Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ImH0qWTZu6drMk9b5BC6hBoF5zs.roa
File: ImH0qWTZu6drMk9b5BC6hBoF5zs.roa (raw, json)
Hash identifier: UGJGAILKe8x9dbj13/EeVN9p/xuhXgBYFn+kLMwsrOU=
Subject key identifier: 22:61:F4:A9:64:D9:BB:A7:6B:32:4F:5B:E4:10:BA:84:1A:05:E7:3B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 163A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ImH0qWTZu6drMk9b5BC6hBoF5zs.roa
Signing time: Thu 05 Jun 2025 17:09:25 +0000
ROA not before: Thu 05 Jun 2025 17:09:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5690 (0x163a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 17:09:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2261F4A964D9BBA76B324F5BE410BA841A05E73B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:ea:e4:44:d9:72:69:94:ba:60:9b:44:3a:
16:f4:ba:1f:0c:8e:f0:a6:77:28:d1:ae:ae:37:8a:
14:5d:40:9a:7c:24:c2:28:28:00:3d:ea:80:2c:11:
b9:2c:8e:00:50:b0:36:c4:d4:eb:b0:7c:a1:9d:c3:
4c:6c:ec:40:d4:c1:47:80:8b:d4:22:dc:e4:c6:29:
cf:56:81:c5:02:1b:07:d1:20:16:39:f9:c2:26:e4:
c3:d3:59:5e:8f:b9:21:e2:95:9f:55:63:11:d2:ba:
9a:b9:8d:91:aa:2e:12:82:c1:17:d1:b9:f0:80:6e:
86:41:a7:43:a2:99:c0:4b:4c:8e:36:32:55:4b:58:
f4:55:0f:35:d3:24:51:44:a1:19:18:2a:86:22:b8:
e8:4b:89:86:2b:57:72:43:13:be:5e:df:ba:c6:0c:
56:42:30:c0:28:09:b0:36:de:7d:6a:7b:a8:84:01:
a5:06:ea:d8:a4:5b:68:4a:85:7d:9c:46:2a:5b:1b:
7d:4d:ec:b9:6b:2d:bd:76:f8:12:ad:25:b2:66:d2:
6a:b2:4d:70:b0:c8:e8:84:36:e6:d0:9d:d8:95:c9:
3a:41:23:d1:ef:77:82:2b:c7:f2:8e:b7:e9:bb:f9:
10:34:f7:f1:af:a5:13:22:84:12:23:b5:a7:12:99:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:F4:A9:64:D9:BB:A7:6B:32:4F:5B:E4:10:BA:84:1A:05:E7:3B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ImH0qWTZu6drMk9b5BC6hBoF5zs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:cc:f0:e3:ad:be:12:14:89:f8:b3:c7:00:99:a4:77:53:07:
c5:7b:32:54:09:8d:f0:58:4a:37:be:e3:48:04:50:2c:7c:3e:
31:b2:f2:39:53:56:39:4d:d0:a7:de:49:1e:20:7b:5d:d5:28:
ea:df:b1:47:d8:4d:fc:0a:d7:21:06:4e:01:e8:f9:31:a4:a6:
ad:21:f4:66:a9:c3:33:12:02:e3:66:ee:85:c3:91:3d:0d:35:
98:62:66:22:22:5b:6e:b8:13:ce:83:d7:90:d6:e5:e6:82:e2:
e9:ed:f8:6a:db:c0:ef:b6:5c:ce:ab:c3:86:00:60:47:74:06:
c1:33:9c:ef:d5:5e:e1:3b:54:5e:c3:f5:22:83:d3:bd:7f:b6:
44:c5:85:67:6e:01:98:ed:a1:99:94:75:7b:78:64:ed:cd:a0:
90:00:f0:a7:9b:0a:ee:14:7c:e8:b5:9f:ef:3e:af:a6:48:5f:
4b:1d:38:22:2a:8c:31:a4:e1:42:8f:71:3b:cb:b3:05:fc:8f:
c7:ac:3b:5c:44:91:f3:ce:1c:77:10:b1:8a:78:1a:d1:08:ad:
a5:e7:61:a7:c7:da:8d:b8:6a:db:c4:38:cf:ff:31:07:50:79:
3f:57:d8:5f:1c:d5:03:c8:b8:39:eb:e2:b9:21:5b:e8:4d:8c:
40:3b:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:41 2025 by rpki-client