Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ea4wxYoOcwQ-DtpzNFUvqRwMSRE.roa
File: Ea4wxYoOcwQ-DtpzNFUvqRwMSRE.roa (raw, json)
Hash identifier: tYFNtLebYsHFbnvZT+0dr/0ZIxrWq4UmMRYz97ePjyU=
Subject key identifier: 11:AE:30:C5:8A:0E:73:04:3E:0E:DA:73:34:55:2F:A9:1C:0C:49:11
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20B6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ea4wxYoOcwQ-DtpzNFUvqRwMSRE.roa
Signing time: Fri 20 Jun 2025 03:37:08 +0000
ROA not before: Fri 20 Jun 2025 03:37:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8374 (0x20b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 03:37:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=11AE30C58A0E73043E0EDA7334552FA91C0C4911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:fe:45:d6:f2:3e:3c:6c:6b:55:e7:57:02:
df:95:bf:bb:50:13:a1:79:68:fb:3b:f2:b5:b9:e9:
5f:47:84:b6:76:43:7a:dd:2e:0b:bd:e3:16:db:68:
da:80:01:e2:6d:90:e0:9e:21:0c:3b:30:ea:bd:9c:
63:ff:b9:0f:3a:24:be:8a:97:aa:49:be:1b:97:b1:
38:8c:28:49:7a:5a:db:0c:38:88:e0:d6:c4:91:71:
2c:02:b3:17:e2:c0:da:83:da:a6:84:5e:28:2a:0b:
48:c5:27:17:b9:8c:b5:d8:ec:45:05:b3:24:a9:9d:
b0:f8:4c:20:87:b4:52:d2:98:5a:37:63:46:80:b9:
1e:be:d6:fe:49:d4:e6:50:5f:6c:55:cf:09:3c:bc:
bc:7e:49:ea:74:fa:6f:55:bd:33:6c:dd:7b:73:bb:
b7:bf:9f:64:ff:49:74:59:15:f7:8d:7a:b8:1a:4a:
6e:54:18:29:46:8d:19:95:ca:82:f2:f4:ef:68:1a:
c7:6b:83:04:15:24:f9:86:2c:e6:f6:b2:51:d9:7f:
2d:2a:94:40:72:10:d9:43:9b:a6:3c:7b:d0:64:ee:
17:eb:e4:7b:63:b2:4a:8e:c7:5f:33:3f:b0:48:a2:
9a:04:6d:0a:09:e2:6b:80:42:2d:8e:ae:65:06:7c:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AE:30:C5:8A:0E:73:04:3E:0E:DA:73:34:55:2F:A9:1C:0C:49:11
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ea4wxYoOcwQ-DtpzNFUvqRwMSRE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:ff:05:c3:67:76:3b:1a:e4:d5:02:57:91:75:35:f7:67:12:
37:28:60:3d:1a:71:3e:29:b3:54:13:a2:3c:ae:64:5f:14:03:
95:67:44:43:9a:30:15:95:60:42:e9:d8:75:03:85:42:b5:e2:
b4:48:66:a3:fa:5c:17:91:73:9d:86:98:5f:5b:51:9e:5c:76:
9e:cf:9a:0b:4a:4a:2c:5b:63:bf:ea:86:f2:bc:60:88:2e:b6:
f0:6a:30:3d:d1:b4:2e:5e:5a:15:39:c7:01:ff:a0:ed:93:20:
1b:55:c4:25:4b:a3:69:dd:85:c2:19:94:23:5f:66:35:7f:56:
56:14:0d:6a:c1:49:e3:90:12:66:be:97:e6:70:84:a3:72:a0:
23:fd:2d:85:d4:cb:27:1a:bb:83:63:18:4e:aa:7c:d9:f9:fd:
e9:d8:4d:9f:41:4c:08:db:4e:54:29:ee:9e:5e:c5:b3:d8:f5:
94:27:e0:1a:59:ec:e0:b2:c3:d6:a1:b3:48:25:92:bc:10:e8:
0f:df:14:92:ba:83:d3:24:76:a6:87:aa:32:1e:78:24:66:68:
a3:98:d4:3a:20:d5:2b:32:f3:28:32:7f:85:35:a7:e7:39:18:
9b:ef:7c:e7:f9:86:4a:da:2a:79:97:72:9d:ab:d0:b7:02:42:
7c:af:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:44 2025 by rpki-client