Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JkIFZ5Wpqjn73A8OgN3pSq-ozDU.roa
File: JkIFZ5Wpqjn73A8OgN3pSq-ozDU.roa (raw, json)
Hash identifier: mDEGouO/i+IApp0p0xMbHvQpOKhqx8oEj2F49Nz3vZM=
Subject key identifier: 26:42:05:67:95:A9:AA:39:FB:DC:0F:0E:80:DD:E9:4A:AF:A8:CC:35
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B3E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JkIFZ5Wpqjn73A8OgN3pSq-ozDU.roa
Signing time: Thu 12 Jun 2025 09:39:50 +0000
ROA not before: Thu 12 Jun 2025 09:39:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6974 (0x1b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 09:39:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2642056795A9AA39FBDC0F0E80DDE94AAFA8CC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:c2:6a:98:70:f0:cb:32:85:4d:6f:8b:c5:
e9:da:46:3a:2e:05:ba:44:5b:77:1b:d5:7d:03:f9:
f4:3b:19:d6:9b:11:95:e0:e3:b7:17:e0:ad:67:3d:
7f:d1:77:4a:67:dc:76:e1:50:88:d7:61:5e:ba:a0:
bb:69:81:9e:03:69:94:de:1e:a8:d1:82:f5:38:af:
e4:42:04:75:e2:39:f3:96:c7:06:a2:c3:f6:87:47:
37:58:9a:26:9b:98:0d:83:a2:66:7e:36:40:c5:ab:
fd:92:a9:d6:81:05:50:bc:24:f7:f7:54:56:6e:ca:
f5:36:1c:c9:7f:e5:58:dc:63:f9:f5:38:58:76:9a:
44:fb:75:1c:84:c9:b3:70:23:56:ba:c2:4b:0c:52:
54:39:36:44:f0:2b:50:ed:b9:9d:fb:8f:77:c4:bb:
c3:a4:3d:0e:0d:8d:4e:6b:85:fd:b6:2a:24:5f:85:
a2:b0:44:b7:61:df:5a:a2:29:2b:14:17:d0:68:85:
77:7e:0d:3e:3a:15:ca:0c:cf:0d:7a:d0:50:01:54:
de:9f:0d:39:66:b9:9c:62:4a:2c:68:cd:7e:fb:8c:
e5:0a:46:60:47:84:65:4a:30:da:7c:d0:6a:16:83:
04:82:d7:4a:07:f4:d2:5d:16:d4:b5:b3:c9:02:e9:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:05:67:95:A9:AA:39:FB:DC:0F:0E:80:DD:E9:4A:AF:A8:CC:35
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JkIFZ5Wpqjn73A8OgN3pSq-ozDU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:66:d5:63:1b:5e:b9:67:d1:b0:d1:69:69:90:60:3c:6e:92:
d9:e1:db:d8:a7:be:6c:22:e2:80:c3:82:5a:45:76:6a:51:f9:
ee:ff:9c:18:94:96:b7:21:92:fb:44:6b:5c:32:8c:dd:91:2c:
9d:85:5f:d9:fd:1c:c7:de:04:73:ff:41:0a:bf:0d:ec:8e:5a:
b2:3d:6a:92:62:10:24:38:46:8c:cc:17:27:8f:1c:08:7a:c0:
9c:28:72:72:16:85:c5:14:93:10:0b:17:aa:6d:fb:06:c8:ad:
03:6f:f0:44:29:c0:ee:a1:01:17:b4:9e:ff:3c:ea:c4:83:eb:
ab:23:e0:7b:c9:8b:6d:71:01:bd:d2:d9:dd:01:97:b3:af:40:
f8:48:bb:3f:2d:02:7e:c4:62:fe:5a:42:e0:26:cb:53:18:0f:
f3:82:a7:90:c7:81:29:4d:76:5c:71:9d:d0:41:6c:ad:fb:a7:
25:b4:63:bb:ff:20:74:64:c3:a0:a6:c7:c9:8b:d2:1e:85:0d:
ad:67:5c:1d:82:aa:65:75:05:d2:98:b1:64:bf:43:c3:99:6d:
fc:21:83:39:45:d1:6a:8e:b5:0f:2f:4b:93:62:bd:e4:b8:ac:
ff:cb:71:03:10:1b:99:f5:5d:b5:31:f8:38:09:1c:06:4e:71:
69:1a:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:59 2025 by rpki-client