Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa
File: kxoKZiEviLaax8HJasfqBEcUQuI.roa (raw, json)
Hash identifier: IlZE6pHtloD1Gt0wM3bSEjKTMhCgSd/aG7S+T3Q3leg=
Subject key identifier: 93:1A:0A:66:21:2F:88:B6:9A:C7:C1:C9:6A:C7:EA:04:47:14:42:E2
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 31
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa
Signing time: Thu 17 Apr 2025 11:34:30 +0000
ROA not before: Thu 17 Apr 2025 11:34:30 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 138968
IP address blocks: 103.119.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:34:30 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=931A0A66212F88B69AC7C1C96AC7EA04471442E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:81:38:d5:2e:63:27:d3:f8:7e:6f:f6:96:
c8:ff:21:01:eb:12:fb:61:6f:21:60:7d:9f:a4:5c:
fa:29:8b:74:91:83:70:48:75:9a:17:04:90:a5:c0:
23:e7:bf:30:53:d4:4d:d5:56:b9:7c:59:93:5a:dd:
08:8b:02:eb:6a:1a:86:75:dc:9d:63:dd:4c:6a:7a:
e8:d0:c8:ad:a7:cb:b3:48:8b:71:90:67:47:74:1c:
86:e7:b7:af:54:80:88:85:c0:c9:c9:0d:e0:47:5f:
61:31:f4:23:84:c7:cf:e3:d7:9d:22:2f:8a:1d:24:
dd:72:ae:0c:47:40:15:d6:22:d8:b1:9c:21:d1:a3:
16:75:30:23:6a:b4:93:dc:b9:b7:22:fb:20:d6:ee:
7a:bb:18:f4:1d:8d:f1:2a:e8:5f:51:f2:74:b0:03:
ad:86:91:eb:8d:a6:08:b6:28:42:b7:1f:a5:49:d5:
5f:0b:f5:3b:ee:99:90:50:c2:22:ea:cb:44:34:cc:
77:ca:83:c2:d4:fe:e6:98:8a:57:f7:48:a4:6f:00:
63:ea:43:dd:7d:36:31:7a:78:e5:f6:df:bc:49:9d:
fb:27:6d:6e:3b:55:3f:91:ea:59:68:5b:90:07:bf:
dc:c0:73:e7:17:b0:a3:d8:a0:1f:b3:ef:32:e6:8a:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:0A:66:21:2F:88:B6:9A:C7:C1:C9:6A:C7:EA:04:47:14:42:E2
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxoKZiEviLaax8HJasfqBEcUQuI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:34:bf:67:82:d2:5b:43:d1:d1:12:7a:ac:16:0c:4c:27:db:
1e:c8:d5:a8:d7:25:5b:e6:4e:7b:30:2f:d1:d1:83:ce:b2:47:
d4:87:97:b5:54:76:47:88:ed:d2:11:9a:f9:83:ed:9f:41:eb:
c3:40:0d:89:a5:87:85:61:b7:0f:9a:73:d4:00:e7:56:61:27:
f7:ff:bf:8b:be:81:ca:33:4e:2c:ff:32:4e:79:16:a3:28:09:
7f:98:d7:ba:f6:44:3d:19:94:49:51:dc:0a:2b:be:63:55:8d:
b7:81:f1:53:7e:09:f2:0f:3e:03:4f:8f:0d:89:aa:ce:e7:a7:
36:ce:a9:37:78:54:0f:27:1b:2d:1f:f4:bb:98:d3:dc:1f:f4:
3f:ae:7b:ed:63:9d:89:c3:0e:dd:39:d0:21:55:44:e5:95:bd:
95:f7:5b:3e:11:7a:b0:0d:47:93:50:6b:3a:f0:6a:84:20:71:
96:24:05:fa:7a:91:d6:08:e2:01:62:33:dc:47:55:ab:49:8e:
13:01:77:73:78:16:a0:19:19:5a:4c:be:de:1d:fa:67:ce:3d:
b0:98:ca:80:17:77:22:b9:f7:2f:6f:1c:44:ba:6b:10:45:51:
68:98:ce:aa:77:7e:11:62:6f:47:04:0a:b2:aa:fa:21:ba:23:
11:2a:13:c3
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF
ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx
MzQzMFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoOTMxQTBBNjYyMTJGODhC
NjlBQzdDMUM5NkFDN0VBMDQ0NzE0NDJFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIPgTjVLmMn0/h+b/aWyP8hAesS+2FvIWB9n6Rc+imLdJGDcEh1
mhcEkKXAI+e/MFPUTdVWuXxZk1rdCIsC62oahnXcnWPdTGp66NDIrafLs0iLcZBn
R3Qchue3r1SAiIXAyckN4EdfYTH0I4THz+PXnSIvih0k3XKuDEdAFdYi2LGcIdGj
FnUwI2q0k9y5tyL7INbuersY9B2N8SroX1HydLADrYaR642mCLYoQrcfpUnVXwv1
O+6ZkFDCIurLRDTMd8qDwtT+5piKV/dIpG8AY+pD3X02MXp45fbfvEmd+ydtbjtV
P5HqWWhbkAe/3MBz5xewo9igH7PvMuaKuXcCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSTGgpmIS+ItprHwclqx+oERxRC4jAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj
QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2
L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9reG9LWmlFdmlMYWF4
OEhKYXNmcUJFY1VRdUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3cQMA0GCSqGSIb3DQEBCwUAA4IBAQBsNL9ngtJbQ9HREnqsFgxMJ9seyNWo
1yVb5k57MC/R0YPOskfUh5e1VHZHiO3SEZr5g+2fQevDQA2JpYeFYbcPmnPUAOdW
YSf3/7+LvoHKM04s/zJOeRajKAl/mNe69kQ9GZRJUdwKK75jVY23gfFTfgnyDz4D
T48NiarO56c2zqk3eFQPJxstH/S7mNPcH/Q/rnvtY52Jww7dOdAhVUTllb2V91s+
EXqwDUeTUGs68GqEIHGWJAX6epHWCOIBYjPcR1WrSY4TAXdzeBagGRlaTL7eHfpn
zj2wmMqAF3ciufcvbxxEumsQRVFomM6qd34RYm9HBAqyqvohuiMRKhPD
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:17 2025 by rpki-client