Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AchzPOxZTfnPzPFXUIrD5coQK0w.roa
File: AchzPOxZTfnPzPFXUIrD5coQK0w.roa (raw, json)
Hash identifier: ydkXd1O/HSwsD8hkxO+Ek+4Wn7R/EdLtt1IdkbDXOrU=
Subject key identifier: 01:C8:73:3C:EC:59:4D:F9:CF:CC:F1:57:50:8A:C3:E5:CA:10:2B:4C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 099A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AchzPOxZTfnPzPFXUIrD5coQK0w.roa
Signing time: Mon 19 May 2025 21:08:13 +0000
ROA not before: Mon 19 May 2025 21:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 21:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01C8733CEC594DF9CFCCF157508AC3E5CA102B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:c6:c0:77:44:98:53:fa:53:7b:81:56:65:
82:f9:a4:69:be:05:1c:78:a3:26:24:61:c4:55:d9:
f2:76:cc:d0:af:4a:8f:e1:b2:00:f1:2a:1e:cc:52:
82:98:1c:83:3b:74:45:98:49:2c:0c:7d:11:03:cc:
4b:4e:76:cc:8f:44:8c:ed:88:33:3f:85:bc:1c:09:
64:bd:c5:36:86:92:a8:6a:b9:eb:aa:fb:b0:72:6e:
a5:30:9f:4e:39:4d:b5:55:47:36:4e:3a:21:7b:33:
1d:e3:8d:7e:0e:90:81:f4:d4:30:7d:50:34:0f:34:
39:7b:27:8f:62:a5:79:05:ee:47:4f:9e:7e:e8:64:
65:12:8f:6d:e6:b5:44:77:97:ab:bd:e2:01:6e:dc:
1c:68:e0:56:1e:d0:08:be:c9:fa:52:51:f6:8c:1f:
d9:dc:83:37:ee:7b:83:32:bf:f1:13:e8:8b:d3:21:
a2:1e:44:58:cb:40:71:79:af:2e:1b:3e:8e:dc:d1:
cd:08:da:e7:1c:b3:d4:1b:39:ed:91:b0:09:e7:39:
58:a8:d9:ad:4f:0c:9e:26:1e:76:c6:54:8d:8b:b5:
d6:34:f6:1c:eb:b9:90:ee:5e:52:50:29:57:74:68:
72:bf:72:39:0e:5c:6f:04:52:f4:ca:cd:de:67:3d:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:73:3C:EC:59:4D:F9:CF:CC:F1:57:50:8A:C3:E5:CA:10:2B:4C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AchzPOxZTfnPzPFXUIrD5coQK0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:d8:7a:f2:14:ce:fb:d4:97:9d:d4:56:89:61:e5:97:bc:48:
67:86:11:4d:48:a1:cc:dc:35:48:91:d9:85:1c:34:5f:2c:c1:
3c:11:4e:40:b2:66:4e:c5:35:b6:3d:4d:d9:5e:e0:45:a0:57:
0e:ca:2a:ad:78:71:33:14:2b:05:c0:7e:5f:21:d3:bf:ab:4a:
b9:aa:bb:80:44:af:bc:42:fa:75:5c:93:90:7c:ae:af:10:db:
5f:fe:95:15:05:33:41:70:ca:37:83:64:45:2a:7a:e5:78:ac:
ae:2c:3f:b2:2a:0c:86:20:75:a3:06:e6:a5:8f:ef:2a:da:c0:
ba:89:e2:76:63:59:00:6a:36:d5:da:62:51:8e:e6:62:7f:e7:
c9:8b:e2:6c:35:35:62:be:ed:b3:5f:6d:3c:78:37:62:35:7f:
22:98:c0:ec:fb:a8:b4:e5:34:c8:8e:0a:88:f3:de:06:c0:75:
d5:11:d3:dc:02:8f:32:14:bc:5a:6a:bb:44:7b:88:54:35:d9:
5d:2a:61:c1:2e:53:19:23:ad:c4:86:8f:38:bd:3c:cc:d5:b1:
c1:00:06:c1:ef:49:d6:c6:0a:23:4a:1b:2b:00:26:39:13:95:
93:7d:df:f1:5e:3e:cf:d0:1f:aa:b3:d4:6c:ee:a1:34:75:38:
83:ac:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:34 2025 by rpki-client