Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I3QRdmWlhYJ-iPBaWLOYquUwu5o.roa
File: I3QRdmWlhYJ-iPBaWLOYquUwu5o.roa (raw, json)
Hash identifier: idRTf2iMJuihEQGh/QVBgqzXEQljATGpmJ3LsG0GvZA=
Subject key identifier: 23:74:11:76:65:A5:85:82:7E:88:F0:5A:58:B3:98:AA:E5:30:BB:9A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AFE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I3QRdmWlhYJ-iPBaWLOYquUwu5o.roa
Signing time: Thu 12 Jun 2025 01:39:49 +0000
ROA not before: Thu 12 Jun 2025 01:39:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6910 (0x1afe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 01:39:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2374117665A585827E88F05A58B398AAE530BB9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:13:47:04:b3:b6:82:76:14:de:e8:a3:49:
99:a3:ed:82:46:77:75:56:d5:09:8a:b4:8d:ac:6d:
d8:08:e7:33:9e:fc:cd:44:d3:38:eb:72:7e:e2:31:
f5:5a:e1:b7:21:27:93:d7:43:2c:fe:cf:a0:8f:86:
6d:62:90:fe:f4:27:67:c7:ee:08:e1:e8:42:d2:5c:
9d:ed:72:fe:63:19:6d:48:af:0a:1d:a9:20:b6:53:
7a:ce:a4:34:ec:bb:66:89:ba:ce:d6:de:b7:9b:37:
3f:66:bc:de:2c:76:cf:b2:cc:b7:3f:d3:49:05:be:
c4:5d:ae:7c:b2:6a:0d:e5:e8:90:e0:35:50:5f:fa:
8e:93:87:2d:7a:a8:03:b8:36:49:58:52:52:01:4f:
57:f8:27:d5:25:78:2e:1c:25:b0:23:78:81:98:4d:
46:e9:cc:6b:65:ba:79:38:5f:88:5e:a5:5a:17:95:
f0:b2:18:24:f8:74:71:85:37:fc:91:75:21:e9:ae:
a9:e9:ac:b7:58:66:2e:cb:4b:a5:61:64:7d:24:31:
d2:94:7b:90:19:27:78:11:a4:08:52:c8:14:c9:02:
64:88:ee:2b:7f:fa:33:41:c3:a4:e4:86:9a:0e:98:
6e:a6:df:b1:0c:35:76:f4:90:8f:b0:83:ad:a5:5b:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:11:76:65:A5:85:82:7E:88:F0:5A:58:B3:98:AA:E5:30:BB:9A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I3QRdmWlhYJ-iPBaWLOYquUwu5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:66:12:a1:bb:8c:b9:e7:e9:ee:33:85:5c:09:73:4e:c6:f6:
20:c3:22:0f:96:6d:f6:b0:cf:c1:a7:1f:cb:a1:79:5c:57:74:
75:2a:71:53:ca:59:59:7f:08:c7:78:92:fb:7d:ac:60:19:75:
7c:26:ed:0d:70:c4:6b:07:c3:01:12:99:6b:34:09:fb:b3:fa:
67:4b:68:0e:df:26:ac:38:72:f0:94:06:cc:0e:db:36:7b:32:
e2:52:18:97:b1:86:3b:22:e5:43:fd:a9:6e:80:f4:f5:5a:4d:
1b:02:54:7a:ea:66:0b:58:9b:f3:fb:ff:6f:01:64:74:8e:5d:
59:33:76:07:73:92:df:99:29:ab:ed:5a:d9:c5:b6:3b:60:f9:
7f:f2:44:d5:f9:b1:66:9f:eb:a5:fc:21:7a:f7:4c:ce:b1:6e:
75:16:bb:f8:fa:23:04:8e:23:e5:c7:70:95:e4:17:02:1f:a6:
e9:64:a7:07:93:5f:c4:d2:ad:a1:2d:6a:0d:fd:db:13:77:d3:
55:49:31:f5:90:73:94:d3:40:0e:c6:ef:3e:d2:dc:2b:fc:5c:
ab:6d:47:75:be:10:af:b6:ca:b9:9e:7e:12:f9:e6:50:3c:49:
20:21:28:88:03:7e:f2:88:30:dd:33:9c:1c:53:65:b6:12:f5:
39:1c:85:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIw
MTM5NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIzNzQxMTc2NjVBNTg1
ODI3RTg4RjA1QTU4QjM5OEFBRTUzMEJCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqJBNHBLO2gnYU3uijSZmj7YJGd3VW1QmKtI2sbdgI5zOe/M1E
0zjrcn7iMfVa4bchJ5PXQyz+z6CPhm1ikP70J2fH7gjh6ELSXJ3tcv5jGW1Irwod
qSC2U3rOpDTsu2aJus7W3rebNz9mvN4sds+yzLc/00kFvsRdrnyyag3l6JDgNVBf
+o6Thy16qAO4NklYUlIBT1f4J9UleC4cJbAjeIGYTUbpzGtlunk4X4hepVoXlfCy
GCT4dHGFN/yRdSHprqnprLdYZi7LS6VhZH0kMdKUe5AZJ3gRpAhSyBTJAmSI7it/
+jNBw6TkhpoOmG6m37EMNXb0kI+wg62lW0TJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUI3QRdmWlhYJ+iPBaWLOYquUwu5owHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JM1FSZG1XbGhZSi1pUEJh
V0xPWXF1VXd1NW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIdmEqG7jLnn6e4zhVwJc07G9iDDIg+Wbfaw
z8GnH8uheVxXdHUqcVPKWVl/CMd4kvt9rGAZdXwm7Q1wxGsHwwESmWs0Cfuz+mdL
aA7fJqw4cvCUBswO2zZ7MuJSGJexhjsi5UP9qW6A9PVaTRsCVHrqZgtYm/P7/28B
ZHSOXVkzdgdzkt+ZKavtWtnFtjtg+X/yRNX5sWaf66X8IXr3TM6xbnUWu/j6IwSO
I+XHcJXkFwIfpulkpweTX8TSraEtag392xN301VJMfWQc5TTQA7G7z7S3Cv8XKtt
R3W+EK+2yrmefhL55lA8SSAhKIgDfvKIMN0znBxTZbYS9TkchXQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:20:25 2025 by rpki-client