Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LmjUhPtv4uFVeVkdAQ6sEP1KTwY.roa
File: LmjUhPtv4uFVeVkdAQ6sEP1KTwY.roa (raw, json)
Hash identifier: PQs6g28ar6uZQtB07bqs0RgV8978GhiK+M/Tlxu7Szc=
Subject key identifier: 2E:68:D4:84:FB:6F:E2:E1:55:79:59:1D:01:0E:AC:10:FD:4A:4F:06
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D86
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LmjUhPtv4uFVeVkdAQ6sEP1KTwY.roa
Signing time: Sun 25 May 2025 02:38:35 +0000
ROA not before: Sun 25 May 2025 02:38:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3462 (0xd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 02:38:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2E68D484FB6FE2E15579591D010EAC10FD4A4F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:4a:b6:17:d2:b3:b2:4f:0b:a7:c1:3e:a1:
ac:2c:f0:39:c1:d6:6b:3b:50:1d:fc:12:cf:33:b8:
2b:05:2f:ac:e1:b9:da:55:3f:be:78:1b:5e:ac:df:
a9:83:eb:99:9a:e5:f6:c6:65:43:12:60:0f:ae:9c:
c6:27:03:02:1c:5a:ca:50:fc:76:f0:76:9d:f2:e6:
a7:c3:a0:8d:c5:da:b0:49:a7:72:60:9d:4c:8b:ff:
38:7a:7f:4b:ea:ee:2e:a8:d3:75:bc:bc:8c:b4:8d:
4f:39:07:c7:95:c7:7f:01:8d:dc:0b:0b:40:b3:ec:
07:c6:6c:14:b4:ba:62:4f:66:cb:8c:f6:5a:99:94:
6b:97:f0:92:be:7b:03:3b:d4:d3:3d:55:fa:21:e9:
e0:00:1d:be:37:c1:d1:c8:e6:c4:61:99:48:78:0e:
f5:4f:97:d7:ae:ff:24:40:78:3b:c3:b2:4a:37:28:
dd:9c:8d:f7:40:da:2b:5a:54:e8:1b:85:f8:4a:db:
bd:b0:2b:67:a7:0d:f9:bd:36:8b:23:0e:af:32:71:
d0:02:7e:e7:44:0b:3f:e6:c9:62:9a:f1:06:84:03:
0f:31:2a:59:7f:bd:6e:f8:29:9d:33:9c:00:a1:64:
f9:0b:75:c4:31:0c:e7:43:51:9d:2c:aa:46:3e:f7:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:68:D4:84:FB:6F:E2:E1:55:79:59:1D:01:0E:AC:10:FD:4A:4F:06
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LmjUhPtv4uFVeVkdAQ6sEP1KTwY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:5c:33:fc:c6:05:de:be:6c:68:21:f5:72:5d:ba:e9:72:e8:
56:b9:51:67:09:28:b8:ee:a3:fc:ca:ed:a1:60:f2:9b:cc:42:
48:5e:6b:62:70:15:ad:9c:42:38:3a:9c:28:ce:d8:e2:b3:f1:
6d:c0:d1:a5:5a:35:ff:88:19:ef:5b:c4:8e:ab:d6:40:92:2c:
28:f2:e3:c3:65:36:19:70:1d:be:4e:a3:f1:32:c3:e2:76:c6:
dd:06:36:34:7a:55:54:f0:c1:b7:f8:2a:7e:f2:eb:fe:05:1c:
1b:a5:3e:e6:77:b3:43:6a:4d:b5:1d:0c:d2:36:ff:51:ac:8f:
33:8b:1c:1b:f4:a1:f1:05:a2:79:3a:7d:5a:32:21:98:2f:84:
f6:a3:06:2c:ac:c1:03:ab:47:da:b8:fc:7b:35:37:a1:db:fc:
ec:9b:52:23:4a:5a:80:33:37:eb:89:ba:88:0a:87:5b:13:d8:
a1:22:6f:03:c4:f5:46:7d:1d:43:bb:d0:6b:bd:67:3d:bc:5f:
28:c5:4a:08:f2:c5:2e:04:74:a2:1b:dd:41:cd:00:90:ee:9d:
9f:7c:83:c6:94:1e:df:6a:e8:5d:58:ee:52:81:15:e9:bf:bb:
ab:10:24:0a:7e:c5:17:19:f8:a9:44:5e:d6:3d:4f:97:ac:d6:
58:de:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:20:08 2025 by rpki-client