Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BzXIVSxy2e7krtSyjf0ef-bafJs.roa
File: BzXIVSxy2e7krtSyjf0ef-bafJs.roa (raw, json)
Hash identifier: qfer1OKtkRHg8564W4Fe8zov6GjPruhn32K9vU993nk=
Subject key identifier: 07:35:C8:55:2C:72:D9:EE:E4:AE:D4:B2:8D:FD:1E:7F:E6:DA:7C:9B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1836
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BzXIVSxy2e7krtSyjf0ef-bafJs.roa
Signing time: Sun 08 Jun 2025 08:39:44 +0000
ROA not before: Sun 08 Jun 2025 08:39:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6198 (0x1836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 08:39:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0735C8552C72D9EEE4AED4B28DFD1E7FE6DA7C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:a0:a6:65:ca:c6:f5:ce:67:3e:63:74:62:
93:d1:2d:fb:31:d1:15:f1:7c:ce:d7:05:a1:cc:0c:
20:6c:46:e0:e8:ca:02:85:2e:83:c5:4a:9b:f2:c9:
42:69:10:e3:57:62:06:23:d5:a9:dd:fb:61:b6:a7:
e4:76:00:83:0c:02:86:17:46:58:99:e9:3e:2d:b1:
3f:ae:be:37:1f:13:6d:64:fd:07:5c:8e:1b:37:18:
99:e9:64:f4:cf:2f:27:61:87:73:5e:8b:b2:ae:a7:
c0:76:17:6d:a9:2d:73:52:1a:59:a9:9d:43:15:7d:
2e:75:e2:26:9d:5b:4d:af:3a:45:a3:c5:ba:3e:22:
eb:7c:e1:9f:e3:4d:aa:84:ce:2d:62:f8:a5:40:1a:
25:f5:39:72:ad:e8:b8:91:7d:8c:2a:dc:0e:24:88:
2a:b7:51:1a:31:40:d2:e4:13:77:95:d6:3e:61:ee:
d9:04:14:e1:54:80:0d:ab:d1:3d:4d:50:59:f2:bb:
28:8b:07:84:4f:6e:da:c5:e2:3c:9e:c0:dd:70:8a:
bb:2a:c7:80:a2:49:76:49:75:5b:7a:fb:4b:d8:85:
d8:d9:5a:87:73:fe:a3:14:64:56:44:54:f9:36:ac:
ac:e8:66:49:82:a4:82:7d:eb:60:26:e8:ae:c0:1e:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:C8:55:2C:72:D9:EE:E4:AE:D4:B2:8D:FD:1E:7F:E6:DA:7C:9B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BzXIVSxy2e7krtSyjf0ef-bafJs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:12:2c:f6:92:d5:3a:bc:f0:70:b6:ea:6d:f7:6e:5d:ed:c4:
45:48:5c:e4:5c:23:77:8c:08:0b:4f:f7:f6:a5:c0:08:d0:41:
e9:5b:ec:84:0d:a5:2e:e3:fb:d3:a2:09:53:f4:79:b7:1f:3d:
95:c3:1b:10:2f:42:2d:62:58:ea:22:e2:04:fa:59:9b:39:3e:
64:2d:69:b2:cc:55:e9:82:cc:a4:f5:0f:cd:2a:c8:12:15:fb:
24:ad:3f:41:10:ce:a4:aa:aa:63:c1:48:1f:6f:f2:c6:5a:ff:
ed:69:99:12:9a:f8:65:af:7b:ed:04:51:c8:a3:71:b6:60:a0:
52:d8:de:d2:d0:c8:4c:67:10:d8:d4:30:21:c8:04:f5:fa:34:
48:4b:02:8d:f1:4e:1e:2c:04:90:c9:1e:06:70:d3:80:75:7d:
de:e1:73:df:b6:ff:3c:93:69:57:24:b8:94:b9:61:16:18:7f:
14:92:3d:a0:3e:c2:73:d9:f1:53:cb:78:30:17:d8:1f:31:74:
62:d4:a8:1b:87:1c:a1:2b:77:8e:1e:a5:6c:d2:cc:7a:e5:8f:
60:81:08:d3:92:03:98:8d:2e:2b:ac:ba:81:bd:7b:8b:8f:f4:
b3:9c:05:0b:1e:11:3e:ae:f8:1c:c0:77:d5:2d:59:63:18:9a:
3c:30:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:47:29 2025 by rpki-client