Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2jauo2KB0bp-6gNYpOvj5NXS-J4.roa
File: 2jauo2KB0bp-6gNYpOvj5NXS-J4.roa (raw, json)
Hash identifier: ykpWD1Vvfzxp7QS/DnkdD8BbQpNN+g67+RAfavMKcik=
Subject key identifier: DA:36:AE:A3:62:81:D1:BA:7E:EA:03:58:A4:EB:E3:E4:D5:D2:F8:9E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DC6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2jauo2KB0bp-6gNYpOvj5NXS-J4.roa
Signing time: Sun 25 May 2025 10:38:34 +0000
ROA not before: Sun 25 May 2025 10:38:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 10:38:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DA36AEA36281D1BA7EEA0358A4EBE3E4D5D2F89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:18:89:1f:8f:42:e0:57:3d:7c:dc:01:88:
83:bc:30:7c:26:64:fb:28:83:ec:55:be:fe:55:2c:
0e:2d:94:8a:b6:93:57:a6:d7:36:37:70:b4:b8:bf:
0a:1e:84:d5:53:cc:7f:5e:db:56:34:73:08:7f:b3:
fd:d4:ef:c6:d9:c0:80:dd:91:7f:2d:f9:63:8f:6b:
b5:45:8f:d9:eb:eb:fc:cc:14:f2:31:84:a6:e2:13:
04:16:ea:3a:7d:54:29:80:0e:95:e8:96:2d:ab:89:
86:df:bf:2b:84:b2:95:b4:f3:8c:2a:4e:1a:b2:3e:
71:16:0e:ab:d1:79:10:e0:db:77:23:27:a7:6e:d3:
1b:96:8b:79:f7:66:2e:8d:e9:f4:d0:3a:1b:b1:d7:
f0:d3:35:ab:20:4b:c4:9b:d6:3f:76:d6:37:71:8e:
19:9d:d1:72:f6:eb:af:98:95:94:e8:5f:fb:83:c9:
b5:a6:56:2e:d5:c4:6c:08:73:38:c5:d6:d6:d4:00:
72:54:ed:4b:cb:9d:17:4a:80:ac:91:7f:21:c1:02:
6a:80:d7:d4:e2:ea:f2:b4:dc:ef:c2:c6:32:a0:d2:
73:af:4b:48:93:57:c2:1a:e0:dc:24:16:71:a5:63:
e0:a4:51:80:d4:11:12:85:40:45:5e:73:5d:bc:fe:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:AE:A3:62:81:D1:BA:7E:EA:03:58:A4:EB:E3:E4:D5:D2:F8:9E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2jauo2KB0bp-6gNYpOvj5NXS-J4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:49:2c:58:40:97:94:ac:5c:8a:46:a8:d7:47:5d:e1:0d:5c:
91:4b:74:24:55:c8:b4:3e:50:61:c0:9f:2e:51:e6:d7:64:10:
d1:10:23:a6:08:b4:5c:7a:82:ee:0c:26:96:65:88:d2:f6:fc:
fd:66:9e:1a:8f:f4:c2:e3:2a:50:65:8d:8a:c9:77:9e:af:da:
8a:58:64:4b:a3:20:6e:ad:24:b2:39:b3:93:04:28:07:af:e7:
76:14:72:3a:3a:50:2f:ad:d0:06:14:e0:53:49:95:74:84:f9:
d1:15:01:ca:43:dc:c7:63:c0:5a:8b:f2:18:ce:ba:03:33:3f:
cb:02:dc:ce:bc:4d:4c:1e:1a:d8:35:76:77:2e:60:c5:09:e6:
84:af:84:54:db:7d:85:ff:fd:ab:85:7e:03:87:87:2e:b2:bb:
44:bf:f3:69:1c:1e:3d:8b:12:cf:94:c9:74:e5:86:47:5d:0c:
84:c7:44:f2:61:f1:cf:21:bc:5c:ff:34:fd:a2:bd:e9:ba:c8:
bd:fb:23:47:df:88:49:46:86:ac:e7:86:20:77:85:64:93:0e:
b1:c2:4a:7f:be:88:d2:5d:fb:6a:87:aa:9b:d7:b3:fd:e9:9b:
b6:68:93:2b:fa:28:55:9a:84:25:61:e4:4f:3c:8f:e6:31:7d:
e1:b1:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:27:00 2025 by rpki-client