Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VSlsAJSHelaSheUsjcb1xNaSefo.roa
File: VSlsAJSHelaSheUsjcb1xNaSefo.roa (raw, json)
Hash identifier: cjt34N4Yu6wHH96vOZZmk5XrEYNMd0+8D8ZFGVoMATw=
Subject key identifier: 55:29:6C:00:94:87:7A:56:92:85:E5:2C:8D:C6:F5:C4:D6:92:79:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07F6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VSlsAJSHelaSheUsjcb1xNaSefo.roa
Signing time: Sat 17 May 2025 16:38:19 +0000
ROA not before: Sat 17 May 2025 16:38:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 16:38:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=55296C0094877A569285E52C8DC6F5C4D69279FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:59:d7:0f:cd:5f:71:6b:12:4c:13:5e:3d:
8c:88:84:85:0e:c0:73:b1:c5:08:02:5a:bd:4e:8e:
62:96:d1:c1:e1:10:0b:c1:61:33:ed:f7:89:a4:fb:
e9:4e:4d:a2:e2:93:f3:0d:60:df:ff:fe:21:a4:f3:
f0:3f:65:fc:68:a8:28:a2:f3:7c:64:a2:91:df:d8:
c0:bc:44:88:69:98:ab:a8:09:a8:59:35:b1:bc:23:
ce:45:52:de:7e:52:e6:f2:71:9a:de:07:7d:01:ed:
16:da:37:d5:25:d0:cf:15:50:3a:af:56:2c:cd:1d:
2b:d7:dd:f4:70:72:d2:64:23:a3:54:f1:c2:2f:f5:
71:50:48:05:6b:fa:4d:39:1d:ca:58:cc:9f:cf:25:
5d:4e:ae:db:62:1c:ca:5d:c0:5b:1c:37:93:0a:6f:
19:21:92:94:b3:94:56:17:61:f5:a8:2b:93:b4:29:
fc:e6:fd:18:29:24:1e:13:aa:db:f6:fb:19:91:42:
75:3b:59:f6:1e:8e:39:3b:14:6b:6c:08:bf:c4:19:
18:d9:3f:99:b2:33:a8:90:1e:44:35:69:a2:fe:11:
d6:f2:c1:13:14:6f:31:ba:4d:f7:3e:1e:2d:9d:5e:
2e:30:58:b7:89:92:0e:28:e3:6e:4d:2d:86:33:cd:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:6C:00:94:87:7A:56:92:85:E5:2C:8D:C6:F5:C4:D6:92:79:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VSlsAJSHelaSheUsjcb1xNaSefo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:ac:67:a6:51:33:ef:01:ab:c6:4b:bb:1f:d5:be:91:61:7e:
94:92:ef:e9:a2:d4:f3:cd:9c:68:85:4e:89:1d:13:ed:f7:1b:
d2:99:d0:4e:5f:c8:c3:b0:2a:9d:bf:a5:e2:79:32:c5:47:33:
4e:24:49:fd:2b:0c:df:e8:2f:9c:03:8e:1a:e4:08:dc:4c:b9:
5d:0c:ed:9e:c9:18:5e:56:3e:a2:c6:1d:49:94:c2:51:54:89:
2d:e2:b7:f3:b0:fd:3a:eb:9d:f6:99:f3:8e:3c:02:8a:a0:00:
4e:41:42:cb:8a:37:de:00:14:99:39:00:52:fa:a6:ef:86:67:
a8:47:e2:27:f0:d4:4d:b2:9f:00:d9:ca:9e:56:5d:39:9b:10:
fc:4f:3a:05:b9:bd:03:de:6d:4f:21:75:95:7b:53:33:02:43:
8c:1c:49:fd:b6:48:c7:5b:92:f7:1b:0c:a9:ea:09:10:2a:be:
54:56:e9:c0:67:2d:80:40:d1:3f:b4:10:55:46:e4:2a:f5:ba:
0e:c2:0a:20:6c:63:4f:ec:66:bf:68:06:e7:11:29:5f:60:46:
6b:4e:f8:3a:08:f4:01:21:d5:e7:d1:d5:7c:a0:4e:ba:e5:f7:
90:4f:e6:62:e6:ca:58:bb:dd:ee:37:7b:23:5c:56:a3:ae:9f:
8c:00:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:43 2025 by rpki-client