Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I1TTiZTEf4eO1MnlcHAklcbJliA.roa
File: I1TTiZTEf4eO1MnlcHAklcbJliA.roa (raw, json)
Hash identifier: +3k4wV6JR8ml4UgzAnpzJu2faGfTdsQs+DvMYNbd7pc=
Subject key identifier: 23:54:D3:89:94:C4:7F:87:8E:D4:C9:E5:70:70:24:95:C6:C9:96:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EDE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I1TTiZTEf4eO1MnlcHAklcbJliA.roa
Signing time: Tue 17 Jun 2025 05:40:03 +0000
ROA not before: Tue 17 Jun 2025 05:40:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7902 (0x1ede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 05:40:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2354D38994C47F878ED4C9E570702495C6C99620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:54:ec:87:00:a9:ff:40:20:f3:c7:d7:95:
61:9a:27:0e:41:1d:04:dd:ce:70:99:97:ad:77:31:
8e:8a:56:2e:ed:3f:22:00:88:38:20:65:2f:a9:e9:
89:0a:e9:1f:ba:e7:fe:4f:e7:e8:d6:72:d9:09:d1:
b8:8b:b2:23:b7:53:ac:b1:f9:f9:48:d0:cc:48:3c:
81:59:61:94:75:a7:8b:b1:3d:b2:de:a4:ab:ac:a5:
13:c5:26:78:cf:cd:cd:b9:47:b1:e4:9a:bd:6a:59:
79:46:a0:c0:cf:89:47:2b:70:59:29:2c:bd:0d:8e:
d4:fd:6b:f1:47:47:29:91:09:3f:72:8f:51:51:5b:
7f:dd:e8:0c:bb:97:84:8c:25:1a:24:a7:40:2c:8c:
64:1d:4d:bb:4f:7d:60:bf:b9:6e:9b:fe:0b:80:d7:
25:09:4d:13:99:4c:17:12:c1:f4:2a:c1:e6:3a:2b:
de:03:87:04:81:61:8c:2f:d1:24:35:b1:19:0b:81:
c5:8f:f1:62:e9:06:61:d1:56:bc:c8:2f:24:96:9c:
74:ea:44:d6:b3:9e:89:50:22:38:b5:42:5a:9c:b2:
b5:36:58:70:b7:14:16:cd:28:c3:c1:9a:74:53:4d:
75:10:59:04:c6:a5:85:e6:5d:3d:ba:5c:f2:93:40:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:D3:89:94:C4:7F:87:8E:D4:C9:E5:70:70:24:95:C6:C9:96:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I1TTiZTEf4eO1MnlcHAklcbJliA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:65:51:69:56:78:9c:26:ca:5c:ae:70:20:26:6f:fd:99:9f:
5c:41:65:09:75:aa:61:62:e3:c3:16:ea:5d:55:1f:17:df:cb:
e7:7a:cd:38:8c:81:91:f4:45:7c:bf:a4:03:ac:9b:5b:07:0e:
18:81:aa:96:f4:7e:8f:5d:46:14:5d:9b:67:c4:d1:1e:f0:0a:
a9:a2:da:10:0b:59:6e:33:91:49:e1:b6:5e:61:77:2f:f4:a2:
90:c5:59:a5:b1:6f:a1:aa:4f:68:da:72:ea:8b:78:30:70:c3:
2d:da:e5:78:3c:a7:a0:21:30:18:f1:2c:3c:7f:c1:a5:86:ab:
ee:e7:93:08:ed:e8:cb:8b:c3:5b:38:e0:73:32:45:fd:20:e8:
cf:4f:4b:e4:98:80:7f:b4:70:7c:a8:89:61:a2:9d:05:23:9c:
42:99:26:4f:bc:e1:fa:b6:b0:04:66:cd:53:76:7c:70:2f:2e:
13:4e:2d:82:13:f5:25:e3:ea:46:09:a3:3d:f4:01:31:ee:59:
e6:b5:0e:9e:63:21:1f:7b:53:71:ad:30:4c:3c:fa:7b:83:4b:
cd:93:b8:5f:86:95:5b:ac:aa:64:ba:c2:94:e4:ca:d4:3a:1b:
69:3d:2f:91:dd:6f:b4:16:51:17:19:bd:64:55:d2:32:81:ee:
7e:58:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:11 2025 by rpki-client