Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/D778dsSf6PwtJFQefFJ8-3RnKGY.roa
File: D778dsSf6PwtJFQefFJ8-3RnKGY.roa (raw, json)
Hash identifier: qVv26KIbX2pCqpHoC4laBOxfqctIwHiMtumOsmUQMGo=
Subject key identifier: 0F:BE:FC:76:C4:9F:E8:FC:2D:24:54:1E:7C:52:7C:FB:74:67:28:66
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 064A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D778dsSf6PwtJFQefFJ8-3RnKGY.roa
Signing time: Thu 15 May 2025 11:08:05 +0000
ROA not before: Thu 15 May 2025 11:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1610 (0x64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 11:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0FBEFC76C49FE8FC2D24541E7C527CFB74672866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:a7:71:bb:79:6c:45:59:cf:4a:67:01:ea:
72:9d:17:ff:31:19:f9:b0:ed:f1:27:40:86:29:43:
d4:59:7a:9c:70:9f:5a:68:ac:76:ba:ca:fb:27:ed:
2a:37:5c:7d:cf:c7:b8:67:45:a9:b3:a0:7e:66:11:
30:fd:4d:18:d9:ef:a3:20:cc:ac:a1:7c:7a:2f:55:
f3:86:9a:31:b5:9d:e9:36:55:3d:6e:8d:99:9f:87:
21:90:3a:7c:3a:2a:45:2e:53:c9:f0:9b:d9:33:e2:
7f:1c:b6:38:df:37:01:74:f7:28:62:d5:41:b6:b7:
8c:fb:c1:da:72:27:2c:ef:d0:ba:67:67:1a:e6:89:
cc:49:bd:ce:a2:a3:e6:38:96:53:f1:df:56:b9:63:
5c:61:06:17:21:b7:fd:3c:e9:f9:42:d0:4f:c4:68:
51:7d:68:20:de:a1:e8:d4:37:75:be:4d:b4:e0:d5:
08:d6:c5:0a:f2:51:e5:d6:b6:24:42:94:8d:74:5a:
fd:54:d8:62:28:07:ee:05:da:13:42:34:38:f8:54:
15:94:7b:8c:f7:73:99:2f:1c:aa:b1:d9:e4:38:cc:
0a:10:bb:11:6f:c9:64:4e:3b:88:e6:fb:e5:f3:20:
3b:e2:b9:7d:07:cc:82:d2:ef:a1:41:aa:9e:7c:e6:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:FC:76:C4:9F:E8:FC:2D:24:54:1E:7C:52:7C:FB:74:67:28:66
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D778dsSf6PwtJFQefFJ8-3RnKGY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:38:35:5e:9b:f3:0e:34:cb:04:ce:0d:4b:fb:f7:c9:60:98:
83:d3:0c:82:d9:7f:ac:5c:dc:b9:00:68:65:9a:a8:da:0d:74:
2e:ed:58:08:86:7e:4b:49:79:bd:46:7c:24:ee:17:ae:d4:45:
dd:a3:c7:d4:97:c1:57:a4:47:21:18:18:58:68:a7:da:b2:bd:
41:f0:3c:b8:85:66:e0:b0:39:e5:cb:a2:e5:49:ce:1e:e8:35:
13:d4:75:9b:8a:80:6c:f0:6e:34:f6:c9:0e:37:a8:95:c1:24:
29:8e:d4:37:e9:65:06:82:43:c5:e1:9b:88:c2:92:90:73:dc:
55:5e:98:41:54:e8:20:37:9e:ab:7e:03:a0:f1:c5:1f:fa:76:
4b:f0:a5:d1:07:a3:ae:11:21:79:cf:46:1e:ae:46:31:2d:85:
ff:c2:27:d9:ea:33:66:d3:b1:4d:ef:5b:0d:d2:ff:b6:99:1d:
59:0c:b6:da:b8:30:d6:b9:01:41:91:e2:cf:f0:80:27:2c:7e:
e1:04:e1:08:d7:33:38:ac:4e:df:02:60:98:8c:98:18:79:74:
14:b7:ad:e7:e3:70:22:fa:17:61:7c:24:8e:b2:9f:5f:ce:36:
30:fc:10:35:c2:a2:52:3c:c1:bf:0c:3c:2d:8b:5e:1a:65:4c:
91:54:bd:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUx
MTA4MDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBGQkVGQzc2QzQ5RkU4
RkMyRDI0NTQxRTdDNTI3Q0ZCNzQ2NzI4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxgKdxu3lsRVnPSmcB6nKdF/8xGfmw7fEnQIYpQ9RZepxwn1po
rHa6yvsn7So3XH3Px7hnRamzoH5mETD9TRjZ76MgzKyhfHovVfOGmjG1nek2VT1u
jZmfhyGQOnw6KkUuU8nwm9kz4n8ctjjfNwF09yhi1UG2t4z7wdpyJyzv0LpnZxrm
icxJvc6io+Y4llPx31a5Y1xhBhcht/086flC0E/EaFF9aCDeoejUN3W+TbTg1QjW
xQryUeXWtiRClI10Wv1U2GIoB+4F2hNCNDj4VBWUe4z3c5kvHKqx2eQ4zAoQuxFv
yWROO4jm++XzIDviuX0HzILS76FBqp585o7zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUD778dsSf6PwtJFQefFJ8+3RnKGYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ENzc4ZHNTZjZQd3RKRlFl
ZkZKOC0zUm5LR1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIA4NV6b8w40ywTODUv798lgmIPTDILZf6xc
3LkAaGWaqNoNdC7tWAiGfktJeb1GfCTuF67URd2jx9SXwVekRyEYGFhop9qyvUHw
PLiFZuCwOeXLouVJzh7oNRPUdZuKgGzwbjT2yQ43qJXBJCmO1DfpZQaCQ8Xhm4jC
kpBz3FVemEFU6CA3nqt+A6DxxR/6dkvwpdEHo64RIXnPRh6uRjEthf/CJ9nqM2bT
sU3vWw3S/7aZHVkMttq4MNa5AUGR4s/wgCcsfuEE4QjXMzisTt8CYJiMmBh5dBS3
refjcCL6F2F8JI6yn1/ONjD8EDXColI8wb8MPC2LXhplTJFUvXM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:09 2025 by rpki-client