Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IyOW2tN0Tae7LHT0CQ0cdHzLGyc.roa
File: IyOW2tN0Tae7LHT0CQ0cdHzLGyc.roa (raw, json)
Hash identifier: eeca4+smDh0JZti65X+reeWgjSdpwAKu6nB+3JZh6+0=
Subject key identifier: 23:23:96:DA:D3:74:4D:A7:BB:2C:74:F4:09:0D:1C:74:7C:CB:1B:27
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E22
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IyOW2tN0Tae7LHT0CQ0cdHzLGyc.roa
Signing time: Sun 25 May 2025 22:08:38 +0000
ROA not before: Sun 25 May 2025 22:08:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 22:08:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=232396DAD3744DA7BB2C74F4090D1C747CCB1B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:98:d0:02:cb:0b:a5:94:a5:d5:f1:87:b1:
3f:6d:39:5e:59:2a:a5:07:31:a6:97:1a:cf:30:41:
f6:63:c7:34:f9:10:ad:5d:e0:97:a5:ac:47:41:aa:
67:1b:0f:80:bb:2a:0c:79:dc:bd:55:41:3c:95:94:
7c:8e:d7:2e:f7:49:38:54:dc:ca:8a:3c:cc:92:a1:
fa:67:22:37:84:3f:43:a3:07:f5:a9:85:ac:0f:c2:
9e:46:e3:6e:e4:f6:39:13:7f:94:81:57:c8:29:b4:
25:74:b4:a2:fe:ae:75:64:b3:26:bf:89:92:9c:41:
21:6c:6c:b7:63:d6:9e:94:24:95:05:15:77:3f:75:
bb:0d:f1:7f:3f:23:be:11:74:21:0a:5f:d6:87:3d:
20:bc:c8:1f:82:40:45:f6:44:23:99:99:c9:c9:d3:
64:90:3e:db:a6:2b:39:86:89:d4:e1:2f:e5:48:98:
c5:1c:38:62:93:24:0d:ca:55:ea:9f:b3:b8:b9:7d:
7a:41:35:46:79:a3:fe:a4:c0:66:4c:36:d1:9d:3b:
fc:9c:b9:4f:9f:4a:b6:5c:51:ce:c4:35:cb:0e:99:
8b:6d:1e:02:92:1e:51:38:9d:cc:96:b0:5f:4c:54:
4d:36:65:d1:fd:7f:48:be:af:a4:a9:4d:8a:8c:06:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:96:DA:D3:74:4D:A7:BB:2C:74:F4:09:0D:1C:74:7C:CB:1B:27
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IyOW2tN0Tae7LHT0CQ0cdHzLGyc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:60:84:29:66:c9:64:ae:ae:4f:39:7d:4f:33:e1:c9:fe:a3:
1a:95:16:77:4e:79:ea:a0:ec:bf:46:aa:bf:19:d4:01:ea:2e:
10:4f:ad:fa:40:7f:e2:f7:0d:f7:01:74:30:67:7b:33:4c:d9:
39:c6:3e:7f:7e:45:5b:f5:72:58:93:8d:bb:37:e2:d6:71:de:
98:10:50:1b:a3:76:44:94:ed:b7:c4:de:a0:4d:37:30:4b:ba:
ad:05:e5:1a:85:d6:3f:4f:f9:3c:86:de:ce:2c:30:10:f7:54:
b6:10:97:ae:f7:61:60:24:40:cc:a8:b1:67:67:bc:06:6b:a1:
5d:ff:e7:06:5f:09:fe:30:4e:ff:c9:67:1b:07:a7:0f:04:8e:
6a:db:dc:f0:64:ff:6e:6b:10:2f:30:4f:94:1f:da:f3:54:8c:
aa:ac:76:56:61:47:22:29:36:8c:6e:c5:7b:b0:7f:dd:79:6c:
4c:87:a3:dd:d8:2f:99:89:7f:f0:31:af:ed:f9:2b:45:34:36:
0f:68:55:2a:cd:d5:67:fd:94:1f:9a:a4:7a:07:af:56:ca:bb:
fa:44:8f:35:fd:4e:cf:47:20:d4:90:77:c6:ff:e5:05:8f:95:
b2:14:04:89:2e:d7:a5:16:f0:3e:75:50:0c:c6:ae:59:f4:29:
d9:13:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:10 2025 by rpki-client