Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GHmV_t4zSHmMC-EFwN_pD0Pnb00.roa
File: GHmV_t4zSHmMC-EFwN_pD0Pnb00.roa (raw, json)
Hash identifier: /+BdOad9HLI6zt26UHzQCeOmCqnSYMTum+RhJoQOMmY=
Subject key identifier: 18:79:95:FE:DE:33:48:79:8C:0B:E1:05:C0:DF:E9:0F:43:E7:6F:4D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BCA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHmV_t4zSHmMC-EFwN_pD0Pnb00.roa
Signing time: Fri 13 Jun 2025 03:32:25 +0000
ROA not before: Fri 13 Jun 2025 03:32:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7114 (0x1bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 03:32:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=187995FEDE3348798C0BE105C0DFE90F43E76F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:c6:13:73:4f:af:8f:32:1e:e5:6f:19:d6:
cb:8e:49:3f:f0:c2:9d:43:18:76:f0:c4:bd:de:8f:
84:09:26:d7:7e:f4:c1:77:37:e0:e5:7c:58:da:f5:
fd:34:b9:ea:5b:b5:d7:16:b9:01:85:0d:8a:a5:05:
f6:e1:2c:35:3a:fc:dc:95:ac:9c:e8:f2:53:33:5b:
24:3b:e8:d9:b6:77:1f:91:1e:cc:a1:da:58:7a:e7:
26:d2:6b:53:d0:7d:27:69:a8:8c:19:87:99:60:f5:
67:20:37:df:d3:03:a3:63:8e:f5:b4:ea:f1:cd:0e:
91:78:7f:f0:ca:2a:33:2a:c3:1d:0a:fb:a0:9f:b1:
c3:86:aa:7f:fd:19:0b:0a:68:7f:85:49:ca:ac:bd:
16:fc:94:39:d1:b4:80:97:5a:78:2a:1b:58:a9:38:
89:f7:ea:eb:ce:79:3e:88:82:0e:4a:90:8b:a0:49:
0a:2a:6d:5f:7e:21:7a:6c:2e:23:50:d3:e6:70:52:
b7:d0:e3:e9:59:6f:fe:20:18:d3:46:72:48:20:c2:
39:df:0f:09:02:f9:5c:1f:21:60:c0:78:20:eb:cb:
de:03:e2:0d:f4:9d:80:c3:22:d3:4a:9b:0c:57:b3:
08:5c:8b:28:50:ca:13:38:4b:ab:77:c2:80:83:4c:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:95:FE:DE:33:48:79:8C:0B:E1:05:C0:DF:E9:0F:43:E7:6F:4D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHmV_t4zSHmMC-EFwN_pD0Pnb00.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:e1:b6:ca:aa:fc:7e:46:bf:26:b2:36:d9:98:3d:0e:b9:fd:
0c:1c:20:50:b5:fa:5e:40:e0:8b:a5:eb:65:99:47:a0:e2:32:
a5:5c:7e:9f:0f:b2:22:3b:d8:e9:8a:f7:b2:c2:d2:be:4e:61:
22:fe:56:bd:2d:08:92:53:be:0d:5b:30:f5:b9:b2:2b:de:aa:
63:ad:7c:53:27:76:47:1e:a9:0d:a2:4a:07:cb:02:a1:b3:a6:
6c:cb:72:21:b0:2b:ee:a7:37:74:65:19:35:42:be:fe:f2:6d:
60:50:b3:41:26:d4:1d:52:00:90:ed:40:60:8b:41:cd:81:cc:
75:bc:d2:c5:37:ed:69:0f:7b:ab:d1:37:eb:13:63:51:46:b2:
2d:d9:7d:2c:dd:c2:d3:67:81:0d:04:3f:36:d5:0b:e3:cd:67:
3a:f2:0d:ea:53:10:74:a4:2c:1d:d9:41:4c:67:dd:4a:75:34:
4b:ee:00:8e:af:36:f3:09:35:11:00:99:df:b6:ed:99:2f:75:
73:01:e9:7e:ae:c3:41:8a:b1:5d:6b:cc:a0:bb:44:17:4e:c8:
50:80:07:68:2f:c0:7e:22:37:ba:ad:56:54:5e:93:f5:a4:71:
ba:b8:3c:92:2a:56:a5:59:f9:9b:42:8c:04:58:2d:32:10:81:
d6:4c:3e:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMw
MzMyMjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE4Nzk5NUZFREUzMzQ4
Nzk4QzBCRTEwNUMwREZFOTBGNDNFNzZGNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0ycYTc0+vjzIe5W8Z1suOST/wwp1DGHbwxL3ej4QJJtd+9MF3
N+DlfFja9f00uepbtdcWuQGFDYqlBfbhLDU6/NyVrJzo8lMzWyQ76Nm2dx+RHsyh
2lh65ybSa1PQfSdpqIwZh5lg9WcgN9/TA6NjjvW06vHNDpF4f/DKKjMqwx0K+6Cf
scOGqn/9GQsKaH+FScqsvRb8lDnRtICXWngqG1ipOIn36uvOeT6Igg5KkIugSQoq
bV9+IXpsLiNQ0+ZwUrfQ4+lZb/4gGNNGckggwjnfDwkC+VwfIWDAeCDry94D4g30
nYDDItNKmwxXswhciyhQyhM4S6t3woCDTN29AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGHmV/t4zSHmMC+EFwN/pD0Pnb00wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HSG1WX3Q0elNIbU1DLUVG
d05fcEQwUG5iMDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBABLhtsqq/H5GvyayNtmYPQ65/QwcIFC1+l5A
4Iul62WZR6DiMqVcfp8PsiI72OmK97LC0r5OYSL+Vr0tCJJTvg1bMPW5siveqmOt
fFMndkceqQ2iSgfLAqGzpmzLciGwK+6nN3RlGTVCvv7ybWBQs0Em1B1SAJDtQGCL
Qc2BzHW80sU37WkPe6vRN+sTY1FGsi3ZfSzdwtNngQ0EPzbVC+PNZzryDepTEHSk
LB3ZQUxn3Up1NEvuAI6vNvMJNREAmd+27ZkvdXMB6X6uw0GKsV1rzKC7RBdOyFCA
B2gvwH4iN7qtVlRek/Wkcbq4PJIqVqVZ+ZtCjARYLTIQgdZMPhw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:34 2025 by rpki-client