Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JZBEXqWW0d0K_tESE3NF0SGRoc8.roa
File: JZBEXqWW0d0K_tESE3NF0SGRoc8.roa (raw, json)
Hash identifier: NSb+yH4cuwDKzV5T2ZQ/P845XDhnvEmr5dcBsr32hsY=
Subject key identifier: 25:90:44:5E:A5:96:D1:DD:0A:FE:D1:12:13:73:45:D1:21:91:A1:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04E6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JZBEXqWW0d0K_tESE3NF0SGRoc8.roa
Signing time: Tue 13 May 2025 14:37:59 +0000
ROA not before: Tue 13 May 2025 14:37:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 14:37:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2590445EA596D1DD0AFED112137345D12191A1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:6b:57:46:b5:82:4c:a8:48:77:8e:26:85:
26:3f:04:b3:8c:8e:7a:3d:b6:da:bb:d8:d4:e5:09:
82:d2:05:d3:a1:dc:51:16:a2:1b:50:67:60:b2:53:
4d:10:93:f2:16:ce:4f:f8:2a:3d:4d:e0:d5:19:9a:
b5:f8:6b:27:43:c7:17:83:19:a6:20:8a:36:6b:07:
ce:16:2b:e6:a7:1c:03:c9:c1:af:75:eb:98:10:ee:
64:cb:b2:0a:7f:12:fb:2c:a2:68:1c:f8:59:9f:4c:
04:c3:49:4e:2a:83:29:3f:2d:12:c9:44:d0:a7:50:
64:48:f0:56:0a:a2:22:3c:36:a6:52:eb:37:04:1e:
15:c2:e5:6b:4b:5b:7b:9c:1a:55:d0:c4:8e:5d:0d:
5e:68:a5:69:7d:7a:a6:52:d6:b6:6a:52:7a:f8:ec:
68:2c:0b:14:52:5e:7a:f6:37:3d:50:07:5a:f4:20:
ea:ef:0c:9b:75:cd:d6:fe:00:35:f7:8c:46:6e:47:
31:66:16:40:e5:55:12:4c:8c:49:30:3f:3e:10:ec:
5e:c5:c3:38:01:e9:d6:ae:c9:9b:a6:02:05:ab:ba:
07:89:22:3d:40:cb:23:4b:75:d7:95:69:d1:27:17:
60:24:10:cc:19:89:0c:96:6e:55:f1:e4:ca:f2:89:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:90:44:5E:A5:96:D1:DD:0A:FE:D1:12:13:73:45:D1:21:91:A1:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JZBEXqWW0d0K_tESE3NF0SGRoc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:38:71:d7:de:74:fb:95:10:f4:96:0e:70:14:9d:4d:57:7b:
60:10:2f:f1:e0:20:39:20:4b:71:a5:56:92:20:7d:6a:59:1a:
91:b1:85:d5:ef:da:e6:8c:b1:fd:76:12:a7:53:e1:99:49:19:
72:a2:a0:17:f3:07:c7:db:a2:49:b6:b3:0f:1e:2f:b2:af:d2:
e6:ef:3b:3b:28:7e:72:7f:4a:a4:65:d7:2e:bc:17:b8:aa:1a:
25:8d:86:23:d5:b0:59:08:a0:d0:09:5a:33:bd:b1:7c:43:a2:
85:bc:fe:b4:96:40:f3:e8:01:4b:6e:0b:74:1d:8c:fb:99:9c:
3a:56:2f:f5:a1:b3:7f:a4:b7:02:9f:b1:6a:70:8c:67:d1:f6:
89:94:5d:3b:20:8e:25:f7:93:0c:80:64:5f:84:e0:2c:ff:3b:
13:8c:d8:6b:9f:b6:ab:a1:37:3a:fa:f5:c8:3a:57:df:d3:f2:
5a:c5:70:c0:5a:17:fc:08:a5:53:c4:3a:a0:da:20:36:19:56:
9f:87:4a:09:90:47:30:7b:74:25:e9:0a:92:63:79:5b:c9:7b:
49:43:37:36:88:4b:ce:89:ef:b8:0d:42:95:96:12:af:79:29:
b3:9c:ea:e6:16:ed:6c:38:35:6b:ac:aa:b0:68:22:7c:9f:10:
39:7c:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:11:53 2025 by rpki-client