Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FsJLzN5ZAxk1MURd3BdWi0yoLBo.roa
File: FsJLzN5ZAxk1MURd3BdWi0yoLBo.roa (raw, json)
Hash identifier: J9CGU2F9B8f91UQVEQvbh6WJIQi0Jx6jgzG/gFLg3eQ=
Subject key identifier: 16:C2:4B:CC:DE:59:03:19:35:31:44:5D:DC:17:56:8B:4C:A8:2C:1A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D42
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FsJLzN5ZAxk1MURd3BdWi0yoLBo.roa
Signing time: Sat 24 May 2025 18:08:32 +0000
ROA not before: Sat 24 May 2025 18:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 18:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=16C24BCCDE5903193531445DDC17568B4CA82C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:d7:fd:73:69:b1:64:ff:0c:da:4a:0a:9a:
01:a3:46:48:6c:77:b4:1f:56:6f:d2:99:b2:a6:2b:
e5:cb:81:60:21:32:00:a8:ef:61:8a:a1:e8:a2:fd:
1e:85:8e:7a:e6:b0:91:54:2a:04:cd:c2:34:2d:14:
aa:30:a3:12:5e:4b:12:35:d0:3e:92:f1:3d:35:2d:
a8:8f:46:53:ac:54:83:87:7d:57:82:e0:dc:7c:cb:
e7:54:9c:c9:9a:0a:22:18:96:8c:3e:f2:d9:3f:c1:
74:80:b8:bf:ec:0d:00:63:f8:5c:24:97:9f:03:15:
b0:4f:dc:dc:1a:07:d4:1c:95:9a:88:97:88:be:45:
2f:2a:df:f6:d4:8d:e0:d8:0a:d2:01:c8:29:29:ec:
c9:2b:b5:19:51:77:3c:fc:54:d8:a2:a9:58:2a:c2:
d7:f8:14:23:c2:ee:0c:38:3f:52:3e:95:e3:1f:5e:
ac:80:8c:87:4a:03:78:2a:04:3d:f8:cf:70:6b:2d:
50:80:c0:d6:3a:77:d8:20:34:72:2a:e2:b3:bd:fc:
fd:a1:44:1f:e1:bf:89:07:76:17:c7:fa:be:2b:81:
03:35:89:4c:85:ff:93:c9:aa:a8:9a:60:a5:dc:9a:
7c:dc:ff:89:34:b8:9f:36:4c:a6:6c:93:fa:0c:16:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:4B:CC:DE:59:03:19:35:31:44:5D:DC:17:56:8B:4C:A8:2C:1A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FsJLzN5ZAxk1MURd3BdWi0yoLBo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:ba:bc:fd:c8:04:af:79:8a:4d:93:11:ed:75:ab:b2:32:26:
94:30:69:e8:0a:da:16:56:41:c3:83:e6:c6:09:f4:1d:1a:22:
ed:a7:da:fd:db:98:a4:30:68:3e:21:1b:23:2f:35:fc:95:2f:
f2:c8:c8:ab:8c:9c:d8:5b:b6:3c:03:e1:90:f5:02:f6:ca:4f:
49:d4:ea:2c:b2:36:6d:2b:28:1a:e9:2e:35:62:91:2f:af:d2:
7b:59:04:22:c7:9b:55:ee:65:a4:29:ca:5e:d4:ff:75:77:a1:
37:1b:88:92:4d:63:d1:34:fb:9a:54:61:3e:10:7d:27:0d:65:
b4:5d:59:61:fc:98:7f:33:e0:4b:b4:5f:8f:47:dd:9f:ba:a1:
4b:2a:11:5e:8d:fd:6e:2b:65:e6:31:89:f2:3d:e7:19:c9:af:
fd:0f:77:b4:ad:f5:72:ba:f6:16:09:52:15:f2:b3:c3:f5:00:
6e:20:fe:92:70:ad:e9:57:41:41:e9:56:ba:c0:9c:ea:bc:d9:
47:10:03:07:47:02:6c:d8:55:41:6d:cc:ef:5b:83:60:29:4c:
8e:a5:cd:94:54:3d:d8:95:d5:91:77:3c:ee:fe:0b:95:9e:31:
0e:93:4a:03:b2:4b:cd:68:d9:26:b2:e2:53:15:28:5f:b1:5e:
75:39:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:56 2025 by rpki-client