Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U_9Dr5ACGmabQ71cGV5_GQ0p9hw.roa
File: U_9Dr5ACGmabQ71cGV5_GQ0p9hw.roa (raw, json)
Hash identifier: tuFeeT0OX1oCqksllTegAgw1sKbJzdgmr2GWdHBym7Y=
Subject key identifier: 53:FF:43:AF:90:02:1A:66:9B:43:BD:5C:19:5E:7F:19:0D:29:F6:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B9E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U_9Dr5ACGmabQ71cGV5_GQ0p9hw.roa
Signing time: Thu 22 May 2025 13:39:04 +0000
ROA not before: Thu 22 May 2025 13:39:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 13:39:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=53FF43AF90021A669B43BD5C195E7F190D29F61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:33:d8:83:cc:13:cf:45:f5:74:ed:b4:fa:
54:c1:b2:18:01:e0:29:e8:b7:2b:9d:0c:aa:cb:4f:
3a:48:7f:84:3b:87:f5:cd:52:55:ab:02:72:2e:0a:
9a:d6:47:9a:56:a0:48:2d:60:d0:5e:67:31:74:56:
d6:de:87:d4:9a:c1:eb:9b:60:6b:6b:bd:d8:30:85:
80:90:f7:73:a1:8b:22:98:9f:bd:06:d3:38:fb:ad:
cc:22:c1:d2:0a:dc:fe:4a:0d:fd:e1:1a:10:c2:01:
4b:05:81:48:60:e7:3a:4a:b8:36:85:a9:15:81:6b:
dc:df:6e:9c:e7:21:33:97:ce:24:7c:fa:f5:6b:f5:
59:ec:e1:50:d5:0e:7d:4e:d3:f9:2b:7a:a3:0a:ea:
dd:46:22:95:02:8b:24:e0:c1:bf:95:37:49:52:18:
76:7a:7b:7a:bf:17:9a:20:fd:c7:db:14:ec:ee:1d:
0d:55:b6:4e:63:8a:40:22:bb:59:ba:02:e0:82:50:
2e:19:2d:6c:f6:9a:84:51:0f:ca:14:52:ce:2a:05:
eb:ce:35:30:60:dc:bd:d8:44:19:c2:b5:e8:56:bd:
c6:67:bf:c9:8a:58:6a:e9:ef:48:e7:5f:d2:26:bd:
c7:d0:98:e6:fc:8c:d1:d6:a3:f6:c6:24:e5:ba:75:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:43:AF:90:02:1A:66:9B:43:BD:5C:19:5E:7F:19:0D:29:F6:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U_9Dr5ACGmabQ71cGV5_GQ0p9hw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:67:88:9b:12:46:94:e8:52:ca:a4:88:57:13:71:4e:13:38:
b4:2d:55:39:ef:e7:53:56:34:b2:e6:7d:60:be:e1:70:eb:3a:
f2:7f:5a:7b:d2:16:d2:31:ae:a5:cd:db:fe:32:3d:f9:0a:d0:
6e:3c:db:5d:d3:6f:02:9e:0c:3a:33:87:87:9e:ad:70:19:b8:
11:b5:ed:a3:39:73:b4:71:e8:89:1d:55:e8:a6:a7:cb:23:fd:
0e:d7:a6:b5:12:4b:4e:3a:c3:dc:6c:25:ab:89:98:8d:7a:c2:
9e:49:3f:0d:3e:9d:59:8d:f6:8d:85:0a:48:1e:54:e5:c0:30:
e6:8c:3e:6d:68:b7:a0:4c:6d:3e:6c:03:a3:46:10:9e:f4:d5:
42:45:1b:54:0c:e8:ec:b1:56:ab:c0:5e:4c:1b:9d:2a:f1:19:
7f:4c:38:03:77:de:58:eb:68:2d:bb:e4:e9:0b:b1:0e:67:2d:
e7:28:d2:9e:7e:1d:c5:6f:e7:50:c9:63:af:a5:61:f7:8f:39:
80:b9:c9:73:f6:7b:d8:3d:f2:9f:e8:ca:2c:87:3e:e3:76:e3:
a0:a0:c3:33:ef:5e:16:5c:2c:f1:d2:68:32:73:3e:e5:9c:17:
4c:c3:57:15:35:94:7a:0b:5b:98:a7:4d:11:56:4b:ab:a3:41:
1b:f0:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 04:11:33 2025 by rpki-client