Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EWj_OGKpEpRrstMy0dedAnuh5tU.roa
File: EWj_OGKpEpRrstMy0dedAnuh5tU.roa (raw, json)
Hash identifier: PuYvstrxXW97BXZk40p7IvlDp61Eoj2ZqYaFt0mtLJw=
Subject key identifier: 11:68:FF:38:62:A9:12:94:6B:B2:D3:32:D1:D7:9D:02:7B:A1:E6:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E1A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EWj_OGKpEpRrstMy0dedAnuh5tU.roa
Signing time: Sun 25 May 2025 21:08:54 +0000
ROA not before: Sun 25 May 2025 21:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3610 (0xe1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 21:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1168FF3862A912946BB2D332D1D79D027BA1E6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:08:0b:df:35:fb:11:b7:fa:80:48:8d:8c:
1d:49:b5:ce:25:59:85:d5:7f:f1:36:fa:14:6d:2b:
a3:0d:a3:eb:8f:c4:3a:0f:2c:79:e7:40:0f:0a:98:
8f:7b:5a:62:30:54:96:42:f2:2e:d5:41:b0:be:45:
75:7a:85:eb:32:c6:b0:9b:d9:e1:72:e0:9d:45:f9:
a2:bb:a6:d5:9e:c0:7b:c2:7b:5b:dd:c8:13:f9:45:
df:9a:e2:ec:5c:80:6d:2e:3f:8e:83:4d:d2:10:57:
21:01:75:81:1a:20:02:67:7f:35:94:de:b7:0a:4b:
a5:b2:af:f8:50:c0:2d:3d:11:b5:1a:7e:17:95:6d:
2a:cc:ee:fb:7f:85:9d:26:93:1c:1c:a4:63:4c:12:
3f:3b:13:7d:81:58:dc:92:71:5c:ae:de:3b:e1:c5:
dc:a7:64:6b:2a:0e:e4:c5:ee:b0:4f:67:4b:2c:e4:
29:8d:e4:e2:cb:af:38:c3:3a:3e:17:b8:e1:00:26:
5c:1a:17:6f:f2:88:62:d2:04:52:f6:00:14:05:eb:
5a:f2:77:3e:0d:9a:b4:8f:47:15:cb:a3:f4:c6:34:
58:fb:46:59:d5:cb:bd:db:80:9e:48:40:d7:e6:65:
71:be:58:38:44:dc:c1:85:12:52:26:93:89:eb:04:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:FF:38:62:A9:12:94:6B:B2:D3:32:D1:D7:9D:02:7B:A1:E6:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EWj_OGKpEpRrstMy0dedAnuh5tU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:5b:b9:a6:2b:dc:d2:a5:f2:4d:4b:a8:e4:96:17:03:4d:0e:
c0:7d:71:55:99:1c:b6:18:e3:80:89:11:0c:07:e8:3a:68:e7:
7b:0f:39:16:4e:66:00:9c:6f:45:01:29:1b:15:a8:55:59:c3:
91:2c:5a:79:2a:67:84:9a:6c:f2:8a:e7:05:81:70:db:a2:dd:
78:14:d9:ba:41:ac:77:a6:ac:a2:e8:4a:db:1d:e0:0b:43:c0:
41:77:4f:0e:42:8e:b3:08:23:59:7c:6a:f4:1e:8c:51:da:28:
5b:72:7b:17:fe:ef:d9:84:23:0b:00:9f:25:5d:cf:9e:9d:53:
24:c2:c4:1e:48:96:04:58:0e:61:3d:62:01:82:3a:b1:2d:4f:
fb:01:0d:0e:23:fb:41:86:ef:7c:72:de:14:0c:dd:fb:cb:24:
4a:19:47:c6:d5:3e:c9:15:11:bf:06:d1:64:e6:53:0b:de:ba:
8e:60:71:6d:90:c4:34:01:6c:5f:5e:94:2d:5e:60:b2:cb:b5:
bb:f8:66:a3:00:09:d6:02:55:a5:cb:5d:12:e3:57:ba:c6:c1:
9f:3b:66:a1:27:9c:16:7d:9e:71:c0:2f:2f:29:cc:ec:da:b8:
7b:ca:ad:b9:f9:66:cc:0c:a0:60:43:0e:1c:44:10:6b:c3:2b:
60:ed:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:20:55 2025 by rpki-client