Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/s_NET5lxVTMtkMcvMgR6gIaLpzY.roa
File: s_NET5lxVTMtkMcvMgR6gIaLpzY.roa (raw, json)
Hash identifier: n//AI8QU/acoYGG2GRww0RwtLvbBn7bOTyYfzR/DRO4=
Subject key identifier: B3:F3:44:4F:99:71:55:33:2D:90:C7:2F:32:04:7A:80:86:8B:A7:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 010A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s_NET5lxVTMtkMcvMgR6gIaLpzY.roa
Signing time: Thu 08 May 2025 11:07:45 +0000
ROA not before: Thu 08 May 2025 11:07:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 11:07:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B3F3444F997155332D90C72F32047A80868BA736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:93:59:cb:3e:9f:a5:1a:6d:63:54:42:cb:
f0:b6:e9:f5:e4:52:f7:81:f9:0c:8c:b3:57:43:55:
97:02:70:c1:17:da:77:1c:43:a2:59:80:4e:0d:99:
ff:6e:d1:b0:10:d5:16:b9:30:74:68:23:3b:f9:cd:
44:36:e1:87:22:48:ae:b1:6b:9e:48:fc:78:73:97:
ca:d9:bc:c0:19:f1:42:1d:ae:b1:20:b5:f3:8f:34:
7c:f8:f1:60:75:05:2f:b2:cc:1f:35:bd:99:37:c1:
d5:0a:7d:fb:5a:fc:1b:3a:b5:12:20:04:e0:9d:bf:
b3:18:7b:88:55:21:91:f7:4e:e1:31:bc:23:a7:0f:
d5:e5:ca:e3:03:dc:d3:17:54:ee:30:94:a1:b0:91:
7b:fc:29:4b:e0:34:29:62:f9:ad:92:7a:d7:c3:c0:
a3:88:23:89:aa:ba:8c:33:b2:fc:58:39:63:6c:fc:
11:53:e5:05:a3:54:e7:99:0e:4e:90:c4:2c:f6:46:
93:99:a6:21:1a:37:35:f4:05:68:5f:7e:80:8d:f9:
70:6d:9f:8d:ed:e2:7c:aa:f1:bf:f3:1e:9e:97:33:
ee:d8:9b:c0:d3:69:e7:2c:bc:29:4b:10:23:cd:8d:
bd:ce:65:3b:ae:5b:5e:13:58:b8:13:bd:68:a1:8a:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:44:4F:99:71:55:33:2D:90:C7:2F:32:04:7A:80:86:8B:A7:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s_NET5lxVTMtkMcvMgR6gIaLpzY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:f5:78:b5:d0:e7:30:da:57:2a:da:33:5b:b1:0e:72:f2:c8:
f9:45:49:50:b1:2b:07:78:a4:f1:88:33:6c:df:29:ce:8e:77:
b4:8f:46:54:e1:83:02:46:b2:f9:3f:f7:89:62:59:7a:29:a9:
75:44:60:3c:98:a4:26:5d:9a:62:86:dc:c2:8c:77:4b:68:38:
62:ee:ae:52:fb:94:73:25:bc:6b:72:80:47:e1:94:ba:40:18:
d0:5f:48:e2:18:ff:55:65:df:86:6f:90:ce:03:54:98:50:5f:
93:2e:1f:61:d1:be:7e:1d:44:5c:58:92:82:7b:2d:3f:3c:7c:
ab:1c:e0:cd:e6:97:51:62:86:7c:7a:b0:88:a2:85:64:b9:6e:
7b:fc:7d:9b:2a:e6:a9:c8:14:e3:c5:c6:ab:e4:72:9e:8a:bf:
44:7f:db:94:ba:b9:13:43:61:b8:05:39:2d:36:8a:44:00:4f:
51:d7:4f:ab:4b:5d:f4:cb:21:a1:9d:0a:2b:8a:b2:bd:cd:94:
6d:b9:f1:a7:34:d3:ee:8d:43:d3:fb:6c:86:c5:80:a4:35:38:
b3:fb:22:53:bc:f5:ec:29:81:50:39:cb:f1:04:9e:13:10:1e:
33:b2:88:ae:f4:be:33:1e:0b:2f:08:73:7a:93:d9:d1:e8:a1:
96:89:23:ed
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx
MTA3NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEIzRjM0NDRGOTk3MTU1
MzMyRDkwQzcyRjMyMDQ3QTgwODY4QkE3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXq5NZyz6fpRptY1RCy/C26fXkUveB+QyMs1dDVZcCcMEX2ncc
Q6JZgE4Nmf9u0bAQ1Ra5MHRoIzv5zUQ24YciSK6xa55I/Hhzl8rZvMAZ8UIdrrEg
tfOPNHz48WB1BS+yzB81vZk3wdUKffta/Bs6tRIgBOCdv7MYe4hVIZH3TuExvCOn
D9XlyuMD3NMXVO4wlKGwkXv8KUvgNCli+a2SetfDwKOII4mquowzsvxYOWNs/BFT
5QWjVOeZDk6QxCz2RpOZpiEaNzX0BWhffoCN+XBtn43t4nyq8b/zHp6XM+7Ym8DT
aecsvClLECPNjb3OZTuuW14TWLgTvWihilQhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUs/NET5lxVTMtkMcvMgR6gIaLpzYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9zX05FVDVseFZUTXRrTWN2
TWdSNmdJYUxwelkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAEf1eLXQ5zDaVyraM1uxDnLyyPlFSVCxKwd4
pPGIM2zfKc6Od7SPRlThgwJGsvk/94liWXopqXVEYDyYpCZdmmKG3MKMd0toOGLu
rlL7lHMlvGtygEfhlLpAGNBfSOIY/1Vl34ZvkM4DVJhQX5MuH2HRvn4dRFxYkoJ7
LT88fKsc4M3ml1Fihnx6sIiihWS5bnv8fZsq5qnIFOPFxqvkcp6Kv0R/25S6uRND
YbgFOS02ikQAT1HXT6tLXfTLIaGdCiuKsr3NlG258ac00+6NQ9P7bIbFgKQ1OLP7
IlO89ewpgVA5y/EEnhMQHjOyiK70vjMeCy8Ic3qT2dHooZaJI+0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:26 2025 by rpki-client