Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/r0vpaJV5JZor-ZT59GqVmO9dJtA.roa
File: r0vpaJV5JZor-ZT59GqVmO9dJtA.roa (raw, json)
Hash identifier: XvnBhPL/cntlJba6lXwrXJ1RWNob0kAamv0p/eq4qaE=
Subject key identifier: AF:4B:E9:68:95:79:25:9A:2B:F9:94:F9:F4:6A:95:98:EF:5D:26:D0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01E6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r0vpaJV5JZor-ZT59GqVmO9dJtA.roa
Signing time: Fri 09 May 2025 14:37:47 +0000
ROA not before: Fri 09 May 2025 14:37:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 14:37:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF4BE9689579259A2BF994F9F46A9598EF5D26D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:fb:3e:97:e1:d2:41:73:82:ac:40:4c:c5:
49:3f:a8:ec:79:b5:40:94:92:22:70:63:98:d9:9a:
fb:04:a3:a7:32:1e:68:5a:13:a1:79:a8:92:ab:d1:
aa:53:f0:63:ae:3b:72:91:79:7a:51:57:d4:a6:bd:
ab:be:a4:46:42:6d:44:34:38:7e:5c:94:f0:dc:16:
b5:c0:6e:c6:4c:9b:a2:9a:81:39:b4:57:56:fc:98:
ed:f2:ff:c6:a4:4e:90:27:c3:49:02:aa:92:e5:6a:
4a:bf:7d:45:c5:87:c0:d9:c6:7d:bc:fe:f8:88:91:
0b:f1:55:1f:f4:08:e5:a8:73:19:d5:62:65:ae:d6:
8f:42:74:b5:20:57:c2:ba:1b:77:b3:1d:a3:44:14:
c2:20:25:94:60:a5:45:87:ed:1f:e5:f6:79:5e:33:
22:bf:c5:a3:5a:7f:1d:f6:27:fe:98:59:ac:f3:69:
c8:be:ff:59:70:d5:c1:38:d9:28:88:f6:71:79:ff:
3c:48:e8:94:a1:69:0b:8c:66:fe:eb:4a:1d:cc:10:
05:8c:30:bb:fa:28:24:46:88:10:67:8c:2b:49:11:
3f:f5:9f:c4:ee:f4:a0:85:69:7e:7a:29:c6:93:b2:
79:ad:ad:af:43:12:0e:e6:86:96:f3:f4:d9:fe:7d:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:E9:68:95:79:25:9A:2B:F9:94:F9:F4:6A:95:98:EF:5D:26:D0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r0vpaJV5JZor-ZT59GqVmO9dJtA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:32:26:85:ee:f1:1c:97:fd:4d:f2:28:49:ec:65:cf:80:7b:
f0:b5:78:32:1c:c0:55:b1:3c:33:c1:37:a7:95:1e:c0:64:16:
cb:f5:41:0d:37:39:ef:af:15:d1:bf:b3:ba:3a:3a:79:26:40:
f7:a5:a9:16:ca:a5:34:87:36:5b:27:8b:ea:7c:06:e3:95:04:
e4:31:82:ed:4f:3d:a1:42:79:61:c8:b4:f5:4e:28:a1:52:67:
80:b3:bd:94:fb:db:71:51:9f:17:49:19:ac:1c:87:e6:6c:5c:
08:7e:5d:00:31:90:bb:d5:66:16:d0:b5:a0:70:87:da:0a:b6:
36:8d:9f:7e:19:ea:cd:d7:a3:83:67:1e:63:9b:72:07:cc:86:
b4:68:09:06:40:79:eb:8d:4f:42:58:f8:34:ea:84:52:21:f8:
44:92:c5:b2:83:11:a0:16:c2:47:b7:aa:97:0c:03:34:e9:2e:
b5:3c:a4:21:ea:1b:08:ef:7f:76:ff:89:52:c8:1b:fc:de:b1:
ef:03:7b:96:82:2b:12:15:59:05:38:8b:49:ad:e2:c1:d5:75:
40:e0:84:7d:60:21:46:55:fe:8a:44:17:ac:30:a3:23:e3:df:
75:3b:bf:2a:7d:f5:73:81:16:75:19:34:e4:08:f4:69:f7:2e:
b5:f8:4a:04
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkx
NDM3NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFGNEJFOTY4OTU3OTI1
OUEyQkY5OTRGOUY0NkE5NTk4RUY1RDI2RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEdPs+l+HSQXOCrEBMxUk/qOx5tUCUkiJwY5jZmvsEo6cyHmha
E6F5qJKr0apT8GOuO3KReXpRV9Smvau+pEZCbUQ0OH5clPDcFrXAbsZMm6KagTm0
V1b8mO3y/8akTpAnw0kCqpLlakq/fUXFh8DZxn28/viIkQvxVR/0COWocxnVYmWu
1o9CdLUgV8K6G3ezHaNEFMIgJZRgpUWH7R/l9nleMyK/xaNafx32J/6YWazzaci+
/1lw1cE42SiI9nF5/zxI6JShaQuMZv7rSh3MEAWMMLv6KCRGiBBnjCtJET/1n8Tu
9KCFaX56KcaTsnmtra9DEg7mhpbz9Nn+fetTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUr0vpaJV5JZor+ZT59GqVmO9dJtAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yMHZwYUpWNUpab3ItWlQ1
OUdxVm1POWRKdEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJgyJoXu8RyX/U3yKEnsZc+Ae/C1eDIcwFWx
PDPBN6eVHsBkFsv1QQ03Oe+vFdG/s7o6OnkmQPelqRbKpTSHNlsni+p8BuOVBOQx
gu1PPaFCeWHItPVOKKFSZ4CzvZT723FRnxdJGawch+ZsXAh+XQAxkLvVZhbQtaBw
h9oKtjaNn34Z6s3Xo4NnHmObcgfMhrRoCQZAeeuNT0JY+DTqhFIh+ESSxbKDEaAW
wke3qpcMAzTpLrU8pCHqGwjvf3b/iVLIG/zese8De5aCKxIVWQU4i0mt4sHVdUDg
hH1gIUZV/opEF6wwoyPj33U7vyp99XOBFnUZNOQI9Gn3LrX4SgQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:46 2025 by rpki-client