Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z_SXod8KbJEjio88jSCG1kkuj2I.roa
File: z_SXod8KbJEjio88jSCG1kkuj2I.roa (raw, json)
Hash identifier: hoM3WCfHDEstoIBLuoqJtq3Aedlytd3eNMGpdu+iqd4=
Subject key identifier: CF:F4:97:A1:DF:0A:6C:91:23:8A:8F:3C:8D:20:86:D6:49:2E:8F:62
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z_SXod8KbJEjio88jSCG1kkuj2I.roa
Signing time: Sat 21 Jun 2025 11:41:46 +0000
ROA not before: Sat 21 Jun 2025 11:41:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8626 (0x21b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 11:41:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CFF497A1DF0A6C91238A8F3C8D2086D6492E8F62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:a9:8a:22:a3:d0:2a:da:50:7e:07:32:35:
df:99:5b:1d:97:33:49:9a:a0:08:0a:b0:62:df:b8:
39:36:6d:bf:a7:28:0f:08:b8:f2:42:ab:58:17:6a:
a2:d6:4a:d3:90:3f:61:20:e7:d5:ab:81:7e:28:2e:
0c:2b:0c:6c:53:c8:95:81:7b:fd:5b:a7:12:5f:8a:
36:68:cf:94:2d:fa:32:19:b7:0a:4c:ac:f8:55:31:
b2:ae:81:67:f3:54:f2:ff:05:78:36:8b:7d:8d:92:
1c:ab:fc:4a:d2:01:1f:7b:d1:c0:32:df:5a:26:1c:
a1:7f:be:06:8f:a1:4b:51:19:9c:f3:77:33:56:01:
c6:b6:44:c1:2d:a6:4d:45:8d:71:88:d3:62:da:6f:
9e:1d:b5:1e:66:18:59:da:42:59:b0:4c:02:8b:a7:
c8:56:46:5c:aa:d6:31:6d:f8:dd:d7:c8:b6:ef:fb:
a4:54:44:56:e4:fc:8d:0b:8d:80:6d:6c:75:06:dd:
c9:75:29:db:0c:91:fc:35:c1:d1:0f:23:b7:88:3a:
2a:9b:c6:41:57:ed:2a:4e:1b:e3:ba:38:bf:34:36:
c6:5b:3b:a0:d7:32:e7:5f:02:23:da:e1:d2:08:77:
ec:e1:ac:6d:74:03:6b:6a:b7:e8:5d:9e:bd:d9:7d:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:97:A1:DF:0A:6C:91:23:8A:8F:3C:8D:20:86:D6:49:2E:8F:62
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z_SXod8KbJEjio88jSCG1kkuj2I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:82:5d:d5:22:8b:b3:69:08:d1:19:46:6d:64:7f:ef:3a:2b:
5b:eb:2c:53:36:8e:f3:0f:d9:64:9d:8f:2f:26:24:a1:00:18:
82:f0:c0:4b:93:c1:3b:43:7c:b9:a2:11:43:8c:51:7c:7c:99:
39:d0:cb:a7:73:dd:7a:3b:98:09:c5:5a:ee:ac:8c:ac:93:03:
78:dc:4a:45:99:77:0f:84:f3:66:c0:18:be:b4:dc:fb:f8:ca:
bc:da:57:7c:3b:7b:17:3a:5d:fc:cb:97:79:b2:66:8d:89:a5:
d5:50:64:70:35:80:14:86:c5:5c:ce:44:12:df:80:97:4a:81:
87:e2:0d:35:d9:75:18:54:0c:cf:8f:b7:a8:4b:d3:0f:ce:a6:
41:71:b2:1f:9f:49:4d:ec:a1:fe:d0:58:cd:52:3f:c5:d5:9c:
d9:28:68:3a:e6:dc:a5:20:a2:d9:a7:ba:c6:b8:7f:d3:33:64:
90:67:ee:16:d2:36:ef:1e:54:60:df:cb:33:b5:6c:61:16:c7:
64:5e:f6:52:15:4d:a0:e3:a7:82:b4:69:1b:5a:07:3a:e0:c5:
4a:bf:7b:eb:7a:b4:36:b2:36:2a:ae:82:b8:4e:34:05:2c:b2:
43:34:e7:68:eb:98:20:7d:a8:33:f4:87:e5:80:28:15:5b:ef:
d3:35:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:32 2025 by rpki-client