Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-jb9k6G-A-p6hQMPDMR3alu0e2s.roa
File: -jb9k6G-A-p6hQMPDMR3alu0e2s.roa (raw, json)
Hash identifier: xlnO0Rofj18lqOs9vwWdmdPpthHoDPYyZB4fvwK54u4=
Subject key identifier: FA:36:FD:93:A1:BE:03:EA:7A:85:03:0F:0C:C4:77:6A:5B:B4:7B:6B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-jb9k6G-A-p6hQMPDMR3alu0e2s.roa
Signing time: Tue 10 Jun 2025 08:09:44 +0000
ROA not before: Tue 10 Jun 2025 08:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6578 (0x19b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 08:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FA36FD93A1BE03EA7A85030F0CC4776A5BB47B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:f5:41:a5:f0:d0:ec:70:a8:b0:57:2a:2f:
4b:b6:53:1d:14:91:b8:94:24:fb:66:a5:fc:ba:f2:
dd:13:3e:a3:ce:bd:36:84:8e:d1:a1:63:7e:2d:8b:
fa:cc:43:4a:63:f4:32:f2:03:9b:fa:34:c9:9b:3b:
31:8e:b5:9e:e5:75:2c:c7:ae:6a:a8:bd:99:52:4f:
c9:76:d4:0f:76:b1:7d:08:9e:b8:b6:4d:33:95:bc:
06:10:56:8c:81:13:5c:43:31:3a:f8:2d:ea:f9:26:
18:7d:bf:d8:08:c6:d2:0b:89:5c:0e:2d:b3:18:1c:
d0:d0:75:c9:c6:e4:6f:12:77:19:68:d6:d0:42:9d:
a5:c3:d6:04:f3:2f:32:ab:81:11:f9:df:48:3c:8a:
02:ef:f6:f5:92:2d:b1:94:ac:01:1f:a7:f6:1f:65:
18:41:83:46:c4:4e:c0:b6:95:31:82:1a:d9:3a:b5:
c2:9b:73:83:fa:88:7c:0d:dc:9f:f4:8f:a7:0d:a6:
5c:1c:88:68:a3:4d:87:78:1b:2e:55:47:ea:29:41:
33:f5:f7:65:7f:93:1b:1d:5b:85:93:90:6c:d6:4d:
3b:24:d5:b7:3a:a4:6e:1b:fd:29:af:5c:a6:98:1e:
58:23:4e:ca:31:49:15:bd:5e:d0:f5:ad:e9:32:c1:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:FD:93:A1:BE:03:EA:7A:85:03:0F:0C:C4:77:6A:5B:B4:7B:6B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-jb9k6G-A-p6hQMPDMR3alu0e2s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:74:00:a8:d5:3c:e8:9c:0d:54:a6:5a:da:08:2a:46:68:71:
c3:e7:6a:13:77:6d:e1:8e:01:77:31:3e:dd:66:63:67:a8:78:
10:21:cc:3a:d5:78:de:c9:b2:54:da:8a:c1:10:ae:a7:d9:e6:
07:1d:f9:f9:1b:21:a1:a9:15:a1:ac:a0:12:35:d6:3c:0d:3e:
fa:eb:b6:55:1d:04:bb:3d:22:c0:f9:cc:2e:5c:b7:65:b5:b4:
88:d0:1f:86:03:da:1f:68:f9:a1:fb:fc:f3:ba:40:5b:4a:71:
13:38:1b:2a:5d:da:15:6f:a7:21:f1:34:1f:2b:a6:5c:e5:9a:
a4:02:ae:44:18:c1:44:d0:2f:f2:ae:ba:fa:79:ad:5b:1a:1e:
48:04:a5:bc:bf:d9:d4:a2:54:d0:6f:02:0b:07:00:5e:b6:28:
84:85:1c:80:f1:a7:0a:0e:e1:03:54:54:00:aa:4b:cf:8f:8e:
3d:fd:78:03:b9:18:9e:87:2a:03:0a:30:f6:f2:4d:16:da:c5:
77:5d:10:fb:8f:db:00:48:e3:86:13:01:51:82:49:b3:16:28:
fa:e6:e8:5c:e6:13:1a:d6:06:87:77:98:a1:1a:c7:fd:1b:1e:
21:12:bc:84:4a:69:a8:6a:0e:80:f1:af:31:cd:2d:e5:ec:63:
5d:4f:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:24:37 2025 by rpki-client