Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/A8OtjUMX9k0xCbQuNHvHUwhhv04.roa
File: A8OtjUMX9k0xCbQuNHvHUwhhv04.roa (raw, json)
Hash identifier: xtSLI1Is9nDtaptCR0qR1+RjA7H2B7R39InCmKD2XKs=
Subject key identifier: 03:C3:AD:8D:43:17:F6:4D:31:09:B4:2E:34:7B:C7:53:08:61:BF:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D3A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A8OtjUMX9k0xCbQuNHvHUwhhv04.roa
Signing time: Sat 24 May 2025 17:08:32 +0000
ROA not before: Sat 24 May 2025 17:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 17:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=03C3AD8D4317F64D3109B42E347BC7530861BF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:5b:c3:68:35:a7:9f:ee:cc:9d:ce:99:c5:
e6:37:10:94:50:71:c1:03:f6:7d:b2:14:06:6f:d1:
ca:6f:d6:37:81:21:10:33:d5:4f:b8:72:9a:3c:1e:
1f:32:cb:d7:d9:0a:aa:d9:b0:04:18:40:7e:e0:69:
e0:12:77:b9:67:3f:76:2d:03:f1:04:7e:28:8a:d4:
4c:fc:3c:90:83:48:65:88:69:30:2f:4c:37:85:55:
9e:b4:41:28:da:50:67:c4:85:4b:6c:ee:f6:6b:f9:
67:e5:53:93:20:84:ee:21:f5:73:2b:ea:7d:0c:a0:
84:55:9f:ac:7f:46:bc:ec:fe:31:e8:f0:63:4f:83:
c1:ec:20:c5:3b:3f:63:aa:dd:ba:7a:e4:cc:5d:2b:
02:7b:ce:a1:18:d9:04:c0:bb:89:f5:22:c4:9b:11:
40:06:2c:74:c0:3d:8f:88:a2:b5:21:f7:47:77:73:
d8:e9:4f:43:a0:a9:e7:b9:74:95:c9:45:0a:20:83:
24:cd:a4:96:3d:6a:0a:0e:5a:f6:3e:36:04:7d:b3:
6a:16:28:c2:d7:47:2b:d4:db:2f:30:66:a7:92:11:
93:cc:d3:de:59:a7:d7:22:8b:02:02:37:df:2d:ad:
c2:97:01:a8:03:22:1a:60:29:7b:d6:ff:1b:b1:79:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:AD:8D:43:17:F6:4D:31:09:B4:2E:34:7B:C7:53:08:61:BF:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A8OtjUMX9k0xCbQuNHvHUwhhv04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:ef:45:9b:31:13:cb:ef:3b:73:84:cc:2d:53:25:39:ea:57:
ee:90:0d:72:bc:b6:c5:f6:c8:fe:cc:21:a2:36:1c:fd:96:30:
e7:3b:5d:f1:a0:de:6f:f4:d3:cf:f0:05:e6:86:1f:e6:85:32:
0f:68:b8:00:dc:01:64:9c:eb:db:7e:48:f2:5e:94:45:50:7c:
63:b2:01:b0:28:4b:e8:d9:a9:78:5e:68:87:f7:56:0e:2a:bb:
55:0e:cf:34:2b:d8:0d:6f:ce:50:82:98:d2:72:48:89:5c:64:
be:72:85:83:50:3e:d2:f4:77:c5:e6:b2:66:0d:eb:72:09:6f:
8c:36:cf:0e:c4:66:ad:21:38:ba:24:49:16:27:ac:a6:98:0f:
94:7c:14:5b:62:ab:16:20:25:21:b6:b0:e7:e1:23:a2:64:e2:
c3:74:ec:4f:23:2c:e9:e5:ac:28:b1:ab:bd:53:ca:b9:13:07:
17:8d:17:df:06:10:8d:4d:da:09:0e:f4:e9:da:92:fa:f3:04:
b3:1e:76:b1:b2:48:82:c5:5a:69:d9:f5:27:27:e5:2e:56:ab:
54:4d:3d:38:1d:bd:7e:a8:0e:59:3c:1b:cf:27:15:3f:d9:c1:
cb:a6:12:b6:c8:ec:34:60:8c:ee:22:34:d4:2a:76:09:63:5f:
f3:cc:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:37 2025 by rpki-client