2f:8b:d4:57:02:09:bd:99:51:8d:9e:01:
8f:53:84:3e:5e:19:9f:2a:3d:35:95:d4:5e:40:41:
d0:c1:77:3e:ec:a6:9b:ee:cd:c4:d5:7a:71:1d:a7:
f4:dc:d3:7e:a6:17:5a:2c:eb:4a:93:ff:5b:6f:91:
6c:d6:f3:39:14:63:a6:ef:dd:c4:5e:17:66:ef:40:
b6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:56:F0:F2:CB:50:D3:EA:DA:36:66:7E:0D:77:CB:3D:63:3A:9D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66pW8PLLUNPq2jZmfg13yz1jOp0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:14:f0:86:15:bb:eb:c4:7f:f4:7d:f4:19:1b:51:b9:df:4c:
c0:a2:c1:98:4a:8d:86:bf:46:92:cd:1e:16:50:63:0e:03:a3:
05:a9:f3:85:68:ca:90:d0:96:b5:18:ff:15:87:7e:57:33:ac:
a2:69:e8:a1:7c:26:fb:e5:aa:af:d6:21:60:30:e8:63:ca:04:
f1:b8:14:53:d1:c7:39:06:a7:7e:1e:2f:83:39:5a:5f:52:8a:
3e:16:3b:c0:70:f7:6d:7e:83:6b:26:f7:e6:f9:90:71:70:81:
f8:5b:3e:56:5e:be:c7:e4:e8:a3:b7:cb:09:3b:9d:55:12:e1:
92:9e:2a:a1:f4:2e:44:67:21:d6:10:f8:64:4f:d0:f3:56:e7:
29:aa:28:26:a7:6f:ed:fe:ce:7e:e2:5e:1f:ab:66:83:f4:b0:
0f:9a:78:b1:30:fa:92:de:ea:08:8e:4f:08:70:dd:39:7e:c5:
05:80:54:7a:87:47:42:ac:be:ef:90:6f:50:e2:48:c6:37:e9:
a0:52:58:af:52:b4:7f:dc:41:7f:8c:04:2e:53:53:ca:cd:42:
80:37:e6:dd:dc:fa:44:88:e0:dc:45:dd:b5:d4:0b:c3:7c:51:
f2:b0:f1:b0:e7:c3:97:fa:95:93:06:3c:15:61:da:34:39:bc:
43:62:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:32 2025 by rpki-client