Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nvaqY8p18uWuQKx2Wfmu2o-VgMU.roa
File: nvaqY8p18uWuQKx2Wfmu2o-VgMU.roa (raw, json)
Hash identifier: drh/pgbUHGpt2Hsvnn9tbTD7E45BMR7Kh8eEs/jCSkI=
Subject key identifier: 9E:F6:AA:63:CA:75:F2:E5:AE:40:AC:76:59:F9:AE:DA:8F:95:80:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C96
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nvaqY8p18uWuQKx2Wfmu2o-VgMU.roa
Signing time: Fri 23 May 2025 20:38:39 +0000
ROA not before: Fri 23 May 2025 20:38:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 20:38:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EF6AA63CA75F2E5AE40AC7659F9AEDA8F9580C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:c0:69:cc:e3:64:ce:92:b0:74:85:28:78:
ba:0e:2f:0f:75:75:08:b7:c2:5c:26:63:21:81:a2:
19:f0:af:01:df:92:fc:08:33:c6:2a:cb:ab:b3:c3:
08:a9:43:54:73:ad:8b:2a:0f:8e:fe:75:7b:0c:14:
62:a9:ab:3e:3e:c3:2a:6a:72:0d:14:8e:4f:c1:e7:
e1:04:10:00:aa:b7:35:e5:6d:39:21:9b:b8:fb:0e:
61:63:c0:d4:f4:f0:83:6a:64:77:da:68:b7:f6:ea:
ab:18:2d:af:1f:a8:4e:5e:da:ce:2e:60:1f:b7:2c:
b2:55:3d:02:83:63:fc:c8:74:78:73:4c:8b:b4:08:
8e:8d:59:8b:83:4c:b6:d4:4f:c0:3d:8f:da:9e:f9:
c5:7f:85:52:6c:4f:a5:26:79:90:c8:3c:85:9b:ba:
46:0a:8f:85:d5:e6:d0:d1:90:f1:91:16:99:d2:ad:
d7:9f:2c:3d:79:90:f9:68:0b:97:66:84:f4:93:0f:
fd:cf:f0:36:f6:6e:bf:6e:cb:c6:b0:df:b1:c2:3c:
28:08:67:0a:94:48:ab:de:fd:b8:07:ac:a4:28:67:
6d:93:a0:86:0e:f6:99:46:bc:da:fd:e7:c9:20:c0:
f6:75:57:df:45:83:b5:51:d4:34:89:ab:04:b0:a4:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F6:AA:63:CA:75:F2:E5:AE:40:AC:76:59:F9:AE:DA:8F:95:80:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nvaqY8p18uWuQKx2Wfmu2o-VgMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:e0:32:00:05:7b:14:27:3f:e9:fb:87:5d:c9:fe:1a:ea:92:
b6:48:1c:53:e4:fd:ac:68:42:59:e2:23:75:83:34:06:be:f9:
22:c7:60:1a:2b:72:82:0d:4d:d3:71:a1:22:3f:42:7c:81:c7:
99:ec:04:0f:5c:88:b9:0e:63:c2:06:df:bb:e1:18:05:9c:b2:
ed:ce:10:11:06:7e:f9:e8:21:82:25:0a:54:76:c0:32:43:35:
e9:92:3d:02:cb:1d:46:ab:e1:98:0c:f3:ad:0c:85:72:36:1a:
76:d1:95:f4:25:9d:48:16:cc:77:dc:e6:50:d3:fa:3f:03:97:
c8:84:15:a7:6d:44:00:23:62:f0:46:c8:e6:be:8d:03:aa:f3:
c8:5c:82:ad:a1:aa:b0:cd:04:3e:1d:23:cf:26:d6:92:bf:ed:
97:bb:25:d2:fc:f2:40:2b:3f:17:3b:bf:ec:2a:a0:cd:41:81:
f5:10:ee:92:26:a8:10:53:c6:4e:b5:40:66:f6:9d:9a:7b:90:
4b:12:a1:01:6e:7e:77:72:84:7f:2e:9b:76:82:e1:3d:fc:0f:
5c:09:c9:34:40:45:87:90:86:10:81:c5:e9:04:a4:9f:77:c0:
19:24:b2:7c:92:3c:25:6d:72:bc:ae:7d:b2:5e:39:6c:7e:09:
b7:e3:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:26:36 2025 by rpki-client