Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gaLrp0i7wHFqKsPgTqUMIUjJN3s.roa
File: gaLrp0i7wHFqKsPgTqUMIUjJN3s.roa (raw, json)
Hash identifier: 9v8ZqDoqEFwUYNuo8ftUIbyvV6hS7lF+rmTNKULyqV0=
Subject key identifier: 81:A2:EB:A7:48:BB:C0:71:6A:2A:C3:E0:4E:A5:0C:21:48:C9:37:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 028A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gaLrp0i7wHFqKsPgTqUMIUjJN3s.roa
Signing time: Sat 10 May 2025 11:07:52 +0000
ROA not before: Sat 10 May 2025 11:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 11:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=81A2EBA748BBC0716A2AC3E04EA50C2148C9377B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:5b:9d:04:4a:27:97:aa:bf:58:70:e6:ee:
b7:92:16:b0:30:4b:73:54:65:50:07:2c:fc:43:68:
06:70:3b:75:76:1e:2b:57:fd:c9:50:f6:d5:2b:8d:
06:1c:a1:db:da:db:b5:a8:29:a1:06:08:b3:3f:20:
b1:89:3a:d6:a2:b2:fe:a1:c7:03:e9:4b:26:f8:53:
43:61:f6:70:69:cd:43:8f:43:87:bd:38:bf:9d:8f:
af:5b:5b:f7:f9:38:06:5f:6e:f0:68:8f:8b:7c:c9:
a6:ee:df:a1:89:c8:31:d0:4c:20:ae:1f:4e:59:f9:
b7:ea:0d:3e:49:77:8d:10:dc:5d:30:5e:72:d5:e0:
2c:63:e2:03:dc:e9:fd:66:48:ca:a3:76:99:a1:72:
6d:34:b9:d5:a3:f0:10:98:2a:41:8b:dd:9a:e9:f9:
bd:f8:1f:44:51:b4:9b:09:f3:78:e9:b0:a1:b1:fa:
7f:1b:a8:6b:bb:3b:10:af:2f:ce:85:f4:5b:f4:27:
87:1d:57:9e:4d:e2:1b:26:10:37:f6:7d:2b:e7:d6:
89:b6:9b:94:c1:6e:4f:e6:1d:4c:88:db:12:8d:98:
ca:e6:dc:db:7d:78:f2:b9:6d:0b:47:a8:a8:f7:63:
2a:93:e9:7c:49:b9:5a:b4:2c:8f:57:da:70:33:25:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:EB:A7:48:BB:C0:71:6A:2A:C3:E0:4E:A5:0C:21:48:C9:37:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gaLrp0i7wHFqKsPgTqUMIUjJN3s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:0c:15:76:ff:af:2b:72:b5:28:01:b2:a8:32:39:cf:de:3f:
eb:ec:60:74:9f:37:2e:c0:fd:f4:19:78:44:af:c7:04:bf:8e:
7f:53:26:a4:2d:d6:63:99:5f:25:60:44:87:f9:1b:27:a2:bc:
81:42:24:f8:56:4e:30:08:e6:46:0d:18:20:b7:2a:63:6d:80:
9a:e0:6c:a1:ae:14:ef:30:f5:7d:db:d9:aa:c3:3e:22:26:43:
0d:34:4f:57:62:07:2c:45:ca:2e:3e:12:12:d5:a6:65:52:7d:
6b:43:4a:7c:83:1c:a0:e0:66:67:16:9e:e6:cd:82:2b:8c:6f:
ca:7f:a2:7f:e7:9f:36:b4:3f:eb:1e:b6:fe:8d:5b:1a:f8:67:
fb:e3:5c:87:fe:ad:79:51:c3:1d:37:f2:76:d8:e1:5e:80:89:
b8:1d:d8:db:46:ca:85:10:0f:26:25:8d:a2:95:ab:64:10:75:
dd:9c:72:d5:ca:8a:9e:1a:56:d5:dd:91:d3:1a:c3:9e:0a:c9:
47:7b:74:f1:a2:15:2e:f9:6f:cf:d2:bc:ea:eb:1e:ff:62:50:
d9:ac:9e:ef:85:fe:bc:ff:cf:df:88:a1:29:70:a6:3d:18:e5:
ef:45:8f:f8:24:eb:ce:05:3e:cb:5a:49:3d:05:23:f2:89:43:
0a:ef:6b:22
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAx
MTA3NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDgxQTJFQkE3NDhCQkMw
NzE2QTJBQzNFMDRFQTUwQzIxNDhDOTM3N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkwVudBEonl6q/WHDm7reSFrAwS3NUZVAHLPxDaAZwO3V2HitX
/clQ9tUrjQYcodva27WoKaEGCLM/ILGJOtaisv6hxwPpSyb4U0Nh9nBpzUOPQ4e9
OL+dj69bW/f5OAZfbvBoj4t8yabu36GJyDHQTCCuH05Z+bfqDT5Jd40Q3F0wXnLV
4Cxj4gPc6f1mSMqjdpmhcm00udWj8BCYKkGL3Zrp+b34H0RRtJsJ83jpsKGx+n8b
qGu7OxCvL86F9Fv0J4cdV55N4hsmEDf2fSvn1om2m5TBbk/mHUyI2xKNmMrm3Nt9
ePK5bQtHqKj3YyqT6XxJuVq0LI9X2nAzJYAFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgaLrp0i7wHFqKsPgTqUMIUjJN3swHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9nYUxycDBpN3dIRnFLc1Bn
VHFVTUlVakpOM3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAHwMFXb/rytytSgBsqgyOc/eP+vsYHSfNy7A
/fQZeESvxwS/jn9TJqQt1mOZXyVgRIf5GyeivIFCJPhWTjAI5kYNGCC3KmNtgJrg
bKGuFO8w9X3b2arDPiImQw00T1diByxFyi4+EhLVpmVSfWtDSnyDHKDgZmcWnubN
giuMb8p/on/nnza0P+setv6NWxr4Z/vjXIf+rXlRwx038nbY4V6Aibgd2NtGyoUQ
DyYljaKVq2QQdd2cctXKip4aVtXdkdMaw54KyUd7dPGiFS75b8/SvOrrHv9iUNms
nu+F/rz/z9+IoSlwpj0Y5e9Fj/gk684FPstaST0FI/KJQwrvayI=
-----END CERTIFICATE-----
Generated at Wed Jun 4 03:50:11 2025 by rpki-client