Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hoApgDzCyHugWE1Hl7kdN45Bjek.roa
File: hoApgDzCyHugWE1Hl7kdN45Bjek.roa (raw, json)
Hash identifier: akGkez2zmLme6u7edchn6Xh+vneh+zVR6JWy7H1JG2U=
Subject key identifier: 86:80:29:80:3C:C2:C8:7B:A0:58:4D:47:97:B9:1D:37:8E:41:8D:E9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EBE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoApgDzCyHugWE1Hl7kdN45Bjek.roa
Signing time: Mon 26 May 2025 17:38:42 +0000
ROA not before: Mon 26 May 2025 17:38:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3774 (0xebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 17:38:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=868029803CC2C87BA0584D4797B91D378E418DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:31:de:5b:05:0c:93:ff:b7:fc:c6:ae:49:
05:ea:ba:ac:bd:08:e9:bd:d6:bf:9c:98:f7:5f:30:
04:16:b2:05:5b:0e:d8:a1:f7:fb:8b:88:53:26:30:
ad:1f:f7:4d:cd:f6:1a:f1:f9:53:dd:0b:33:fa:a8:
6b:a0:80:50:94:ad:97:7b:63:a7:4b:25:39:3c:13:
37:a3:6c:d0:11:c5:5e:ad:15:d6:5a:a7:26:40:09:
01:e6:13:6d:9a:02:f0:29:ec:06:94:64:b0:35:cc:
65:2f:97:25:49:72:2a:48:d5:3f:9d:96:f6:52:24:
84:3e:2f:fb:3f:d7:76:64:27:08:22:48:05:32:29:
17:0f:93:8a:cf:b4:70:11:0b:6d:7d:22:93:e1:92:
08:bc:99:7e:26:96:50:0c:b8:bf:79:43:97:01:41:
55:03:af:5c:45:7e:9a:19:53:c2:48:6a:2f:36:a4:
f4:94:7f:05:7e:41:6b:2f:8c:16:41:21:e2:e3:4d:
8e:6a:9d:74:fa:23:af:4e:b7:b0:fd:8e:23:a7:e3:
6d:87:25:f2:53:ec:0b:78:8f:aa:d3:1c:b7:c9:40:
ee:89:91:ac:56:50:bb:ce:6c:2e:f0:5f:48:17:c2:
df:22:1b:37:97:03:fd:4c:37:74:c1:92:6f:43:5e:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:29:80:3C:C2:C8:7B:A0:58:4D:47:97:B9:1D:37:8E:41:8D:E9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoApgDzCyHugWE1Hl7kdN45Bjek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:53:be:7c:0b:e6:0a:63:1a:3a:68:55:b6:9c:51:17:d4:d6:
fa:6c:fd:a9:26:2f:6b:11:0b:a7:06:c7:f6:f0:fa:0c:59:d4:
a1:70:84:9e:4e:37:cb:f8:b5:22:21:66:15:59:87:28:13:67:
45:db:73:8d:1b:9c:6f:40:40:b6:22:81:b5:94:a9:bb:0b:3c:
bb:09:7d:f6:1f:f9:ea:53:88:21:83:4e:1f:7f:a8:01:78:16:
c4:ed:63:ee:3e:f8:1d:5e:17:22:6e:e6:7b:da:66:88:1c:c3:
70:b6:e5:61:06:5b:80:3e:51:01:6f:4e:c2:59:8e:a9:e0:77:
fd:7c:96:51:39:57:c6:f5:8b:04:53:bf:9c:34:30:53:2b:8f:
b9:09:1b:66:99:bd:38:7e:51:9e:eb:f0:be:9b:72:96:09:7e:
de:b3:d2:04:87:f9:8c:14:f2:73:9e:8b:74:85:ea:b4:70:4d:
18:af:b4:0f:7c:5c:49:f2:61:31:e4:ea:22:c6:47:e2:da:e1:
b0:be:e6:4b:e8:be:18:9c:c6:1d:f1:9b:b0:a5:4d:28:4d:5f:
6b:22:89:af:bd:e1:5b:05:47:d4:75:fc:db:7b:6e:64:83:4d:
02:7b:9a:ac:91:b5:0e:a5:26:35:9f:9d:bf:bf:71:53:94:8a:
95:9b:72:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:26 2025 by rpki-client