Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7VZBR1LCZpU3Lx3BdPBErhLvLGY.roa
File: 7VZBR1LCZpU3Lx3BdPBErhLvLGY.roa (raw, json)
Hash identifier: 02gD5NMt74LU67mNLjtyq1F0WAQU09CLKJiF4/TTC7g=
Subject key identifier: ED:56:41:47:52:C2:66:95:37:2F:1D:C1:74:F0:44:AE:12:EF:2C:66
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AB2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7VZBR1LCZpU3Lx3BdPBErhLvLGY.roa
Signing time: Wed 11 Jun 2025 16:09:47 +0000
ROA not before: Wed 11 Jun 2025 16:09:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6834 (0x1ab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 16:09:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ED56414752C26695372F1DC174F044AE12EF2C66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:a2:87:b1:71:20:47:dc:9f:15:4e:9c:d9:
0a:d8:7a:45:54:5b:78:3f:b9:bf:93:93:07:be:9e:
06:98:7a:00:33:90:30:af:37:a7:59:86:51:a1:ee:
36:6c:d9:32:87:d6:56:fe:ce:46:e4:b5:5e:6f:4c:
ff:b2:06:2d:7d:00:7b:c7:57:47:06:8c:b6:8f:51:
c1:d6:47:52:de:24:f4:7c:24:87:a8:e6:84:91:85:
21:3a:d4:cc:92:c7:3f:24:43:13:73:d2:d7:3c:54:
04:51:b4:78:ca:eb:8a:ad:f4:63:64:aa:79:68:75:
9f:da:99:98:72:2b:b1:7d:3b:65:0c:06:15:c3:63:
da:05:2c:5f:ea:61:44:68:50:a0:4a:4b:46:50:e2:
0c:23:f4:d7:b3:01:c4:83:4f:9d:04:f2:15:7c:5b:
70:1f:e1:e4:62:71:35:d6:34:85:b2:f2:53:7b:99:
4e:4c:b7:96:ab:e4:16:ec:36:99:14:f1:d9:06:e2:
a2:be:be:8c:70:53:f2:58:f6:fc:27:f4:a9:a3:1a:
16:ab:59:4d:fc:fe:34:c9:0e:c0:1d:a6:71:d7:b9:
ad:1c:e2:b4:15:87:33:a9:17:88:49:7a:aa:78:5a:
1b:4b:24:54:d2:91:b4:d2:d8:9c:31:3e:83:43:dd:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:41:47:52:C2:66:95:37:2F:1D:C1:74:F0:44:AE:12:EF:2C:66
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7VZBR1LCZpU3Lx3BdPBErhLvLGY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:6e:a0:0c:b5:c4:19:62:71:b5:e9:9b:cc:20:53:0a:4c:c1:
50:63:5d:9d:02:a4:58:9a:5d:14:21:a4:9c:e2:7c:2e:64:a7:
43:ed:da:c2:6c:f5:82:13:d5:37:ed:1b:9f:a6:dd:d5:d5:0c:
26:53:c3:11:c4:7a:87:b7:6b:85:82:ad:c0:c1:d1:ca:8f:e8:
d2:31:b4:98:f0:d7:2c:f2:6c:0f:df:5a:6c:6b:de:57:6f:7e:
fc:67:de:14:39:22:b0:8c:ea:ed:80:5d:bd:52:a6:57:66:06:
d4:aa:30:09:86:30:db:19:0b:19:14:b4:fe:d0:29:2c:b5:d5:
02:60:d3:29:6a:f4:01:e0:38:a9:57:88:33:39:38:c0:0a:e9:
96:a7:7b:23:57:ba:fb:43:68:0d:ff:04:9a:1e:72:78:77:af:
d0:29:23:90:98:d6:82:cf:43:c1:c3:0d:38:f1:5d:95:67:78:
6c:60:f9:5d:84:bd:cc:ef:b2:5f:3c:ba:33:c7:8e:26:e0:d8:
5f:0b:22:f2:f3:ab:dc:80:e8:31:7d:fd:4e:e8:bd:cb:2f:da:
33:21:49:89:8a:df:a3:f1:cf:13:b0:3b:f1:f1:61:30:24:25:
71:99:e0:2e:6d:36:3b:a6:a1:4a:1c:3d:19:13:36:6a:5e:da:
d5:34:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:00:41 2025 by rpki-client