Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wUEgv4KfzDVmzWqhrvXIE0YiyPQ.roa
File: wUEgv4KfzDVmzWqhrvXIE0YiyPQ.roa (raw, json)
Hash identifier: eZKJkEfGprhB9+Kko6Dm10bS8qZWWDGnZ/uHT31XZ0M=
Subject key identifier: C1:41:20:BF:82:9F:CC:35:66:CD:6A:A1:AE:F5:C8:13:46:22:C8:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 079E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wUEgv4KfzDVmzWqhrvXIE0YiyPQ.roa
Signing time: Sat 17 May 2025 05:38:07 +0000
ROA not before: Sat 17 May 2025 05:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 05:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C14120BF829FCC3566CD6AA1AEF5C8134622C8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:9c:c4:41:56:84:be:da:10:04:b0:c3:d0:
0d:a3:82:67:9e:bd:13:96:b8:10:c9:78:5c:b0:a0:
b8:94:4d:d6:05:30:12:87:15:7c:3c:8f:de:31:ca:
f6:c1:ad:fb:c7:af:c1:6a:d4:8b:30:8d:14:b7:3e:
c5:d1:0d:b5:6c:f4:92:ad:94:42:81:36:e5:cf:05:
dc:3a:76:81:b3:47:dd:fb:8b:8f:da:29:dc:d0:2d:
d7:09:f7:78:a5:5a:7a:20:2b:41:3a:fe:ed:63:cf:
97:6e:80:68:9d:05:01:98:ad:56:75:30:15:2a:27:
c5:17:eb:1c:1d:32:e6:8b:8d:f1:15:e3:b6:10:53:
bf:b3:c6:8c:df:d1:0f:2e:1d:47:d0:cf:d0:c9:53:
25:7a:5b:4b:73:fa:2a:b4:a0:8f:35:81:e0:da:09:
13:21:98:95:c8:a5:25:cd:71:03:4e:08:bb:79:d7:
20:cb:6a:7f:d5:f1:6d:2e:9c:45:ec:b2:0d:eb:a4:
39:d5:44:2d:45:3c:6d:fa:b5:5c:6c:00:fc:8b:57:
e7:98:03:a9:69:9c:2d:b0:17:33:45:9d:d5:47:6d:
f3:f3:7c:77:3b:69:22:9e:47:5a:46:c8:95:c9:ce:
d7:21:15:2a:79:c7:28:c4:78:86:76:b5:aa:33:1c:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:20:BF:82:9F:CC:35:66:CD:6A:A1:AE:F5:C8:13:46:22:C8:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wUEgv4KfzDVmzWqhrvXIE0YiyPQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:67:f6:4d:e8:f1:62:65:41:e4:bd:e5:d8:e6:77:78:c3:76:
c9:d1:9e:eb:65:8e:93:d0:58:c6:58:b9:8c:42:76:25:2c:4b:
94:0a:90:ae:b9:69:05:71:6f:71:bc:1d:5d:f8:9e:01:98:52:
5c:b1:6c:ec:f8:bc:d5:1f:18:fe:d0:91:6c:dd:6b:66:53:c2:
7d:0a:0e:31:f2:87:c0:b0:86:cf:96:cb:73:e0:c2:8c:3b:50:
01:83:72:8b:a4:c8:62:fe:7e:54:98:54:bc:72:9d:cd:5b:02:
85:84:67:98:fa:42:23:af:35:a3:3f:b0:ef:4e:81:12:35:2e:
23:0a:64:98:ed:b1:0d:a0:3e:fa:a4:7a:67:16:62:e0:35:d5:
ec:0c:28:e2:a6:0a:e5:1f:15:e7:51:bd:3b:1d:1a:d0:99:3f:
5e:d4:0f:2b:4d:eb:49:31:58:8d:36:41:39:91:73:a3:70:55:
a7:40:83:d1:39:8b:4b:74:26:8c:bb:f9:1f:90:11:bc:4e:d0:
73:1e:af:9a:94:81:26:71:0b:f3:3b:96:b9:b0:07:5e:96:47:
7b:d1:ef:47:98:b6:85:41:f9:85:7a:cb:54:4f:2a:f2:e5:10:
14:41:42:95:60:be:20:ff:34:94:84:ee:a2:ce:29:53:59:fe:
72:70:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:54 2025 by rpki-client