Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oP6XYwIH2A52mvAVRsDeYuUPQOY.roa
File: oP6XYwIH2A52mvAVRsDeYuUPQOY.roa (raw, json)
Hash identifier: T6sIjSw5qTHRwnNu9qczliw5AtgLrXi0Fcg7I43T7yc=
Subject key identifier: A0:FE:97:63:02:07:D8:0E:76:9A:F0:15:46:C0:DE:62:E5:0F:40:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D72
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oP6XYwIH2A52mvAVRsDeYuUPQOY.roa
Signing time: Sun 25 May 2025 00:08:32 +0000
ROA not before: Sun 25 May 2025 00:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 00:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A0FE97630207D80E769AF01546C0DE62E50F40E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:5c:e7:18:06:5c:e6:a9:b6:2c:1d:d9:dd:
c8:f3:aa:7a:0b:7a:2d:81:81:c1:f4:8d:af:48:27:
12:47:1b:42:c2:d1:cd:c8:0b:a8:d3:e7:46:02:18:
ff:dd:4f:87:46:36:9e:04:00:48:a0:56:16:e4:70:
1b:43:ab:4a:74:51:0d:45:e1:39:7d:c6:0c:06:f2:
94:c5:83:3e:03:67:9c:cb:89:20:d1:eb:1c:64:92:
43:4b:6d:d4:42:bd:be:8d:0f:83:1a:a6:a1:c9:67:
a9:ac:31:ff:65:1b:7a:be:56:ef:df:05:07:30:f5:
5b:a8:00:39:0a:c7:1b:b6:4a:0a:91:98:0f:35:42:
86:64:0b:89:7f:6c:f4:d6:dc:a5:b0:57:98:2e:c1:
47:e0:b0:6a:54:34:5f:c4:1d:09:0a:94:9b:5c:e0:
24:6b:9c:af:29:63:0f:65:40:8e:68:1a:75:8b:58:
bc:9b:fb:f1:2c:0b:d0:c7:ef:6f:f0:fa:f6:21:b2:
10:57:eb:9f:7f:8c:0f:10:d6:4f:40:0f:23:2f:fa:
8c:27:99:b1:77:95:5a:94:04:85:3a:44:5f:aa:42:
d9:dc:a1:7b:16:c0:92:04:91:9c:fa:aa:6c:0a:99:
8e:12:09:6b:88:b7:da:28:14:f2:9a:0b:75:24:b2:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:97:63:02:07:D8:0E:76:9A:F0:15:46:C0:DE:62:E5:0F:40:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oP6XYwIH2A52mvAVRsDeYuUPQOY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:1f:0a:9e:b8:8c:d9:5a:8d:8e:4d:8a:3c:8b:c5:c1:0a:06:
35:69:50:9c:2a:1a:a0:d7:b7:7b:0e:41:31:49:60:1d:52:d7:
a3:9c:1c:0d:20:1c:0f:46:02:73:1c:fb:82:72:3d:30:42:38:
0d:0d:48:db:10:f6:97:e9:28:2f:cc:29:6f:4e:b4:a4:99:1c:
73:55:d0:89:fc:64:4b:cc:93:5a:5d:29:82:84:03:0b:17:5b:
80:ea:8d:2b:65:61:4d:3e:e2:26:c7:47:07:f9:0e:79:22:ab:
83:c1:9e:a6:b9:fd:fa:7c:7f:fa:1d:30:4d:db:f6:36:1a:14:
dd:5a:12:bb:c6:98:b2:1f:42:85:61:76:10:a7:30:12:a2:4d:
1c:62:4e:29:17:74:99:3d:c6:42:d4:6c:ff:64:0e:b2:e7:15:
e7:26:58:70:6c:93:08:a4:a7:00:0d:71:47:ef:35:d0:fd:3f:
9a:d2:7c:a5:80:94:c8:39:01:e8:4f:2f:7d:81:38:46:12:d8:
f5:bb:ea:5c:9d:a0:56:2a:f8:65:85:a6:05:08:0d:03:53:50:
cf:f4:f9:dc:39:c8:27:7f:a8:fd:86:e0:9c:2f:2a:9d:f5:a0:
92:10:94:1b:96:27:90:03:11:2d:d6:dd:32:41:30:5d:72:7f:
a7:35:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:09 2025 by rpki-client