Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/B0UXfebaCmtx2wQALpi7uGkJWk8.roa
File: B0UXfebaCmtx2wQALpi7uGkJWk8.roa (raw, json)
Hash identifier: xYH55KW4FOXAYniJ/EnBB2eoANZshi3hGMMHE3WCkTs=
Subject key identifier: 07:45:17:7D:E6:DA:0A:6B:71:DB:04:00:2E:98:BB:B8:69:09:5A:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 166A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B0UXfebaCmtx2wQALpi7uGkJWk8.roa
Signing time: Thu 05 Jun 2025 23:09:24 +0000
ROA not before: Thu 05 Jun 2025 23:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5738 (0x166a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 23:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0745177DE6DA0A6B71DB04002E98BBB869095A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:a5:57:96:8c:9b:dd:07:42:30:9f:0c:1b:
39:99:43:4b:d0:e5:a4:4b:51:17:93:3b:c0:a9:8d:
0d:b6:36:24:fe:0e:75:bd:5f:b9:72:36:44:8f:65:
9d:98:12:6c:2b:46:96:07:04:ae:ca:a4:64:0e:89:
10:12:91:b5:d0:94:9b:7e:27:c8:15:6a:7a:3f:b1:
c4:f5:65:6c:6d:50:4f:20:b4:35:a0:bb:6d:d8:69:
ba:2d:e1:49:ea:fa:15:6b:2f:49:d2:e1:ae:e9:6d:
50:94:36:90:15:d9:0a:f5:f4:41:b3:f5:c5:47:f1:
39:5e:1b:fb:de:0c:f1:36:93:d3:0c:4d:cc:3b:af:
64:0b:41:a3:c3:cd:13:97:ea:ff:e7:d7:b5:c6:37:
7f:4b:4f:37:84:26:cc:11:f6:1f:51:58:81:e9:87:
0e:5a:ca:c2:4e:26:06:fc:0d:1f:1a:32:57:b1:0c:
db:0e:f6:f0:49:89:fa:0e:e6:02:74:f2:7b:17:90:
bf:e9:b0:50:22:79:de:5b:d1:38:0d:8a:05:d3:b5:
4c:e8:28:61:8a:9f:32:d3:b0:99:49:05:d1:76:c5:
5f:fe:3f:e4:11:89:43:70:4b:18:41:5f:c4:05:b0:
55:97:03:2a:b1:65:4e:ae:55:4b:5b:0e:b7:e5:22:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:17:7D:E6:DA:0A:6B:71:DB:04:00:2E:98:BB:B8:69:09:5A:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B0UXfebaCmtx2wQALpi7uGkJWk8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:34:39:03:ff:e3:74:ab:6a:d0:24:3a:8d:b0:c1:4c:36:c4:
15:ea:a5:bc:2d:f1:6e:b8:a8:9a:43:99:1e:02:3c:15:ef:5d:
36:98:be:f9:e6:cd:04:cd:77:ef:ba:05:35:ca:50:a5:9e:f0:
2e:d4:00:92:3f:9b:6a:74:07:88:40:74:c5:59:b0:a4:b4:22:
0e:62:ca:95:a6:44:7f:27:4f:98:4d:ef:f7:8a:69:0c:e3:59:
5c:37:0a:62:b0:bd:89:96:d7:5d:f9:b1:9a:6d:71:af:52:4a:
1c:4c:f1:66:c1:80:cc:9a:af:8b:aa:2c:9c:75:38:37:af:68:
cc:49:4b:0e:8a:32:07:1b:40:92:77:22:f8:fc:71:ce:3d:fc:
bd:e8:0f:fb:a5:49:dd:b6:9c:7c:54:db:f2:ce:c0:53:91:af:
aa:3f:15:b6:46:36:39:1d:54:e6:01:e5:76:2d:41:d8:cc:a6:
4c:9a:29:f4:30:d2:0b:db:f9:46:e6:c5:50:b4:cd:58:36:b6:
9a:78:51:3e:47:4b:8d:49:bf:0a:03:7d:61:85:9d:24:78:78:
27:db:de:2f:e4:9b:21:3c:60:98:b0:3e:c2:f7:fb:46:23:91:
2f:62:de:e2:29:85:85:e4:24:0b:04:41:be:a3:e2:70:e0:70:
1a:04:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:04 2025 by rpki-client