Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pCZkwW1fEz4P2ScbRRnfUIvH6QA.roa
File: pCZkwW1fEz4P2ScbRRnfUIvH6QA.roa (raw, json)
Hash identifier: pGc6Qkpek+ghAU5IvANs2NdCXCmQ4WZv1tKC4JLjd3Q=
Subject key identifier: A4:26:64:C1:6D:5F:13:3E:0F:D9:27:1B:45:19:DF:50:8B:C7:E9:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D62
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pCZkwW1fEz4P2ScbRRnfUIvH6QA.roa
Signing time: Sat 24 May 2025 22:08:34 +0000
ROA not before: Sat 24 May 2025 22:08:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 22:08:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A42664C16D5F133E0FD9271B4519DF508BC7E900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:36:f3:60:05:7c:c1:99:aa:40:9c:54:dd:
0e:c3:1a:69:54:b5:61:36:70:47:49:71:03:d8:f0:
c2:28:90:62:fb:e4:18:ec:d6:d4:c4:68:a0:49:f2:
bc:ae:39:70:7d:d1:65:94:64:05:0e:1a:47:d6:9b:
3a:a0:82:26:58:85:60:c2:20:e7:60:48:c5:59:b6:
a1:26:d1:b2:eb:f7:b4:83:de:4d:46:b1:7e:43:7c:
30:3a:0a:ae:b4:6e:4b:40:02:45:f6:01:c0:1c:31:
4a:bc:6d:96:ce:71:ac:74:be:d1:71:e9:97:69:a6:
94:31:dd:d0:f6:0e:51:8d:e6:40:a2:e1:48:66:7c:
d2:94:ce:36:57:49:52:64:f1:9d:02:93:9c:ff:2a:
f6:c6:8c:94:cc:66:c9:8e:2b:d6:85:3c:a6:bb:ea:
15:95:22:4c:62:ac:c7:12:19:35:36:98:3b:e4:cc:
fd:a0:f9:ff:ee:dc:ca:5c:f6:3b:81:bd:71:a6:6d:
6f:f6:d9:3f:91:6c:2c:eb:52:06:c7:46:af:7a:b2:
e4:59:90:8c:03:10:8e:67:9c:04:b6:fd:17:ff:69:
c3:2d:58:52:9a:df:35:59:e7:b9:bd:c9:85:96:df:
fd:a9:db:18:db:c9:67:20:95:30:f6:b8:cc:ff:9c:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:26:64:C1:6D:5F:13:3E:0F:D9:27:1B:45:19:DF:50:8B:C7:E9:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pCZkwW1fEz4P2ScbRRnfUIvH6QA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:a1:36:b3:25:93:8f:c5:83:da:6f:f0:67:c2:29:45:dc:be:
d9:e1:0a:50:fa:dc:ba:4f:8c:79:6d:a3:2c:96:9a:4c:6a:cb:
49:a5:7a:37:1d:bc:b4:17:28:cb:77:08:e6:6e:70:6c:98:14:
b4:e2:84:13:d6:ed:9c:60:f7:1b:6f:b5:4e:64:88:ed:b5:f4:
32:50:ab:29:2b:33:c5:bc:44:59:a9:73:1a:0d:56:79:20:7c:
af:7d:07:1f:ee:01:95:64:6d:e7:02:33:65:aa:d5:b2:58:fe:
33:59:eb:1b:d9:56:5a:82:b6:e3:de:39:bf:61:24:5c:52:b1:
66:82:0f:65:da:86:26:d3:d3:61:2e:78:47:48:c1:22:60:28:
78:e9:0a:b2:39:d3:d9:73:62:f9:4f:ed:a9:f3:67:fc:3a:65:
6d:73:70:7c:65:cc:44:93:fb:81:74:4a:61:9f:b7:14:96:df:
41:9e:3b:aa:b5:51:50:8d:b4:e9:3b:99:ab:b5:11:9d:28:b5:
26:0c:d5:62:9d:eb:d5:51:41:dc:38:10:83:60:e6:48:5d:ac:
48:53:0d:c7:66:70:62:bf:0e:fd:bd:ea:67:9b:9c:2d:48:53:
28:c2:b9:1d:ed:11:0b:92:b7:6d:e6:8b:8a:8a:3c:e7:b2:ab:
ed:b7:df:d9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQy
MjA4MzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE0MjY2NEMxNkQ1RjEz
M0UwRkQ5MjcxQjQ1MTlERjUwOEJDN0U5MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzejbzYAV8wZmqQJxU3Q7DGmlUtWE2cEdJcQPY8MIokGL75Bjs
1tTEaKBJ8ryuOXB90WWUZAUOGkfWmzqggiZYhWDCIOdgSMVZtqEm0bLr97SD3k1G
sX5DfDA6Cq60bktAAkX2AcAcMUq8bZbOcax0vtFx6ZdpppQx3dD2DlGN5kCi4Uhm
fNKUzjZXSVJk8Z0Ck5z/KvbGjJTMZsmOK9aFPKa76hWVIkxirMcSGTU2mDvkzP2g
+f/u3Mpc9juBvXGmbW/22T+RbCzrUgbHRq96suRZkIwDEI5nnAS2/Rf/acMtWFKa
3zVZ57m9yYWW3/2p2xjbyWcglTD2uMz/nMu3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpCZkwW1fEz4P2ScbRRnfUIvH6QAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wQ1prd1cxZkV6NFAyU2Ni
UlJuZlVJdkg2UUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBACmhNrMlk4/Fg9pv8GfCKUXcvtnhClD63LpP
jHltoyyWmkxqy0mlejcdvLQXKMt3COZucGyYFLTihBPW7Zxg9xtvtU5kiO219DJQ
qykrM8W8RFmpcxoNVnkgfK99Bx/uAZVkbecCM2Wq1bJY/jNZ6xvZVlqCtuPeOb9h
JFxSsWaCD2XahibT02EueEdIwSJgKHjpCrI509lzYvlP7anzZ/w6ZW1zcHxlzEST
+4F0SmGftxSW30GeO6q1UVCNtOk7mau1EZ0otSYM1WKd69VRQdw4EINg5khdrEhT
DcdmcGK/Dv296mebnC1IUyjCuR3tEQuSt23mi4qKPOeyq+2339k=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:00 2025 by rpki-client