Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/p_N2k2D1kJHF01DefNXh7v_a3lE.roa
File: p_N2k2D1kJHF01DefNXh7v_a3lE.roa (raw, json)
Hash identifier: l/rzrJEIZVvVF+7AgPaKRFQW4xRbQgV3JHYg/zEjMgE=
Subject key identifier: A7:F3:76:93:60:F5:90:91:C5:D3:50:DE:7C:D5:E1:EE:FF:DA:DE:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D32
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p_N2k2D1kJHF01DefNXh7v_a3lE.roa
Signing time: Sat 24 May 2025 16:08:33 +0000
ROA not before: Sat 24 May 2025 16:08:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 16:08:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A7F3769360F59091C5D350DE7CD5E1EEFFDADE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:69:94:b2:2d:75:6c:fc:f7:7f:99:f6:ab:
93:c8:6f:91:c3:ad:e4:ab:32:28:c6:6d:6c:f6:d6:
c0:10:7e:92:33:ec:2c:88:8b:75:1a:a6:44:7b:9e:
3c:0a:31:e9:10:f7:a2:69:e1:d9:00:10:d4:70:9b:
cf:ea:6c:20:95:ae:0a:89:07:36:39:e3:fa:12:79:
24:1c:fa:27:e9:26:c2:91:52:3a:08:54:b1:a4:45:
df:a2:6a:df:de:18:0c:a3:45:5f:47:86:5e:05:c3:
d0:97:03:44:6a:97:67:f4:70:02:f6:7b:62:f4:1e:
ac:9f:66:9a:1c:4e:11:db:93:a3:c0:07:7a:2f:a0:
4a:2c:ff:f6:07:9e:7d:18:39:13:07:d2:93:32:fc:
3c:fe:c6:cf:f8:d2:7f:25:ff:0d:ac:11:2a:ef:ed:
b3:81:60:d2:41:51:16:6a:d1:39:f0:4e:a4:42:24:
63:6a:cb:53:fd:b4:08:30:e8:2c:ea:dc:8f:c5:d9:
3c:d6:5c:d3:2e:78:43:e5:d9:de:9c:8e:e0:d2:27:
55:10:30:14:f3:69:3b:41:bb:d3:35:22:d9:24:36:
6a:67:4c:3d:35:02:87:f8:f9:07:7b:89:88:ce:bf:
fa:89:3b:19:bb:c8:9f:72:ab:3a:74:56:c8:a3:be:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:76:93:60:F5:90:91:C5:D3:50:DE:7C:D5:E1:EE:FF:DA:DE:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p_N2k2D1kJHF01DefNXh7v_a3lE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:6e:ab:ba:bb:cb:63:a8:58:38:e6:d2:85:df:1e:56:e5:2b:
25:ee:6b:8a:48:78:b9:54:56:e0:30:99:76:c4:17:d2:93:4b:
3c:8e:68:5d:be:08:0f:54:64:8e:c9:4e:6c:3a:ef:00:da:87:
24:87:80:5b:b1:98:34:f5:07:1c:dc:35:bd:75:b0:de:09:19:
9c:87:f4:2a:3e:aa:d6:56:66:c2:d0:f8:b8:d8:70:3d:c8:37:
14:ca:49:1c:66:6f:f6:2a:b3:ca:ae:75:fe:24:5f:97:50:b2:
16:a6:b5:e2:c3:b5:42:72:cf:f6:f6:98:ba:60:b6:74:c4:da:
14:ce:39:62:ed:95:a6:34:47:5e:be:af:ed:c7:d5:22:76:ad:
f1:5b:8d:9c:5d:17:15:96:67:8a:60:ea:1f:10:af:5f:5b:f0:
d7:36:06:af:e0:ff:39:75:15:bf:39:c9:f1:fa:5f:df:ef:98:
a9:8f:b9:2a:54:38:ff:27:ac:d5:57:0f:6a:5a:5a:cf:96:5b:
9a:38:03:65:cb:ba:fc:c9:cb:ec:03:dc:73:d4:fa:32:19:36:
1a:17:f7:19:7d:35:a0:2f:ab:e5:fb:27:f8:c9:49:a5:4e:01:
54:ed:c1:63:86:e7:c5:6a:8e:68:71:cd:b3:da:c6:41:c6:0e:
93:11:ae:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx
NjA4MzNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE3RjM3NjkzNjBGNTkw
OTFDNUQzNTBERTdDRDVFMUVFRkZEQURFNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjR2mUsi11bPz3f5n2q5PIb5HDreSrMijGbWz21sAQfpIz7CyI
i3UapkR7njwKMekQ96Jp4dkAENRwm8/qbCCVrgqJBzY54/oSeSQc+ifpJsKRUjoI
VLGkRd+iat/eGAyjRV9Hhl4Fw9CXA0Rql2f0cAL2e2L0HqyfZpocThHbk6PAB3ov
oEos//YHnn0YORMH0pMy/Dz+xs/40n8l/w2sESrv7bOBYNJBURZq0TnwTqRCJGNq
y1P9tAgw6Czq3I/F2TzWXNMueEPl2d6cjuDSJ1UQMBTzaTtBu9M1ItkkNmpnTD01
Aof4+Qd7iYjOv/qJOxm7yJ9yqzp0Vsijvm/HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUp/N2k2D1kJHF01DefNXh7v/a3lEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wX04yazJEMWtKSEYwMURl
Zk5YaDd2X2EzbEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFFuq7q7y2OoWDjm0oXfHlblKyXua4pIeLlU
VuAwmXbEF9KTSzyOaF2+CA9UZI7JTmw67wDahySHgFuxmDT1BxzcNb11sN4JGZyH
9Co+qtZWZsLQ+LjYcD3INxTKSRxmb/Yqs8qudf4kX5dQshamteLDtUJyz/b2mLpg
tnTE2hTOOWLtlaY0R16+r+3H1SJ2rfFbjZxdFxWWZ4pg6h8Qr19b8Nc2Bq/g/zl1
Fb85yfH6X9/vmKmPuSpUOP8nrNVXD2paWs+WW5o4A2XLuvzJy+wD3HPU+jIZNhoX
9xl9NaAvq+X7J/jJSaVOAVTtwWOG58VqjmhxzbPaxkHGDpMRrlg=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:27 2025 by rpki-client