Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IeekVQ4T3A5sqJp8Br4fxqaJeMs.roa
File: IeekVQ4T3A5sqJp8Br4fxqaJeMs.roa (raw, json)
Hash identifier: EdIvp5rZYy/6Q0kmAqJ0EmiYv+8PTkqaDu8tSki+ggo=
Subject key identifier: 21:E7:A4:55:0E:13:DC:0E:6C:A8:9A:7C:06:BE:1F:C6:A6:89:78:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0A0A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IeekVQ4T3A5sqJp8Br4fxqaJeMs.roa
Signing time: Tue 20 May 2025 11:08:19 +0000
ROA not before: Tue 20 May 2025 11:08:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570 (0xa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 11:08:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=21E7A4550E13DC0E6CA89A7C06BE1FC6A68978CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:ad:fd:ab:0b:85:fa:fa:50:f5:5b:65:83:
b9:2a:d5:db:58:35:5e:2a:f5:ea:b4:98:d3:4c:f1:
97:29:65:c3:97:0b:c0:db:1f:6f:4f:89:94:69:11:
43:9f:32:de:e3:ac:d4:28:c8:b8:90:1a:cb:9e:01:
d8:12:3c:d3:a0:47:29:b8:37:14:c6:c0:cb:73:8f:
c0:46:3d:cb:be:5b:f7:ee:65:61:84:d7:14:69:a1:
bd:b9:d6:8d:f3:ad:06:82:f0:93:24:c2:7f:72:c4:
87:17:c5:47:de:a5:3b:7d:63:e3:9a:a6:38:8d:0e:
6a:d7:ce:35:5a:e2:ce:25:c2:89:b7:a2:47:5e:d6:
9c:eb:6e:72:a8:6e:0c:e6:ee:f0:f7:33:b1:3b:c3:
88:5c:e3:10:8c:e2:c6:b4:5b:67:73:fc:58:60:b1:
f1:ca:b2:b1:ff:47:a4:22:1a:21:2a:82:32:d4:e5:
97:e3:73:6e:be:7f:da:87:8c:98:e0:fc:00:a5:7c:
28:de:e0:02:ba:16:c5:3e:f0:93:4d:87:fb:4d:40:
57:24:f7:f9:a1:39:91:ba:bd:ba:af:99:68:52:af:
ae:e6:3f:60:1e:87:d1:e6:eb:70:ab:9c:99:22:b0:
27:cd:06:9b:96:f1:2c:01:bd:53:21:90:40:37:14:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:A4:55:0E:13:DC:0E:6C:A8:9A:7C:06:BE:1F:C6:A6:89:78:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IeekVQ4T3A5sqJp8Br4fxqaJeMs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:af:52:0e:38:55:37:b5:aa:0a:db:aa:c5:29:14:ba:f5:d8:
f3:2b:ec:e9:c2:c9:e3:ef:7a:e9:eb:25:62:67:7e:66:05:aa:
89:96:49:71:bc:1f:b8:18:62:12:03:6f:11:44:54:f1:37:a0:
c6:55:d1:06:9d:90:5c:d9:31:49:ea:b9:cb:69:44:0a:eb:63:
a4:7f:d7:66:b2:76:85:95:4e:16:07:8a:ec:ad:0e:91:45:ec:
ca:ab:af:37:df:9b:3c:66:db:32:4c:d2:65:04:0f:62:56:7d:
75:09:fd:11:09:f2:64:f4:73:c1:80:87:31:93:c8:ff:b8:7d:
3a:47:60:b5:8f:bc:72:b1:28:bf:2d:e4:94:50:57:0e:bf:03:
20:a4:3e:7e:5c:fc:6c:aa:d4:36:1a:fd:c3:91:65:e9:b8:cd:
91:c8:18:4a:0e:fd:16:3e:b2:4f:f5:a7:eb:8e:4e:18:e3:6b:
56:f1:f9:17:1f:03:aa:4b:3f:15:f7:e3:2f:c9:99:37:04:f6:
ad:86:28:a0:6b:21:a5:38:53:84:95:96:0d:e0:21:f8:12:fb:
8a:be:af:18:dd:d8:10:0e:70:01:42:5b:41:91:5f:c3:97:7e:
aa:5a:a5:34:de:38:86:ea:be:36:11:30:3a:5a:31:33:60:3d:
13:2a:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:19:25 2025 by rpki-client