Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UFKkHeIiaump5XjCu14McoqTdE8.roa
File: UFKkHeIiaump5XjCu14McoqTdE8.roa (raw, json)
Hash identifier: Cazn726vTx6n7AINqyV9UBYVvGvmw238s0Xy0IYENGQ=
Subject key identifier: 50:52:A4:1D:E2:22:6A:E9:A9:E5:78:C2:BB:5E:0C:72:8A:93:74:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F92
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UFKkHeIiaump5XjCu14McoqTdE8.roa
Signing time: Wed 18 Jun 2025 04:10:04 +0000
ROA not before: Wed 18 Jun 2025 04:10:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8082 (0x1f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 04:10:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5052A41DE2226AE9A9E578C2BB5E0C728A93744F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:ea:2f:d4:25:fb:ed:18:f4:2c:ed:85:a0:
b4:de:cc:29:1a:f6:f6:c4:7a:e1:a1:bd:d3:3c:3c:
83:a6:ad:3b:e3:21:8a:6c:84:a7:f6:14:c7:49:b6:
c5:09:18:6b:04:a6:dc:32:95:80:47:46:a7:e6:f9:
53:31:ad:b2:a3:e0:8a:37:c8:ad:4b:ab:5a:0e:dc:
ba:47:d0:73:c1:cc:9e:f2:3c:84:db:3f:c3:82:20:
b4:1e:a8:2e:7f:2a:0a:fa:48:27:6f:24:a4:97:f8:
45:19:d1:1a:1e:91:e6:cb:33:f1:50:a1:dc:ac:c2:
93:de:1f:2d:04:47:a2:61:3d:72:b1:01:48:04:9f:
8a:fa:98:66:7d:42:ad:16:28:b7:d0:7d:02:ce:05:
f6:ae:95:7c:3e:5a:6e:6b:ea:07:78:75:b0:00:5e:
3f:a9:ab:ea:1c:28:f5:e2:6d:bd:1a:0a:f7:d0:be:
04:d1:b0:3f:d4:56:35:71:ef:0b:37:f4:2c:b9:c5:
ce:f7:85:93:da:31:ca:b7:e9:23:09:f5:93:51:a5:
5d:bf:03:d9:5a:e4:a6:83:e5:0c:40:cd:56:5f:a7:
a4:3b:9a:4f:4c:5e:dc:d3:2b:08:d0:4e:31:25:5e:
90:18:c4:14:d4:a7:63:e9:92:f1:bb:bd:18:11:a1:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:A4:1D:E2:22:6A:E9:A9:E5:78:C2:BB:5E:0C:72:8A:93:74:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UFKkHeIiaump5XjCu14McoqTdE8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:f2:c2:a1:15:12:c7:0f:bd:43:67:07:27:1c:fe:f5:60:40:
86:a4:70:78:2e:44:d3:45:c9:5f:40:fd:db:f9:b3:47:06:bd:
36:31:a5:4b:ed:8e:08:34:7b:9b:3e:ba:a2:17:02:aa:19:c5:
f1:86:f4:fa:c4:3b:35:9e:c4:3a:09:b1:cc:aa:b5:db:82:14:
9d:2f:0e:6c:74:39:c2:e3:29:88:b5:4c:9d:5a:f5:d6:6a:4c:
b1:33:3b:bb:a4:d5:3d:18:13:c8:0b:2f:d6:bd:a6:0e:91:18:
fd:4e:81:88:47:db:d6:0b:fb:24:b4:ce:52:44:b6:50:04:23:
c9:e9:66:93:74:2c:52:00:5d:fd:b7:b8:66:20:ce:0c:17:cf:
15:3a:37:fd:60:f4:e9:96:4c:a8:94:a6:af:36:63:91:71:55:
5d:aa:84:3b:c4:a2:1e:0b:f1:de:14:01:66:13:0d:65:e7:fe:
39:a7:f4:42:ee:fb:78:eb:60:89:3b:e0:5c:dc:75:ba:20:a6:
bd:68:dc:86:d8:fc:a9:ad:ee:4b:06:cf:73:97:15:ae:82:c4:
96:3e:37:bc:30:73:86:16:b8:58:ed:29:2a:e7:44:57:be:61:
63:a6:5f:e1:4c:90:ee:f9:ec:cc:3c:ae:98:7b:19:b8:b1:43:
05:8e:13:ce
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTgw
NDEwMDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUwNTJBNDFERTIyMjZB
RTlBOUU1NzhDMkJCNUUwQzcyOEE5Mzc0NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEQuov1CX77Rj0LO2FoLTezCka9vbEeuGhvdM8PIOmrTvjIYps
hKf2FMdJtsUJGGsEptwylYBHRqfm+VMxrbKj4Io3yK1Lq1oO3LpH0HPBzJ7yPITb
P8OCILQeqC5/Kgr6SCdvJKSX+EUZ0RoekebLM/FQodyswpPeHy0ER6JhPXKxAUgE
n4r6mGZ9Qq0WKLfQfQLOBfaulXw+Wm5r6gd4dbAAXj+pq+ocKPXibb0aCvfQvgTR
sD/UVjVx7ws39Cy5xc73hZPaMcq36SMJ9ZNRpV2/A9la5KaD5QxAzVZfp6Q7mk9M
XtzTKwjQTjElXpAYxBTUp2PpkvG7vRgRodfzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUFKkHeIiaump5XjCu14McoqTdE8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VRktrSGVJaWF1bXA1WGpD
dTE0TWNvcVRkRTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAjywqEVEscPvUNnBycc/vVgQIakcHguRNNF
yV9A/dv5s0cGvTYxpUvtjgg0e5s+uqIXAqoZxfGG9PrEOzWexDoJscyqtduCFJ0v
Dmx0OcLjKYi1TJ1a9dZqTLEzO7uk1T0YE8gLL9a9pg6RGP1OgYhH29YL+yS0zlJE
tlAEI8npZpN0LFIAXf23uGYgzgwXzxU6N/1g9OmWTKiUpq82Y5FxVV2qhDvEoh4L
8d4UAWYTDWXn/jmn9ELu+3jrYIk74Fzcdbogpr1o3IbY/Kmt7ksGz3OXFa6CxJY+
N7wwc4YWuFjtKSrnRFe+YWOmX+FMkO757Mw8rph7GbixQwWOE84=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:24 2025 by rpki-client