Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7OiS0M7yMQF_OecAe5S8Nx5usKk.roa
File: 7OiS0M7yMQF_OecAe5S8Nx5usKk.roa (raw, json)
Hash identifier: G07pY9GzLQmRBbIhK9InK7WzdGaCdrnkKm4FCnyudLg=
Subject key identifier: EC:E8:92:D0:CE:F2:31:01:7F:39:E7:00:7B:94:BC:37:1E:6E:B0:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08C2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7OiS0M7yMQF_OecAe5S8Nx5usKk.roa
Signing time: Sun 18 May 2025 18:08:54 +0000
ROA not before: Sun 18 May 2025 18:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2242 (0x8c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 18:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ECE892D0CEF231017F39E7007B94BC371E6EB0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:84:80:90:11:a3:cb:a3:07:19:e3:8f:e0:
a1:82:dc:85:35:56:63:9e:ec:da:10:53:c6:7b:20:
32:f6:06:57:34:d3:1b:d0:ed:22:0b:65:8a:80:d0:
b4:e1:ce:41:70:ce:de:c2:3c:b0:f6:7a:2c:93:c0:
c2:72:bd:a5:82:95:ba:fa:6b:03:56:dc:a8:d2:a1:
c0:d4:ab:d7:51:e5:9e:aa:fc:0d:20:e4:02:80:e3:
1e:64:a6:30:ef:b0:c8:55:bf:5f:6e:74:1b:4c:9f:
b5:28:f0:c0:7c:a2:50:f6:30:d2:1e:ed:41:13:25:
16:11:7f:0f:1c:27:5d:9b:cf:12:16:1a:74:de:11:
c6:59:f9:46:e3:81:ee:2b:31:83:27:29:79:3d:58:
74:8e:99:d5:58:b2:37:3c:35:4b:42:e3:d8:98:35:
ca:9e:a9:d2:a9:d1:49:cf:f5:9f:22:71:bc:e8:43:
3b:f0:94:e8:88:50:fb:6e:fe:d3:46:c1:6a:40:7a:
62:6e:e3:25:76:37:29:d7:e4:b4:54:b6:18:40:1c:
82:e6:ef:3b:3a:81:e1:86:9e:29:5e:57:1c:3b:5b:
db:21:85:ab:23:37:13:e4:6b:67:ce:dd:1d:e2:dd:
55:66:24:fc:5a:ed:79:fc:74:a9:e6:86:c9:0b:55:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:92:D0:CE:F2:31:01:7F:39:E7:00:7B:94:BC:37:1E:6E:B0:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7OiS0M7yMQF_OecAe5S8Nx5usKk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:07:79:ce:3e:87:36:a9:cc:1c:68:79:a3:b0:44:83:23:74:
5e:10:b4:6b:6c:4b:cc:db:a1:22:b7:5a:bb:e8:57:cc:b0:26:
2f:1b:3b:49:36:8e:d2:3d:64:38:49:0f:7a:9e:92:92:a6:62:
6d:cb:64:e5:ca:26:0b:ab:c5:3d:0a:81:74:c5:af:5e:b8:d0:
0d:a5:e0:71:c8:c7:a4:3c:c8:c2:68:48:1c:ae:25:b4:fa:8c:
01:34:83:db:e9:f5:7b:cb:3a:98:06:ab:cd:6c:b5:47:97:e1:
a7:05:b8:12:ca:b4:3b:ad:0b:a9:e3:f9:d4:52:6d:1e:77:d4:
f4:38:a2:65:5f:3a:c2:3b:ca:de:02:e4:5e:71:d1:62:06:27:
ad:e5:36:1b:8c:7e:c0:93:7a:aa:67:07:6c:da:82:63:22:c2:
d7:d5:fb:e3:c5:6e:d0:c5:5a:2c:d2:24:9b:b3:43:91:40:68:
ea:72:c4:c2:6f:c5:62:a5:50:b1:d6:77:4e:22:34:dc:d9:e9:
14:b3:4b:7e:e3:b5:86:0e:8f:4d:d5:95:1f:72:90:1f:6b:da:
05:69:95:8f:3f:c6:a4:a5:ec:9b:b1:da:8e:a5:85:e3:83:08:
67:22:bb:10:6e:6f:e1:57:02:95:5b:fe:b3:34:84:ef:92:37:
63:22:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:54:23 2025 by rpki-client