Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vDkWo5r8hOpoCvN88x-t_N49hW0.roa
File: vDkWo5r8hOpoCvN88x-t_N49hW0.roa (raw, json)
Hash identifier: BqX+cIst0M8+NWfH258TrQC45hflUWPsZKn/2HLoYDs=
Subject key identifier: BC:39:16:A3:9A:FC:84:EA:68:0A:F3:7C:F3:1F:AD:FC:DE:3D:85:6D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DB2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vDkWo5r8hOpoCvN88x-t_N49hW0.roa
Signing time: Sun 25 May 2025 08:08:35 +0000
ROA not before: Sun 25 May 2025 08:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3506 (0xdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 08:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BC3916A39AFC84EA680AF37CF31FADFCDE3D856D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:60:5b:71:7b:4a:7d:0d:06:8c:16:1a:7d:
f4:8e:e6:65:0e:23:b8:ea:83:11:1d:22:e0:d5:32:
22:cd:7a:52:7a:81:88:af:19:76:91:6e:51:e9:6d:
29:9f:cb:7e:b8:3b:8d:bb:e7:06:5b:af:98:91:88:
ea:29:a1:06:d0:af:15:c9:c9:82:58:b0:5c:7b:50:
ca:04:7c:08:87:83:cf:30:9a:32:8b:e9:e4:27:44:
a3:9d:d9:6a:a3:ac:54:72:4c:1a:6a:a2:aa:92:b9:
bb:1e:21:83:8d:8d:11:e8:12:1a:a4:df:3f:d6:c3:
dc:d0:5b:96:b9:49:d4:a0:b0:b6:3e:80:78:fc:b2:
64:ca:9d:d9:d5:a7:b3:81:1a:b6:3b:0c:98:be:15:
15:24:3a:ec:96:82:0b:06:cf:14:be:b1:81:d4:68:
dc:f7:fc:f1:c1:40:10:82:01:33:2b:3a:f7:0d:11:
07:9c:a2:4b:ff:94:eb:37:d9:ef:6c:bb:a1:b2:a9:
22:21:3f:a1:46:f4:4a:ef:b2:99:b8:02:a3:85:0e:
4e:c1:57:ee:92:c3:d9:e8:65:96:26:91:50:31:31:
d7:ce:d8:e7:c2:9f:84:f1:da:e3:c0:26:ad:86:5b:
b1:fc:66:dd:2d:9c:0d:66:66:35:eb:e4:9f:05:65:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:39:16:A3:9A:FC:84:EA:68:0A:F3:7C:F3:1F:AD:FC:DE:3D:85:6D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vDkWo5r8hOpoCvN88x-t_N49hW0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:2d:43:73:e6:78:08:c3:92:1f:d6:54:a4:9b:96:d1:87:63:
46:6f:69:1c:01:b4:6e:da:8f:4e:1f:b6:e6:73:b6:c0:2c:47:
fe:0c:25:8f:81:7e:38:f8:d8:61:05:42:0f:24:aa:f6:ba:33:
f7:ac:db:6f:75:9e:e6:4b:d4:85:f4:01:14:48:44:92:f9:18:
2a:e6:55:08:d5:ce:a6:77:79:12:a5:cd:18:67:3d:ca:48:ea:
e4:27:31:9e:f8:f5:df:33:ec:48:b1:c8:4f:e9:54:f3:b7:70:
31:ef:ad:bf:03:6f:4e:99:62:68:38:d0:4d:6a:26:c6:fa:5e:
ce:47:76:68:b0:1a:c0:87:53:b1:9f:ec:dc:3a:b4:24:d6:77:
1c:17:a0:13:dc:62:21:03:1f:c1:7b:35:00:0b:eb:a9:28:84:
e8:0b:1e:68:ea:7a:07:c0:ea:eb:ed:28:cd:43:54:be:73:0b:
e0:63:bd:5f:e8:b7:a7:7a:46:72:af:18:23:4c:1e:45:df:4e:
8f:94:88:93:ad:4f:14:13:3d:ea:53:b7:d8:c7:44:5a:0f:6e:
70:b4:99:4b:90:a0:15:35:34:68:e9:88:53:02:4f:36:00:3e:
9e:dd:35:46:7c:fc:8e:d9:db:0a:08:ef:b5:a7:08:f7:cc:51:
4a:94:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:53 2025 by rpki-client