Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/T_nOHO3w1kHq0K0BAZHT1Qa3Wzo.roa
File: T_nOHO3w1kHq0K0BAZHT1Qa3Wzo.roa (raw, json)
Hash identifier: YL7u3AHBtB7irREKPVq2JQHOeKmmwoT8dlvKUaKH7KY=
Subject key identifier: 4F:F9:CE:1C:ED:F0:D6:41:EA:D0:AD:01:01:91:D3:D5:06:B7:5B:3A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C3A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/T_nOHO3w1kHq0K0BAZHT1Qa3Wzo.roa
Signing time: Fri 23 May 2025 09:09:08 +0000
ROA not before: Fri 23 May 2025 09:09:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 09:09:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4FF9CE1CEDF0D641EAD0AD010191D3D506B75B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:d8:e7:6c:6f:0d:5d:ab:a1:d9:9f:fd:90:
14:0c:f6:cd:f3:df:ee:59:51:53:b2:7a:f6:97:fb:
0d:25:f0:80:5b:84:75:b0:ea:e4:d4:68:42:1b:82:
89:27:ac:8e:8f:90:06:ed:7f:1f:a9:41:12:d6:a0:
70:12:3d:6f:85:7e:e8:73:a1:1c:fb:96:52:40:d7:
2f:45:21:7b:ae:65:90:24:8c:d2:b6:36:ba:7e:9f:
3c:26:b0:aa:5f:39:ef:32:cd:1f:60:33:71:3c:ed:
9c:06:b1:e3:9e:f4:a2:d1:5c:e2:fe:4b:f5:cf:c5:
c0:38:b9:8b:84:3c:e8:58:29:33:f6:53:eb:e5:21:
c4:c4:8d:46:63:4c:96:65:db:c9:95:39:34:02:8f:
9d:12:5b:6d:35:3b:98:bf:d1:8f:46:a1:d5:09:36:
0e:fc:36:fa:86:87:dd:71:d3:e4:25:a4:2f:29:47:
55:8d:ff:84:04:c2:f7:42:a7:7e:7f:91:b2:55:fc:
01:e3:7b:0e:8a:27:c4:24:68:43:4c:28:ae:ef:2e:
37:c2:39:b8:cc:1c:7f:2f:46:61:3c:64:ea:c7:a2:
ce:39:7f:e2:36:46:d9:83:bd:c2:54:40:b0:1c:4d:
87:a0:6e:93:31:f9:16:69:43:87:1e:5a:49:dc:8a:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:CE:1C:ED:F0:D6:41:EA:D0:AD:01:01:91:D3:D5:06:B7:5B:3A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/T_nOHO3w1kHq0K0BAZHT1Qa3Wzo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:73:ae:45:3e:81:4d:98:c4:64:26:ec:97:56:6e:15:5e:81:
3d:04:8b:c7:d5:1a:6c:26:e0:a0:2a:36:ac:ae:66:49:64:1a:
05:4d:8c:80:9a:05:0f:77:5d:57:ff:86:21:2e:e8:38:45:eb:
69:ab:4c:22:90:c1:dc:bb:af:11:e6:29:db:2a:03:d4:f8:08:
d6:49:61:6b:2f:85:0d:b3:16:d8:db:72:22:2b:16:b3:de:53:
c4:d4:ba:e4:60:f3:c6:11:c7:b8:6b:ed:45:06:ed:41:7e:fb:
92:23:6b:6d:c0:16:74:f3:bd:b4:94:e5:45:4e:27:cf:05:a9:
4a:96:a7:7d:1d:e8:b1:c6:41:b5:2c:ed:f8:f5:c1:a6:f1:bc:
75:92:78:8d:4c:fb:64:aa:43:ed:d7:90:3e:3b:e4:95:0f:aa:
29:1a:d6:57:52:3b:29:19:a7:b7:a2:a8:8b:84:62:be:f3:17:
a9:98:e2:f4:55:12:64:d6:03:94:04:8e:88:ce:3f:f3:91:46:
e0:77:64:51:72:d2:9e:c5:d4:f4:bc:ea:98:c7:77:f9:fc:94:
9b:75:25:d0:a8:02:2d:82:91:3c:53:2f:26:ec:15:60:05:22:
ee:a9:c3:92:a7:7a:e0:7b:22:75:4d:e1:a2:32:46:2f:f0:87:
a1:41:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:00 2025 by rpki-client