Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/G5dhQj1xJdpsVN3vWgxzq67-a5k.roa
File: G5dhQj1xJdpsVN3vWgxzq67-a5k.roa (raw, json)
Hash identifier: Z3C219a/FQyiieCE7eT9I5yBCdtdxYD1zqkusGW1Dwc=
Subject key identifier: 1B:97:61:42:3D:71:25:DA:6C:54:DD:EF:5A:0C:73:AB:AE:FE:6B:99
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D0A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/G5dhQj1xJdpsVN3vWgxzq67-a5k.roa
Signing time: Sat 14 Jun 2025 19:10:06 +0000
ROA not before: Sat 14 Jun 2025 19:10:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7434 (0x1d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 19:10:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1B9761423D7125DA6C54DDEF5A0C73ABAEFE6B99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:cf:79:a3:06:a0:f9:16:22:e6:98:62:f8:
10:9c:da:c1:77:00:04:53:83:a7:e9:48:54:9a:7a:
a3:90:31:22:99:af:5c:09:49:e6:52:6a:bd:73:ab:
fa:1b:23:4e:ed:a6:f8:b9:3a:48:5e:12:5e:da:e7:
17:d0:5b:eb:23:3c:30:c4:57:4d:7b:6d:ec:de:b9:
0a:02:f7:c4:15:97:28:8e:d1:a0:bc:ce:7b:7b:59:
68:5b:7b:8b:5b:fd:df:97:11:f9:6b:30:25:57:29:
1f:ad:46:0e:7e:fa:08:68:8c:d7:81:c4:a9:25:21:
51:4b:60:07:ed:f4:d1:36:33:1c:84:5a:b0:b6:d9:
38:77:26:9e:98:c0:e3:f0:f4:53:19:44:b0:94:8a:
52:73:ed:11:8d:48:6d:08:38:e9:a8:81:62:19:c8:
47:9b:c8:64:2f:36:15:68:31:fa:84:22:c7:e9:9b:
56:1b:a5:ce:cd:02:c9:18:7c:79:30:10:a8:85:a1:
19:78:37:8d:b9:3e:85:da:25:bb:88:6a:25:bf:5f:
5b:b2:b9:b8:38:15:88:45:f1:ef:7b:5c:f5:86:fc:
59:4c:3c:91:eb:78:a2:fc:c7:61:de:4e:7a:7c:9d:
57:35:fb:30:d8:36:4f:0a:e5:7c:39:24:b9:8a:10:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:97:61:42:3D:71:25:DA:6C:54:DD:EF:5A:0C:73:AB:AE:FE:6B:99
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/G5dhQj1xJdpsVN3vWgxzq67-a5k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:3f:75:50:a8:56:54:2b:39:a3:a5:eb:79:79:d1:79:95:18:
5f:aa:c6:4b:e9:a2:38:29:7e:33:a8:f7:0b:1d:c1:53:74:b6:
7c:79:93:f2:e0:46:33:49:61:62:72:2b:ed:27:bb:4e:19:b9:
3f:e4:32:df:86:68:1d:73:c2:6c:a6:80:5d:6a:34:55:97:d0:
be:25:15:d3:e6:ac:ed:87:b7:d9:71:1c:99:53:bc:96:34:c1:
68:02:e1:06:9d:13:5b:74:39:74:23:92:de:ce:ca:0a:99:5e:
b8:d9:26:28:e7:01:d5:b0:6b:58:af:04:3e:d2:7a:ec:07:0c:
87:03:21:4c:68:86:ee:b4:7a:8c:3d:c3:88:1d:72:49:b0:22:
7f:f9:05:19:a6:a1:09:f2:95:b8:46:75:4c:89:16:9b:31:43:
af:45:0f:fd:24:97:a7:db:98:33:9e:39:a9:e9:ca:ce:b7:43:
7c:b3:68:84:ea:37:ad:a4:6b:fb:e3:29:15:41:f8:c7:90:cb:
04:29:c7:5d:ef:e2:34:12:0b:da:6c:e9:4e:e2:e8:56:13:4b:
c5:86:91:32:ac:c4:de:34:55:40:2d:55:4c:f8:1c:f8:89:eb:
af:b2:ff:e1:36:58:4d:37:82:1b:16:41:7c:ec:54:18:12:b9:
56:15:c6:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTQx
OTEwMDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFCOTc2MTQyM0Q3MTI1
REE2QzU0RERFRjVBMEM3M0FCQUVGRTZCOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1OM95owag+RYi5phi+BCc2sF3AARTg6fpSFSaeqOQMSKZr1wJ
SeZSar1zq/obI07tpvi5OkheEl7a5xfQW+sjPDDEV017bezeuQoC98QVlyiO0aC8
znt7WWhbe4tb/d+XEflrMCVXKR+tRg5++ghojNeBxKklIVFLYAft9NE2MxyEWrC2
2Th3Jp6YwOPw9FMZRLCUilJz7RGNSG0IOOmogWIZyEebyGQvNhVoMfqEIsfpm1Yb
pc7NAskYfHkwEKiFoRl4N425PoXaJbuIaiW/X1uyubg4FYhF8e97XPWG/FlMPJHr
eKL8x2HeTnp8nVc1+zDYNk8K5Xw5JLmKEL8PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUG5dhQj1xJdpsVN3vWgxzq67+a5kwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HNWRoUWoxeEpkcHNWTjN2
V2d4enE2Ny1hNWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAg/dVCoVlQrOaOl63l50XmVGF+qxkvpojgp
fjOo9wsdwVN0tnx5k/LgRjNJYWJyK+0nu04ZuT/kMt+GaB1zwmymgF1qNFWX0L4l
FdPmrO2Ht9lxHJlTvJY0wWgC4QadE1t0OXQjkt7OygqZXrjZJijnAdWwa1ivBD7S
euwHDIcDIUxohu60eow9w4gdckmwIn/5BRmmoQnylbhGdUyJFpsxQ69FD/0kl6fb
mDOeOanpys63Q3yzaITqN62ka/vjKRVB+MeQywQpx13v4jQSC9ps6U7i6FYTS8WG
kTKsxN40VUAtVUz4HPiJ66+y/+E2WE03ghsWQXzsVBgSuVYVxh8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:22 2025 by rpki-client