Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SrEl1Hl2GPr2JnyxKVC_8bW4X-U.roa
File: SrEl1Hl2GPr2JnyxKVC_8bW4X-U.roa (raw, json)
Hash identifier: XWfa6+EcNnp6Vs1cUDi+8yqDrFScjsBUrmryqdKXK9M=
Subject key identifier: 4A:B1:25:D4:79:76:18:FA:F6:26:7C:B1:29:50:BF:F1:B5:B8:5F:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B3E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SrEl1Hl2GPr2JnyxKVC_8bW4X-U.roa
Signing time: Thu 22 May 2025 01:38:22 +0000
ROA not before: Thu 22 May 2025 01:38:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 01:38:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4AB125D4797618FAF6267CB12950BFF1B5B85FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:97:5f:a9:70:32:e9:71:d3:9a:e7:30:aa:
89:f3:0b:9e:a2:f5:63:1d:21:47:69:2f:07:97:5c:
17:bd:2b:e4:3d:25:cd:ea:07:61:74:a1:bf:67:91:
82:9f:ef:57:20:45:19:b8:24:98:21:82:94:d8:ee:
88:0d:25:f1:ac:21:49:78:4e:90:67:10:7f:63:67:
85:81:77:99:0f:e1:18:b5:3f:26:57:cb:ae:d2:82:
52:36:3e:19:f7:b0:94:65:9b:f1:38:6e:e6:8a:3b:
ec:f2:39:7f:dd:4b:be:f1:ff:1d:44:88:7f:46:c9:
da:2d:b7:a4:82:f7:a5:c2:92:11:ea:4e:38:02:7b:
5b:76:41:4c:fa:74:15:89:13:a4:40:98:51:8a:ce:
0e:70:41:31:4f:88:60:d3:10:f1:c9:7f:ea:ea:6a:
cf:d0:88:ba:be:6d:7a:19:a4:a9:da:ab:d3:35:89:
f6:af:2a:0f:d5:2b:4d:29:7f:29:75:c7:e1:10:1b:
8d:bb:06:80:68:18:06:35:f9:a7:fc:f3:ca:ef:78:
1b:9d:5b:b7:64:96:5d:9d:56:69:dd:60:ff:ae:4a:
ed:28:aa:7e:f9:16:d1:3a:a4:51:ce:60:03:4b:fa:
10:53:21:c1:62:ef:a3:16:74:e1:01:a4:c9:b7:0e:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:25:D4:79:76:18:FA:F6:26:7C:B1:29:50:BF:F1:B5:B8:5F:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SrEl1Hl2GPr2JnyxKVC_8bW4X-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:b0:a2:5d:6a:5e:3c:cd:0b:0e:ce:5c:77:ab:49:f2:13:fe:
a2:43:62:68:2c:a8:5a:80:9a:b3:1a:3a:4b:dd:7c:c8:c6:42:
a9:9a:db:6f:3f:69:2f:a0:42:0e:a7:6e:38:aa:dd:4c:d5:fd:
9e:38:47:5c:5b:58:f2:9b:60:65:7d:53:85:74:31:ca:4a:b8:
3e:df:41:44:d9:5c:f9:44:db:58:41:57:1c:02:32:41:dc:f2:
59:f5:35:97:d2:1e:1a:e2:97:7e:71:92:4c:5e:15:a1:55:81:
05:ea:de:87:08:5a:f8:ee:b4:04:79:0d:a8:d2:80:a1:7d:af:
a5:a2:54:9d:ca:eb:e5:56:46:b6:ec:82:e5:6f:01:0c:d8:ad:
3a:be:81:4b:b4:71:3c:10:73:0a:48:e6:34:2b:71:e3:d3:cd:
9c:03:14:49:96:e9:97:84:45:62:26:cb:91:87:93:bb:78:f6:
09:37:50:1f:f4:02:91:9b:ca:4e:d0:08:38:9c:a4:6a:94:2c:
c9:12:ca:32:b7:7e:13:59:89:fa:91:f3:e9:4a:a0:6f:0a:32:
05:c5:8c:72:5d:f7:6f:d4:e2:64:98:63:22:46:0d:be:16:c8:
27:8b:be:5e:57:e9:ac:77:a3:1e:2e:03:ed:06:ea:47:f2:5e:
82:70:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:44 2025 by rpki-client