Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ScTE-hFX3pJBZLwjoUmdz7hbpCo.roa
File: ScTE-hFX3pJBZLwjoUmdz7hbpCo.roa (raw, json)
Hash identifier: 8fe04Olumjp7ryzmMMHrFxWL0oVpkPG0rMrv3QvfgO8=
Subject key identifier: 49:C4:C4:FA:11:57:DE:92:41:64:BC:23:A1:49:9D:CF:B8:5B:A4:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AB2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ScTE-hFX3pJBZLwjoUmdz7hbpCo.roa
Signing time: Wed 21 May 2025 08:08:18 +0000
ROA not before: Wed 21 May 2025 08:08:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2738 (0xab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 08:08:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49C4C4FA1157DE924164BC23A1499DCFB85BA42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:fa:83:31:91:45:af:60:8d:59:8b:3f:31:
3b:e0:54:26:3c:09:4d:23:56:94:d3:1e:27:90:1e:
62:29:67:6d:17:12:e7:4c:2a:e5:76:4c:2f:bf:d6:
e4:56:cc:d5:ad:27:6d:d4:5c:62:2c:be:18:01:4a:
17:8b:5e:1d:a4:64:a4:6b:5b:21:de:29:56:cf:78:
52:71:4b:f3:b1:35:4c:4f:e1:0f:45:37:9a:26:61:
51:76:88:1d:8f:fd:df:9f:8c:62:f6:17:fe:c1:35:
04:a3:1a:c7:b2:7e:4d:42:db:f3:45:8d:b9:b3:dd:
d0:91:f1:3f:40:14:e9:d5:f6:f8:3d:c0:52:43:75:
88:4e:26:10:da:25:8d:c2:6a:c3:6d:34:8d:a7:c5:
16:a2:68:2d:41:d4:99:b5:39:e5:22:e1:ae:dc:e4:
b4:8d:37:bc:a4:0c:af:ca:ed:bd:61:7c:b0:1f:2e:
24:d0:68:6b:ea:36:ea:1a:61:ea:77:46:60:cd:92:
79:b3:22:37:40:25:81:dc:f9:6f:b4:f4:ad:81:e1:
23:f8:0e:27:57:12:21:d5:38:bc:e2:93:f4:28:14:
8c:9b:c1:71:e3:9a:dd:b6:a2:d4:71:a0:0b:49:89:
6e:95:95:ac:fa:dd:0a:62:ff:b8:cb:da:e7:a3:25:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:C4:FA:11:57:DE:92:41:64:BC:23:A1:49:9D:CF:B8:5B:A4:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ScTE-hFX3pJBZLwjoUmdz7hbpCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:69:98:02:8b:05:4b:9d:c1:ea:d8:97:1e:d5:e2:42:88:d0:
2a:cd:e2:70:0f:b9:af:ba:dd:29:3f:a5:58:95:4f:e5:48:f9:
39:1a:cc:09:fd:a7:fa:ec:14:6e:43:e9:40:01:6f:4b:1b:f1:
89:aa:87:70:42:53:be:4b:ac:ed:a6:8d:f5:8e:23:bf:7f:e9:
37:61:b3:95:c1:ba:21:ae:54:0c:87:67:87:79:a2:d1:e9:bd:
96:c2:58:e1:46:ac:4e:4d:3f:38:3b:a9:ef:aa:e8:2f:3d:c0:
3a:e8:9b:34:b9:01:1d:7a:0c:ac:bd:f1:3a:e1:48:fa:d6:9b:
87:7f:ba:ed:0f:c5:ee:94:cf:bb:8e:6b:f2:44:19:67:84:17:
07:2a:a9:07:78:01:f1:1c:56:23:50:2a:df:e5:a8:bc:01:33:
50:5e:5e:0c:d7:51:65:97:c0:9b:6c:66:1a:42:bb:c4:b9:a3:
6a:0f:9b:e4:d2:7b:e7:8d:9e:ed:20:69:d2:32:ba:ec:89:2b:
3a:9c:76:c3:1b:49:cf:27:f0:2f:29:cf:dd:14:69:58:81:d3:
28:a4:91:8f:7b:7c:31:bc:aa:3c:a8:3a:0d:a9:ef:80:8b:e0:
45:01:58:e1:e1:10:f8:c0:8d:e5:c5:0d:f6:df:91:6e:13:65:
fd:74:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:34:53 2025 by rpki-client