Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XC2UDApoRw9aFO6CyTinTzP6ibc.roa
File: XC2UDApoRw9aFO6CyTinTzP6ibc.roa (raw, json)
Hash identifier: EeTZCVuTdrWxbO7+C8rvzxBFRAgYeIq+6TezPWN0jzk=
Subject key identifier: 5C:2D:94:0C:0A:68:47:0F:5A:14:EE:82:C9:38:A7:4F:33:FA:89:B7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0466
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XC2UDApoRw9aFO6CyTinTzP6ibc.roa
Signing time: Mon 12 May 2025 22:37:59 +0000
ROA not before: Mon 12 May 2025 22:37:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 22:37:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5C2D940C0A68470F5A14EE82C938A74F33FA89B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:a9:ea:9b:9e:86:6b:ea:8b:c6:99:e9:f1:
2a:a8:3c:c7:ad:4e:49:fe:7b:9a:c4:40:e2:35:ef:
2c:15:8a:33:4d:7a:56:10:83:4e:38:c5:ef:ae:4f:
0d:bb:b3:2e:c8:ec:ba:97:f2:29:59:98:75:67:fb:
e3:51:0a:31:b3:c1:98:ec:94:4e:22:d5:d0:0e:18:
e2:ad:81:7d:c7:c0:f5:c6:7a:0b:90:04:59:4d:52:
3a:a5:b3:64:5e:68:04:1c:1f:16:d5:f6:79:00:d3:
d2:06:9a:84:45:6a:3a:ba:f9:2f:16:c3:79:39:57:
8e:30:a1:d7:bf:8e:76:8e:33:92:9b:84:6a:45:e7:
a5:cb:5c:71:fa:97:d4:0d:34:b4:24:c0:19:71:3c:
0c:df:f8:2b:60:43:b6:b0:93:28:7e:ff:79:b3:d0:
48:0c:0f:57:74:af:0d:64:fe:ae:bf:79:0d:32:e6:
d6:b4:35:56:c0:dc:50:ce:7c:58:91:f4:cd:c0:58:
69:50:1c:56:93:2d:09:5f:c2:b6:d7:c5:5c:6d:f5:
3f:d9:d5:cc:02:c4:e8:cc:8b:05:5e:4e:19:ab:ff:
67:8d:3d:83:7a:4e:13:7b:b4:ee:e5:09:ae:8f:63:
8b:36:e7:a5:4e:45:43:9f:01:fd:3f:9c:09:f6:9f:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2D:94:0C:0A:68:47:0F:5A:14:EE:82:C9:38:A7:4F:33:FA:89:B7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XC2UDApoRw9aFO6CyTinTzP6ibc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:f9:a3:9f:4a:33:13:e8:3a:ce:02:06:36:ad:f1:fd:6d:e6:
ff:b6:5e:d3:21:13:be:01:f9:fa:34:0c:76:5b:64:ba:41:b6:
32:f7:be:d4:aa:5c:c8:6a:09:26:29:be:2c:1c:25:79:78:62:
ba:ec:00:2b:be:6a:ef:89:64:68:bc:42:21:2b:48:c0:5c:09:
22:d0:b9:fb:c5:c4:32:b9:a6:91:d2:e1:db:42:8f:a4:60:30:
8d:c9:5f:d5:a5:ca:cc:61:e6:f7:6d:44:6c:fe:fe:5a:7c:c3:
37:01:13:b7:4e:77:ec:83:63:7e:4b:44:d8:4c:43:7f:d8:17:
65:57:b1:45:40:bc:24:b4:e7:cf:5d:b3:c2:68:85:d2:ad:10:
a6:97:17:09:df:3f:00:d0:41:d6:1f:c8:63:9e:31:53:68:ea:
ff:33:b7:e8:45:fa:e3:55:8b:cd:a5:93:44:6a:8b:ea:23:67:
5c:5d:8f:8f:07:cb:fa:54:a3:da:21:51:ae:31:46:97:e2:d5:
ea:52:bf:64:c0:33:dc:da:f0:db:ec:7d:25:ea:3a:6f:78:41:
55:30:6f:2b:6d:a0:32:fc:ef:dd:88:33:da:0c:7c:c1:ba:12:
89:80:f1:f9:a9:e8:06:89:61:19:21:51:e2:01:99:b8:df:a4:
f9:27:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:28 2025 by rpki-client