Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AHROUaFjAGgVI95ogGks62ptXGo.roa
File: AHROUaFjAGgVI95ogGks62ptXGo.roa (raw, json)
Hash identifier: ETHkYQ9N8T25xyQP1RWJMW9vpmJIlwej+3VVlKGEBSE=
Subject key identifier: 00:74:4E:51:A1:63:00:68:15:23:DE:68:80:69:2C:EB:6A:6D:5C:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14D6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AHROUaFjAGgVI95ogGks62ptXGo.roa
Signing time: Tue 03 Jun 2025 20:39:17 +0000
ROA not before: Tue 03 Jun 2025 20:39:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5334 (0x14d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 20:39:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=00744E51A16300681523DE6880692CEB6A6D5C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:b2:16:e6:15:5a:5d:7e:8e:be:7d:d7:de:
4c:9f:6a:d9:1d:45:11:6b:69:c8:76:99:0c:20:46:
ad:68:3a:7a:6b:6b:1e:6b:cb:ac:02:55:b3:21:15:
51:a0:47:17:46:8a:02:40:1d:7b:d5:f5:53:97:1f:
ef:10:4e:7a:c1:2b:86:45:99:7b:58:e1:3b:7c:49:
a3:16:9b:34:5a:95:c9:94:7e:13:e2:19:d4:68:c6:
0e:e5:b9:c9:d3:60:21:c3:d0:42:be:0f:3a:f1:9a:
da:85:70:f8:23:bd:ea:95:24:82:54:8c:9b:50:00:
6d:97:88:64:b8:b7:1f:1b:61:f6:a2:f6:b6:73:80:
31:9e:07:26:9a:ef:39:5e:dd:76:29:22:6d:50:6d:
a7:7a:0a:0d:7a:7e:b6:ec:e1:96:2f:f1:e1:71:8d:
17:13:62:be:c2:2d:d2:07:9a:d8:14:a6:0c:b4:20:
3a:84:75:8e:5f:89:45:e3:c2:81:66:27:ec:6e:1a:
cf:02:9f:cc:ad:f2:81:8c:a3:04:ef:51:86:f2:c0:
0a:c0:79:36:b4:66:78:63:2a:0a:67:62:ae:c7:4d:
7b:56:5f:46:94:19:c4:ec:6c:81:92:78:ff:03:35:
17:82:9d:26:cc:de:21:cb:ac:21:a6:2a:54:27:fe:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:4E:51:A1:63:00:68:15:23:DE:68:80:69:2C:EB:6A:6D:5C:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AHROUaFjAGgVI95ogGks62ptXGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:9e:d6:5b:0e:47:a5:95:9e:72:81:88:52:7e:d4:fc:fb:60:
ec:0e:85:d9:f9:0d:84:e6:96:99:18:47:20:c3:3d:3c:37:1d:
c7:57:e6:91:b1:e0:ca:88:de:1a:60:f3:e7:a2:e4:30:34:41:
f2:79:54:75:13:dc:89:e3:bd:68:0a:f0:09:39:ec:d9:2a:4f:
9a:ae:ad:c3:77:82:14:43:92:09:6f:55:3b:ff:c1:f8:1c:fc:
5e:87:ed:f2:e9:2c:60:14:b9:d1:8a:c6:c1:df:b4:8a:cf:48:
07:de:e5:4b:13:79:98:d4:33:a9:0d:24:ca:c8:8a:46:46:1f:
69:00:aa:7c:ee:39:39:c9:99:92:1a:d9:3f:a9:42:f2:3d:76:
d2:76:2e:9b:14:dc:ca:34:73:5e:7e:8a:3d:e6:6b:7f:e2:ce:
79:0e:f3:16:7e:cd:3b:0f:cc:79:bf:6d:55:60:52:cd:33:32:
af:83:01:c1:b3:01:2e:37:d1:24:5a:c0:ab:a3:7d:a5:10:5d:
e2:06:db:78:05:92:5b:a8:21:f6:86:1f:5c:02:26:54:ff:d5:
67:06:d2:c9:cf:ad:29:45:c4:9e:1a:40:47:22:1a:ff:5b:1f:
37:c2:ee:95:c4:22:af:35:14:3a:24:03:2f:0e:71:b7:51:3d:
b7:98:11:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMy
MDM5MTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAwNzQ0RTUxQTE2MzAw
NjgxNTIzREU2ODgwNjkyQ0VCNkE2RDVDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHp7IW5hVaXX6Ovn3X3kyfatkdRRFrach2mQwgRq1oOnprax5r
y6wCVbMhFVGgRxdGigJAHXvV9VOXH+8QTnrBK4ZFmXtY4Tt8SaMWmzRalcmUfhPi
GdRoxg7lucnTYCHD0EK+DzrxmtqFcPgjveqVJIJUjJtQAG2XiGS4tx8bYfai9rZz
gDGeByaa7zle3XYpIm1Qbad6Cg16frbs4ZYv8eFxjRcTYr7CLdIHmtgUpgy0IDqE
dY5fiUXjwoFmJ+xuGs8Cn8yt8oGMowTvUYbywArAeTa0ZnhjKgpnYq7HTXtWX0aU
GcTsbIGSeP8DNReCnSbM3iHLrCGmKlQn/iKvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAHROUaFjAGgVI95ogGks62ptXGowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9BSFJPVWFGakFHZ1ZJOTVv
Z0drczYycHRYR28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAqe1lsOR6WVnnKBiFJ+1Pz7YOwOhdn5DYTm
lpkYRyDDPTw3HcdX5pGx4MqI3hpg8+ei5DA0QfJ5VHUT3InjvWgK8Ak57NkqT5qu
rcN3ghRDkglvVTv/wfgc/F6H7fLpLGAUudGKxsHftIrPSAfe5UsTeZjUM6kNJMrI
ikZGH2kAqnzuOTnJmZIa2T+pQvI9dtJ2LpsU3Mo0c15+ij3ma3/iznkO8xZ+zTsP
zHm/bVVgUs0zMq+DAcGzAS430SRawKujfaUQXeIG23gFkluoIfaGH1wCJlT/1WcG
0snPrSlFxJ4aQEciGv9bHzfC7pXEIq81FDokAy8OcbdRPbeYEeo=
-----END CERTIFICATE-----
Generated at Sat Jun 21 10:04:23 2025 by rpki-client