Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PGC4zq-Ovvmh7-RskCYv8Ulhs-Q.roa
File: PGC4zq-Ovvmh7-RskCYv8Ulhs-Q.roa (raw, json)
Hash identifier: Hjp42Frf4CpZ779abaoyCCMynWhf022FWcdZZ+La520=
Subject key identifier: 3C:60:B8:CE:AF:8E:BE:F9:A1:EF:E4:6C:90:26:2F:F1:49:61:B3:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B2A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PGC4zq-Ovvmh7-RskCYv8Ulhs-Q.roa
Signing time: Wed 21 May 2025 23:09:04 +0000
ROA not before: Wed 21 May 2025 23:09:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 23:09:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3C60B8CEAF8EBEF9A1EFE46C90262FF14961B3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:6e:75:f3:17:4d:7f:73:27:2c:5a:11:5b:
b4:30:68:81:09:c4:5c:93:60:93:f1:67:7b:53:23:
db:3b:ed:cf:cd:6f:67:23:cc:e6:3a:ce:7b:39:fb:
a3:01:1a:bf:71:ba:f9:c7:c9:53:67:76:3e:0d:bd:
d4:a0:5c:b2:6c:6e:8c:22:86:57:30:08:1e:09:71:
63:f8:48:4f:2b:cf:35:99:02:28:dc:e6:1d:5c:c9:
39:18:1d:42:66:1d:6d:28:32:45:b2:ed:7b:45:24:
11:73:6e:48:94:37:d9:1c:40:d6:9e:95:bf:f1:ef:
59:0c:8f:87:eb:44:fe:99:18:43:6b:75:d7:5a:6f:
c7:11:ef:52:5d:3f:ea:26:13:32:c3:ce:46:7d:0f:
d7:b3:e6:1c:23:92:f4:46:bb:36:66:df:e4:3c:0f:
a6:20:4b:84:1b:8c:a5:19:7e:8a:34:4b:88:4a:a9:
bc:1e:83:95:62:3c:31:ef:d0:8c:e6:9d:4c:3f:9c:
d4:94:fe:dd:07:51:53:ce:fa:e0:ca:0f:56:6b:47:
af:5f:ee:2e:8d:64:8f:52:40:18:7f:3a:7b:70:ba:
46:e7:d7:bc:fb:79:b2:6d:72:d7:9f:2f:48:a1:7c:
94:19:0d:1a:8a:4d:79:79:5f:b5:3d:4e:8b:08:f4:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:B8:CE:AF:8E:BE:F9:A1:EF:E4:6C:90:26:2F:F1:49:61:B3:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PGC4zq-Ovvmh7-RskCYv8Ulhs-Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:14:d3:65:ad:52:a5:39:2c:e5:28:e5:79:c3:dc:c2:55:fb:
79:d8:4e:93:c6:7c:d1:a8:c1:32:c6:88:26:1c:5c:ab:de:29:
b8:2d:ee:4c:b5:eb:53:cf:55:58:eb:84:ef:4d:f1:c2:74:a9:
e9:11:38:6c:11:d9:af:c8:08:2f:63:af:ff:64:9e:d8:77:d1:
57:f8:34:6f:08:58:4b:4a:5a:1f:2a:91:94:f0:44:b9:2c:d4:
a6:5e:f6:f3:ef:af:de:88:02:87:57:5c:11:6b:f5:c2:5b:fd:
9a:74:14:34:0e:60:0c:2a:9d:ba:a0:48:d0:55:fc:88:ed:b6:
3e:5d:9b:6b:67:d7:01:77:f2:ad:5b:d7:cc:e5:b6:dc:ee:16:
f1:d7:5d:49:8c:e5:2b:ad:09:48:94:bd:2e:c0:f5:59:52:31:
8b:6c:36:7a:96:08:e0:60:bb:a9:1c:97:ad:14:6a:fb:6a:35:
83:03:b4:86:8e:6f:c1:5c:e2:d1:df:51:08:1f:85:ab:40:6e:
87:dc:09:09:78:87:8a:e3:77:1f:4e:f5:b7:6a:cf:e1:13:b4:
1d:f6:98:a9:38:fe:8f:05:65:a6:d1:f0:67:af:b7:62:c4:5d:
f6:63:12:38:55:45:81:20:b2:f5:b0:74:1e:f7:5b:fb:bc:9c:
90:88:24:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjEy
MzA5MDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNDNjBCOENFQUY4RUJF
RjlBMUVGRTQ2QzkwMjYyRkYxNDk2MUIzRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRwm518xdNf3MnLFoRW7QwaIEJxFyTYJPxZ3tTI9s77c/Nb2cj
zOY6zns5+6MBGr9xuvnHyVNndj4NvdSgXLJsbowihlcwCB4JcWP4SE8rzzWZAijc
5h1cyTkYHUJmHW0oMkWy7XtFJBFzbkiUN9kcQNaelb/x71kMj4frRP6ZGENrddda
b8cR71JdP+omEzLDzkZ9D9ez5hwjkvRGuzZm3+Q8D6YgS4QbjKUZfoo0S4hKqbwe
g5ViPDHv0IzmnUw/nNSU/t0HUVPO+uDKD1ZrR69f7i6NZI9SQBh/Ontwukbn17z7
ebJtctefL0ihfJQZDRqKTXl5X7U9TosI9GL3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPGC4zq+Ovvmh7+RskCYv8Ulhs+QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QR0M0enEtT3Z2bWg3LVJz
a0NZdjhVbGhzLVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFoU02WtUqU5LOUo5XnD3MJV+3nYTpPGfNGo
wTLGiCYcXKveKbgt7ky161PPVVjrhO9N8cJ0qekROGwR2a/ICC9jr/9knth30Vf4
NG8IWEtKWh8qkZTwRLks1KZe9vPvr96IAodXXBFr9cJb/Zp0FDQOYAwqnbqgSNBV
/Ijttj5dm2tn1wF38q1b18zlttzuFvHXXUmM5SutCUiUvS7A9VlSMYtsNnqWCOBg
u6kcl60UavtqNYMDtIaOb8Fc4tHfUQgfhatAbofcCQl4h4rjdx9O9bdqz+ETtB32
mKk4/o8FZabR8Gevt2LEXfZjEjhVRYEgsvWwdB73W/u8nJCIJHo=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:06 2025 by rpki-client