Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lPrrv9xRt4nmHVbVSDO8nCg1Ew4.roa
File: lPrrv9xRt4nmHVbVSDO8nCg1Ew4.roa (raw, json)
Hash identifier: uh9NUO75if9qSCyJ8lUyXQuYTe4ZqyrQBOpoufI9clg=
Subject key identifier: 94:FA:EB:BF:DC:51:B7:89:E6:1D:56:D5:48:33:BC:9C:28:35:13:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E7E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lPrrv9xRt4nmHVbVSDO8nCg1Ew4.roa
Signing time: Mon 26 May 2025 09:38:41 +0000
ROA not before: Mon 26 May 2025 09:38:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3710 (0xe7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 09:38:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=94FAEBBFDC51B789E61D56D54833BC9C2835130E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:c2:aa:d3:6e:a3:af:c3:e0:50:c4:c0:c1:
92:6d:c6:64:a3:b9:48:2d:be:8a:f6:f4:38:99:1f:
81:a8:ff:bb:2a:05:f6:bc:31:e1:5e:a5:d1:7e:75:
75:d1:15:ed:21:87:6f:ad:c2:70:dc:d9:cb:08:ca:
5b:66:b4:ad:81:f5:18:fb:df:1c:46:a4:dc:e8:67:
f7:d8:75:72:e6:e8:7b:3c:74:fa:d4:c8:34:f3:9d:
c7:3d:f0:95:6f:33:32:64:9e:ec:cc:f2:2b:bc:e3:
e5:12:8d:ff:ed:74:f5:8e:a3:d7:af:28:e9:eb:b7:
e8:38:cc:0d:1f:8b:72:b1:e3:12:2a:ad:f6:fc:24:
d5:e6:12:af:37:67:99:2f:f8:b9:e6:23:8d:4b:7d:
e6:69:a4:7c:b6:f3:26:7f:70:d9:12:56:bb:4e:f1:
ae:44:ed:cd:97:bf:3a:9e:eb:45:55:11:68:bb:13:
5d:5d:6e:36:fd:f6:fd:8a:e4:7e:30:e7:eb:a2:b0:
ce:24:cc:57:7f:df:0e:13:44:45:4e:4e:f0:10:79:
d1:60:81:7d:68:d5:95:ea:05:94:77:01:c9:10:fe:
e2:d8:39:55:88:61:28:d5:59:44:ff:8a:86:8c:68:
8c:d2:f9:0d:c3:04:b0:a5:9f:d8:6d:e7:19:fa:62:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:EB:BF:DC:51:B7:89:E6:1D:56:D5:48:33:BC:9C:28:35:13:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lPrrv9xRt4nmHVbVSDO8nCg1Ew4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:a8:e2:c7:c6:ce:27:a4:7f:39:90:63:1f:e2:85:96:c3:fb:
a6:0a:f6:c1:c5:e4:35:54:ba:50:c1:cf:01:ed:be:84:8b:61:
26:bd:4a:65:48:0b:1c:51:ac:e4:0a:58:81:cd:6e:3b:3f:64:
76:7f:b4:d6:91:31:7b:17:f8:5f:8b:d5:3f:29:ce:36:19:cc:
32:8f:9b:24:ea:17:44:d0:cc:7c:6a:cd:a0:c6:c4:b4:63:3f:
52:27:ed:bb:28:dc:e2:69:74:87:51:75:7c:41:6c:99:1f:2e:
66:2d:ce:23:d7:84:71:e5:7a:9b:56:2b:4f:02:cd:42:1e:20:
33:e0:8f:b9:92:fa:73:c7:97:de:9d:18:d9:12:4f:75:1a:d0:
70:ec:93:e1:78:85:54:de:1e:39:37:7c:5f:7f:1d:a0:93:5b:
5e:b1:71:b0:00:39:48:bd:f2:05:d0:37:1a:a2:28:f4:60:57:
e1:2e:74:6e:09:8f:73:42:8a:a0:c8:f0:fd:ed:89:2e:96:be:
90:7a:c4:97:f1:af:19:69:00:d8:ca:81:67:58:87:3b:89:a4:
e2:11:bf:49:1c:d1:bd:38:b6:c2:f4:58:d3:51:71:b4:7c:34:
3a:ae:2b:c2:69:59:30:48:ec:d0:6d:f8:be:eb:e3:51:17:f8:
a7:d7:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:16:23 2025 by rpki-client