Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FrkNiLoJYfeaZj9WSf3AHt-P-DA.roa
File: FrkNiLoJYfeaZj9WSf3AHt-P-DA.roa (raw, json)
Hash identifier: zQ+20P3WRreKjV5jzOiQht1tplKxz3qQhwb/MdO2svk=
Subject key identifier: 16:B9:0D:88:BA:09:61:F7:9A:66:3F:56:49:FD:C0:1E:DF:8F:F8:30
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 042E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FrkNiLoJYfeaZj9WSf3AHt-P-DA.roa
Signing time: Mon 12 May 2025 15:38:00 +0000
ROA not before: Mon 12 May 2025 15:38:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 15:38:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=16B90D88BA0961F79A663F5649FDC01EDF8FF830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:e2:a0:06:b4:69:02:13:7c:30:45:99:f5:
52:fb:3c:4b:74:25:e8:51:06:ed:8b:20:b2:22:26:
5d:40:ec:8e:fa:97:28:49:e4:56:7a:ce:28:e0:da:
54:ab:96:2e:1b:71:8b:0e:17:e6:50:b3:3c:d2:fc:
3e:58:9b:79:de:c2:a0:b3:bb:27:93:47:3d:e7:84:
31:1e:2f:66:5b:54:24:dd:5d:9c:34:a4:2d:22:c9:
dd:6d:10:47:22:bc:53:f9:fc:04:66:2f:c5:d9:33:
2b:3a:e9:11:cd:96:0d:a5:b9:37:49:58:e7:2d:60:
a1:fe:10:53:36:a6:bb:cf:a5:06:0e:33:6b:84:68:
0f:ac:4d:48:a9:f9:23:13:8f:87:6b:21:cc:1d:e8:
ee:47:09:20:6d:97:74:50:72:78:76:28:f0:0c:35:
b3:e9:8e:88:37:27:3a:df:1d:a1:a9:14:91:e9:e9:
0a:38:cd:bd:24:78:41:e7:5b:55:59:db:1e:95:1f:
9b:3b:ba:d2:1c:06:4a:d4:ba:76:ee:f1:35:4e:3d:
d7:83:8b:92:45:6b:bb:80:a2:15:4d:5d:4d:c8:e1:
62:ba:12:30:1b:9d:c0:9b:86:7d:1f:fe:10:45:62:
2c:d7:76:45:2d:47:43:7e:ea:c4:8b:af:7a:a4:03:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:0D:88:BA:09:61:F7:9A:66:3F:56:49:FD:C0:1E:DF:8F:F8:30
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FrkNiLoJYfeaZj9WSf3AHt-P-DA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:04:7c:5c:92:8d:2a:02:6c:18:0c:0e:6f:39:ea:2f:07:9f:
bf:bd:9a:db:42:82:ee:01:3b:fb:5d:fb:92:e3:15:49:0e:d2:
9a:cc:9c:de:02:72:6b:11:01:cb:d6:88:65:67:08:97:8f:23:
70:d5:ce:95:01:fb:26:3f:d3:4d:69:5c:af:97:36:0c:c9:4d:
ff:11:22:6a:28:da:25:46:12:98:7a:e4:9a:e8:ec:f4:e0:7d:
9b:74:c7:11:ed:62:4b:7d:17:5d:e1:f4:5c:ec:66:8f:e5:82:
fc:de:6c:9e:f7:c0:15:ac:82:8f:04:2b:cb:7b:d1:cd:d6:ce:
c5:a0:24:9b:3e:24:82:b4:d2:cd:09:77:71:4f:78:66:c4:c5:
e0:64:a2:69:d0:d0:60:d1:f7:d6:1e:d6:eb:37:02:e1:b8:4f:
52:e2:c2:14:2c:e6:c8:31:35:2c:0b:21:51:4d:df:9d:be:ce:
a1:61:01:4f:02:54:d9:c5:49:4a:3f:1c:c5:d2:5e:f8:3c:e5:
62:75:e8:df:c3:9b:b9:c6:78:c3:85:96:1a:34:72:6d:15:da:
30:2e:ae:00:e0:77:c9:d8:f8:ae:8c:f1:52:3c:a0:0f:88:89:
18:b3:60:ad:d6:16:8a:3e:37:f9:f9:89:39:a8:16:28:8a:16:
ad:50:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:36 2025 by rpki-client