Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8PtnJJ8Xix0ViJBso4L93XTaFiY.roa
File: 8PtnJJ8Xix0ViJBso4L93XTaFiY.roa (raw, json)
Hash identifier: VNwZgevZsJvWuD2rIlOHMvpVBSOk4top1bwxC2pC68w=
Subject key identifier: F0:FB:67:24:9F:17:8B:1D:15:88:90:6C:A3:82:FD:DD:74:DA:16:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16A6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8PtnJJ8Xix0ViJBso4L93XTaFiY.roa
Signing time: Fri 06 Jun 2025 06:39:27 +0000
ROA not before: Fri 06 Jun 2025 06:39:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5798 (0x16a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 06:39:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F0FB67249F178B1D1588906CA382FDDD74DA1626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:6d:8e:72:52:09:dc:65:64:cc:c5:2c:6d:
4d:a1:b8:63:3e:19:23:8c:6f:57:a6:f8:8c:db:f2:
0c:a8:ed:cd:8a:d2:d2:24:e2:08:02:53:26:e0:46:
32:0d:d1:3b:12:ba:f3:a2:79:af:c2:c6:c7:70:2d:
24:59:6a:90:d5:a0:0a:e9:d8:b5:d0:00:a6:dc:d5:
f0:a5:b2:17:26:30:77:20:2a:7c:6e:19:90:ca:f8:
bd:48:ba:c5:88:25:7b:d9:e0:56:45:82:74:bc:85:
e6:c5:7b:af:7d:ac:6b:7a:c5:d1:90:cf:6f:cb:a5:
1d:f0:8f:34:0b:95:4e:77:1e:2d:78:9a:3e:7c:bc:
63:a0:54:6a:e9:9e:68:62:85:a5:25:2a:a8:31:62:
f2:ec:9d:ac:13:b2:fc:40:48:a8:9b:87:22:0d:d5:
3e:54:3a:06:0f:c2:ab:16:10:8c:c7:75:28:9c:a5:
42:e2:50:99:69:ad:9f:09:05:f4:ba:20:0c:01:8b:
28:8d:e2:cf:fe:c3:07:f6:b1:ac:b8:08:88:44:f7:
58:a1:d4:cf:28:b7:bb:2f:69:49:02:30:59:eb:ce:
65:b7:78:94:d0:13:f6:fd:48:e4:90:a6:82:ba:a2:
f9:ef:9a:3a:21:0f:a0:6c:7d:09:ea:db:fa:1b:f7:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:67:24:9F:17:8B:1D:15:88:90:6C:A3:82:FD:DD:74:DA:16:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8PtnJJ8Xix0ViJBso4L93XTaFiY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:92:eb:8b:b8:be:fe:6a:99:6c:3f:c8:a7:cf:14:fb:e8:03:
a1:06:1c:82:a9:52:ef:14:75:56:ad:74:b1:98:36:76:58:f9:
a3:9a:43:32:d1:88:fd:99:97:ad:a6:63:a1:ec:e1:67:6f:45:
22:50:c4:50:e4:c1:2e:81:a2:31:29:68:0e:d8:5d:b8:08:3c:
fc:93:b1:48:e6:00:82:2d:e8:37:50:53:35:8e:8e:16:6e:e4:
6b:0a:10:0a:92:de:f7:ee:55:c2:99:21:7b:d7:da:a5:ff:83:
0d:7d:fa:08:18:be:2d:0b:f9:57:95:27:f2:60:cd:8d:22:79:
36:33:e0:9c:7f:e0:d3:02:16:1c:dc:cf:0b:0c:62:c4:30:d8:
50:d1:ee:0b:b2:9b:d2:7f:22:26:f0:c5:07:fc:e8:e2:f1:0f:
2d:ed:79:2f:53:dd:e1:42:2e:e4:df:b8:93:b2:1c:95:c9:24:
e7:c3:bc:fb:02:ac:6f:4f:00:b6:7b:87:33:35:16:da:2f:ba:
f5:40:64:dd:e1:10:69:3c:d7:ed:84:ea:81:9c:17:c8:98:9f:
e2:f9:9d:9a:c9:97:62:e4:9c:a1:ef:0b:61:7b:4d:fa:90:d2:
d2:e3:54:1b:dd:68:30:c1:67:71:99:46:25:7f:c8:ec:fd:47:
f9:9f:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:00:27 2025 by rpki-client