Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aPlKvF5E4ixWLafvTuxp2lqyjFc.roa
File: aPlKvF5E4ixWLafvTuxp2lqyjFc.roa (raw, json)
Hash identifier: WpFxrdQemvyUP/UpP52+ljq5OUr95dsUmds1bglwLQU=
Subject key identifier: 68:F9:4A:BC:5E:44:E2:2C:56:2D:A7:EF:4E:EC:69:DA:5A:B2:8C:57
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F16
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aPlKvF5E4ixWLafvTuxp2lqyjFc.roa
Signing time: Tue 27 May 2025 04:38:50 +0000
ROA not before: Tue 27 May 2025 04:38:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3862 (0xf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 04:38:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=68F94ABC5E44E22C562DA7EF4EEC69DA5AB28C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:c0:15:a0:db:93:f6:8d:f7:4c:d6:36:f2:
0f:6d:48:bf:b9:6d:b5:3c:a9:de:8b:ab:7b:dd:d5:
5e:9c:35:70:c2:0f:ae:61:b3:53:5a:e2:d8:82:f0:
66:bf:e9:41:d0:98:75:40:bc:27:b2:e8:63:1e:e2:
f6:8a:49:25:37:44:35:c2:44:2b:47:35:7d:37:31:
48:f2:16:65:07:12:dc:36:7f:dc:96:e9:63:26:f6:
db:cd:d1:00:3c:61:cf:1b:22:87:44:95:fb:a6:b8:
37:93:01:ef:c5:ee:3a:cf:2b:b4:7c:7d:23:a8:0c:
a8:c9:cb:c7:fd:f3:ba:fb:f5:41:18:07:4e:39:c9:
e6:ed:e1:f2:5e:0f:f2:aa:57:fe:89:92:1a:52:c5:
ef:8b:36:20:30:20:8c:72:32:0b:22:e0:37:30:9e:
5c:37:fb:0d:4c:88:7e:b4:00:3d:4b:19:96:6b:0e:
96:48:24:3e:d0:da:2c:41:6c:94:40:c9:49:3b:72:
9f:35:6d:75:0a:0a:65:d7:31:52:74:c2:f2:0b:b3:
17:d9:be:7c:9e:c1:ed:83:c2:02:99:33:a7:c2:ee:
0f:ce:a9:21:55:01:b2:48:53:d3:65:89:99:ae:c2:
7c:fa:97:94:f1:4c:ca:10:85:35:0f:b2:1a:4e:ae:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F9:4A:BC:5E:44:E2:2C:56:2D:A7:EF:4E:EC:69:DA:5A:B2:8C:57
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aPlKvF5E4ixWLafvTuxp2lqyjFc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:ef:5a:b7:79:d6:40:d1:77:f0:58:4d:40:3d:30:94:7a:31:
93:e8:80:92:2b:3b:d2:6c:a7:3f:c4:c2:b9:ba:a8:5f:6c:5a:
cb:68:90:da:32:3f:7c:fd:e5:83:d3:4b:46:ff:a7:8a:59:33:
9b:c8:1e:7d:b2:65:f5:0f:55:da:ae:aa:e2:f4:45:b6:33:7e:
6c:0a:18:d7:85:7c:9e:13:6e:29:dc:f8:0e:7d:de:93:a5:94:
97:da:4f:99:07:04:89:d8:1a:b0:76:aa:df:98:c9:23:8f:6d:
0f:1b:10:5e:ac:c5:35:d2:a2:fc:7f:cc:36:72:30:82:f7:26:
26:38:f9:eb:5d:18:6c:15:66:11:89:99:ac:12:7a:78:95:36:
65:29:13:e0:18:3d:14:20:16:e6:a5:f3:52:a6:b9:76:fa:09:
77:9b:8e:9d:a2:82:48:5c:b1:fa:a1:c0:90:29:1e:59:81:a8:
8a:90:a4:9e:f2:57:f6:e5:c9:f2:c5:9e:2a:13:59:5e:36:38:
41:42:87:96:93:63:d1:50:be:c8:88:02:08:ec:0d:ab:21:48:
90:4b:a5:86:a2:b0:fd:6b:53:12:8b:39:59:81:17:2b:9e:21:
11:f8:a9:1a:4a:03:17:1e:04:d0:8b:20:f5:53:12:db:7f:58:
d1:8b:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:01:41 2025 by rpki-client