Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9SmGGBXeOnp9Bu4iCghnrFGdl3Y.roa
File: 9SmGGBXeOnp9Bu4iCghnrFGdl3Y.roa (raw, json)
Hash identifier: SxH3hGHNzdqRY3oF3fvJye6Q46YVoQO6lCio9nNorW8=
Subject key identifier: F5:29:86:18:15:DE:3A:7A:7D:06:EE:22:0A:08:67:AC:51:9D:97:76
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CCA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9SmGGBXeOnp9Bu4iCghnrFGdl3Y.roa
Signing time: Sat 24 May 2025 03:08:31 +0000
ROA not before: Sat 24 May 2025 03:08:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 03:08:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F529861815DE3A7A7D06EE220A0867AC519D9776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:90:d9:03:9e:be:a4:64:16:27:8b:5d:34:
13:6f:7e:ca:46:98:ae:a8:2d:20:06:c9:2a:67:01:
14:67:87:1d:ab:86:6c:83:47:ee:79:71:30:a5:c7:
66:99:61:04:f3:f0:5e:7a:6c:d2:2e:33:66:c4:92:
bc:91:b3:52:42:c9:eb:aa:04:4e:ef:25:22:23:d2:
7e:44:02:c6:81:f3:3d:4e:1b:64:be:1a:db:17:0e:
c0:25:1c:19:bc:67:1e:02:d7:40:8a:3d:97:ce:fb:
93:9d:63:0a:34:f9:72:79:79:67:99:a8:74:df:f2:
20:c2:72:28:0b:86:25:0a:93:6c:8d:62:c5:01:69:
be:93:05:39:2c:7f:a8:0f:16:8f:b6:3f:fc:35:af:
2e:7c:79:4f:6a:a4:b6:65:8f:18:d5:cb:b6:6e:0b:
a5:8f:63:51:ce:57:22:65:4f:db:b6:3c:62:03:5a:
3a:24:59:78:23:93:ba:08:97:cf:b3:11:c9:43:96:
17:97:57:02:e2:b6:fd:e8:b6:eb:9e:0c:ec:86:ea:
77:cb:3d:c5:ae:be:14:b8:ed:95:ca:bc:55:fe:1c:
00:39:09:17:ff:5a:04:0f:4c:44:79:89:25:79:03:
cc:1c:8f:cb:b8:73:17:3c:82:75:06:fe:df:c2:96:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:86:18:15:DE:3A:7A:7D:06:EE:22:0A:08:67:AC:51:9D:97:76
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9SmGGBXeOnp9Bu4iCghnrFGdl3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:6d:df:1d:de:7c:93:2d:e2:d7:e5:3b:e1:68:66:8f:2e:35:
46:fe:20:8e:f3:13:35:02:0d:f5:a3:44:6d:d7:9f:bd:80:e9:
81:e0:19:a5:ac:ae:78:8e:39:de:6b:54:5d:5e:4e:1e:5a:3d:
76:af:4b:f6:30:c4:46:b9:f6:b9:f9:3e:4a:88:12:6f:5a:c8:
a6:97:47:26:db:88:0e:96:6f:de:c8:9a:b0:8f:61:eb:6f:74:
bb:4d:9c:ea:e3:e2:32:81:77:f5:88:78:cc:f2:ea:4d:5a:9b:
f5:98:61:92:e7:1b:ee:68:81:86:06:f2:bc:37:a8:3f:dc:0a:
aa:77:c3:18:90:43:96:c5:6b:ed:8e:6f:27:27:5c:28:46:42:
89:29:df:d3:38:c1:28:ab:60:44:f0:e0:26:26:f3:73:20:0c:
2f:48:97:ea:c2:37:0e:93:64:dd:11:31:7f:1b:fa:22:3f:bc:
90:c0:02:0d:b5:2f:53:d5:82:79:f5:73:10:49:60:17:6e:5a:
15:09:dd:a3:78:46:59:19:41:08:7b:cc:d6:2b:12:98:ae:f7:
98:7d:ff:bd:b9:9d:0c:46:cf:f8:97:da:a3:6c:a3:8f:1f:28:
29:df:02:48:a1:f7:cf:3b:3e:93:76:04:d8:5d:e6:5b:a5:45:
0c:38:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:38:30 2025 by rpki-client