Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Kh_3a4zrQ7K_1zrgYkmjz_DcjLA.roa
File: Kh_3a4zrQ7K_1zrgYkmjz_DcjLA.roa (raw, json)
Hash identifier: ggADpYu70CkDkDraWChgvZkkG/MAf9uZVt32n6eNZBE=
Subject key identifier: 2A:1F:F7:6B:8C:EB:43:B2:BF:D7:3A:E0:62:49:A3:CF:F0:DC:8C:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 095E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kh_3a4zrQ7K_1zrgYkmjz_DcjLA.roa
Signing time: Mon 19 May 2025 13:38:51 +0000
ROA not before: Mon 19 May 2025 13:38:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 13:38:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A1FF76B8CEB43B2BFD73AE06249A3CFF0DC8CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:db:0a:2a:e5:78:e9:b1:7f:19:49:ac:26:
d0:d1:b4:6b:ee:2b:af:5d:27:12:43:30:28:c1:89:
7a:82:fe:22:12:a8:bc:e0:f8:7d:4c:fa:d1:fe:a2:
2b:e3:12:68:31:7f:88:af:7f:b0:28:6a:a2:b9:b9:
f3:28:f9:0c:ac:02:ef:a2:64:db:03:4b:fd:79:aa:
8c:0f:f0:90:2c:e8:9e:a3:15:66:a9:a0:3c:36:54:
e3:0a:0d:e1:3f:47:c3:df:86:a9:2d:f9:23:a4:d3:
85:23:40:4d:91:85:4e:22:51:e6:31:77:17:a9:b6:
7b:7b:9c:96:f4:15:7d:d8:73:ac:bf:c2:a7:6f:84:
87:75:09:e9:b0:d5:29:b1:52:c0:fd:5b:e8:19:04:
fa:d5:99:8a:08:06:8d:19:2f:ac:a5:9c:d3:c6:24:
94:ca:bc:3a:5f:13:6f:e0:4a:3a:c5:0e:0d:37:61:
c3:08:96:f2:6a:63:1c:05:14:3e:e1:9c:9b:8e:e7:
32:91:15:c7:63:d1:59:4e:07:3c:bc:18:bb:20:9b:
7e:16:33:3d:89:d6:08:22:c4:4b:3a:d2:bb:a5:a2:
69:bc:4c:a1:18:11:a2:b1:46:f8:c7:b5:59:25:6f:
2e:c2:b2:9a:88:37:c1:29:af:24:22:f6:f1:b1:e9:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:F7:6B:8C:EB:43:B2:BF:D7:3A:E0:62:49:A3:CF:F0:DC:8C:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kh_3a4zrQ7K_1zrgYkmjz_DcjLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:4d:6f:ce:a7:64:62:50:4f:0b:c2:4b:4d:d4:27:f5:0f:1f:
93:5b:d3:1c:ea:e9:6f:56:e9:92:4c:c3:c8:93:27:f5:b7:19:
3c:40:0b:62:94:7f:aa:54:3e:95:cc:59:d7:6c:3a:be:f9:e5:
74:3c:e5:27:8b:9c:0a:09:d0:3e:a4:d8:e9:3f:e6:d1:55:db:
d6:83:8b:a9:4b:8e:28:24:d5:b8:9a:4a:be:ea:5d:97:02:17:
dd:0f:8d:77:ea:8e:d6:1d:7b:d4:bd:2c:cc:ce:0e:17:37:52:
30:56:34:16:dc:5c:8e:da:97:27:75:b0:63:53:33:37:3f:bf:
f5:3b:fc:d8:e1:5d:6c:20:53:58:2f:64:51:fc:76:ad:88:c2:
e6:66:04:71:36:3f:d7:67:6d:e8:ba:65:c1:50:4b:e1:d8:99:
d6:55:67:cf:f6:3b:64:78:02:d3:91:50:c4:57:73:80:8b:e1:
1d:b9:d6:7c:63:c9:d5:53:9f:a7:8f:f0:eb:b8:da:ed:04:80:
12:bf:35:78:be:f7:27:77:56:11:97:8b:1a:f1:98:db:59:70:
21:cf:6b:f3:ae:f7:6b:2a:ff:6e:64:77:24:35:6f:c9:7e:52:
15:1b:11:87:d5:04:1d:91:ff:a4:06:82:25:93:eb:0a:67:1b:
8a:67:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:19 2025 by rpki-client