Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W1APc7fw0OWRZqVFa7UqPYIBcOA.roa
File: W1APc7fw0OWRZqVFa7UqPYIBcOA.roa (raw, json)
Hash identifier: CeRbzqPI6eOuFq2wTLpr1Jw4+I/EYriJjDrY2/YsjDA=
Subject key identifier: 5B:50:0F:73:B7:F0:D0:E5:91:66:A5:45:6B:B5:2A:3D:82:01:70:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0852
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W1APc7fw0OWRZqVFa7UqPYIBcOA.roa
Signing time: Sun 18 May 2025 04:08:07 +0000
ROA not before: Sun 18 May 2025 04:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130 (0x852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 04:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5B500F73B7F0D0E59166A5456BB52A3D820170E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:c2:d3:a9:fb:06:87:5a:5c:cb:8c:89:96:
43:7f:fb:8f:9b:90:f7:1d:88:33:e9:36:1a:6e:ca:
70:9b:85:4c:3c:df:29:49:37:f0:e3:22:6b:ee:74:
8b:15:8c:00:1b:2c:14:0e:b7:bb:22:57:30:fb:66:
f3:00:71:54:f8:84:9d:38:9f:9d:0a:00:57:1f:6b:
51:2b:b7:3e:e6:bf:d9:d3:d7:4d:3e:fb:b1:ce:19:
bf:c3:31:93:65:be:9d:b5:51:1b:60:5a:37:fa:37:
24:83:95:6d:ae:39:ac:87:18:a8:58:e9:b3:13:ff:
96:f4:8b:1b:94:2b:33:39:34:d9:1c:a0:4f:b8:c0:
5a:b1:52:ef:7d:a3:0b:4d:04:33:3e:ba:f9:2a:9b:
7a:0d:e0:c4:d2:6e:c7:02:8e:44:62:f5:28:63:9f:
84:b6:16:3c:aa:fe:a6:a0:20:2d:5f:53:db:1c:ab:
f2:4d:8f:ec:33:6c:b9:2b:d0:89:83:ab:ba:86:4f:
ed:15:b2:b7:fd:4d:a6:30:8c:e8:19:c5:41:fa:d5:
7b:4a:0a:34:15:52:da:66:76:2e:3e:47:1d:3a:fa:
bb:d3:bb:53:ac:ba:fa:94:95:ce:8c:ae:07:43:bb:
9a:65:d0:dd:c0:71:5d:af:f9:4f:d6:bd:32:c3:f3:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:0F:73:B7:F0:D0:E5:91:66:A5:45:6B:B5:2A:3D:82:01:70:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W1APc7fw0OWRZqVFa7UqPYIBcOA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:e7:9a:6e:dc:2f:f1:56:a8:7d:c2:e7:76:70:24:49:fc:4e:
da:6c:19:64:0a:30:43:ee:ad:23:59:5b:ed:67:98:28:b6:3f:
f9:74:6f:b5:b4:86:98:6d:aa:a2:78:9c:b0:04:fc:9d:62:2e:
3f:e7:a7:28:36:2c:03:2f:e0:6b:9e:c9:84:f8:ba:cd:ed:fb:
2b:88:a1:20:7c:9c:25:1d:a4:09:55:34:23:4c:dd:c8:b9:6f:
06:c8:15:3b:45:44:41:19:14:a7:3d:b4:fa:c5:e6:34:85:ca:
9c:55:ff:94:f6:81:85:04:5f:8f:89:72:fa:fb:cf:25:a0:bc:
75:61:71:72:45:18:39:e3:ac:ea:c1:55:9b:d0:3b:54:7a:44:
db:e4:d6:41:92:0a:1e:db:d4:5f:13:fc:ef:73:76:96:52:46:
a6:fc:c8:77:08:95:df:53:a5:01:90:17:5e:0a:22:00:dc:cd:
95:9e:86:be:e6:ca:cf:94:09:b1:78:32:88:ce:d1:31:90:45:
1b:a3:d6:ee:33:9b:b2:55:d3:0a:fd:5b:72:dc:02:6a:32:7a:
65:2b:61:ce:01:d5:26:e8:73:3d:d3:c3:bd:17:1d:62:60:ff:
8c:74:e7:62:7d:87:16:37:67:7e:38:bb:27:30:96:d1:d7:91:
7c:85:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:10 2025 by rpki-client