Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KD6zfTa3b2mfGKXWGJTAIFiFW0s.roa
File: KD6zfTa3b2mfGKXWGJTAIFiFW0s.roa (raw, json)
Hash identifier: awFK/3ZGhYNCdh4Is/vYAnivF2LXCIr3VaM0EUEccq8=
Subject key identifier: 28:3E:B3:7D:36:B7:6F:69:9F:18:A5:D6:18:94:C0:20:58:85:5B:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CC6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KD6zfTa3b2mfGKXWGJTAIFiFW0s.roa
Signing time: Sat 14 Jun 2025 10:39:55 +0000
ROA not before: Sat 14 Jun 2025 10:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7366 (0x1cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 10:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=283EB37D36B76F699F18A5D61894C02058855B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:e5:ca:33:ee:c3:d6:89:26:e5:12:2d:bd:
ef:ae:ac:a3:39:e7:db:1e:cf:86:16:70:d3:c9:a7:
47:c4:71:00:fe:91:be:1b:85:01:b5:2e:24:71:17:
14:99:6d:61:93:3c:be:4a:88:63:9e:af:5d:3d:9a:
24:9d:51:23:1c:13:2f:b1:66:cd:b3:6f:f0:a6:95:
c4:4f:75:7d:7d:74:5f:29:70:1c:53:76:84:f9:d7:
8e:62:8d:d2:91:63:d1:49:06:7c:bd:0b:87:47:8d:
78:e2:3f:e2:ed:a3:5c:50:e8:65:04:73:96:38:70:
48:11:b4:17:a1:bb:a0:82:f6:f3:6d:cd:9d:ff:9e:
0f:ff:b9:da:66:1f:de:f7:c5:36:7d:09:e4:9a:01:
84:c7:47:15:31:58:c2:e8:eb:71:1a:ab:4b:fb:cd:
8c:dd:5f:a8:42:1d:fc:89:72:2e:84:62:c3:75:2c:
04:bf:cf:62:84:04:b0:0f:c1:17:9c:b1:1f:92:c8:
ef:0c:0f:8c:70:6d:17:a7:4b:5d:eb:04:4a:66:24:
33:cb:f0:6e:fd:8f:cb:42:72:bf:9c:24:c2:d8:85:
44:00:35:03:26:c8:32:d9:e3:bf:9c:88:d3:23:8a:
a9:9e:00:b5:53:67:fa:a1:6c:70:ec:89:0b:6c:c2:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3E:B3:7D:36:B7:6F:69:9F:18:A5:D6:18:94:C0:20:58:85:5B:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KD6zfTa3b2mfGKXWGJTAIFiFW0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:75:37:43:9b:5b:06:70:09:46:32:e7:8b:80:f7:7f:ae:0b:
83:d6:c6:06:3f:fc:66:17:87:0c:a6:8a:b9:b6:6b:94:64:e8:
d3:27:ad:3a:4c:37:4e:73:d8:78:b9:0c:2a:b1:44:dd:f5:a1:
89:68:1b:fe:26:38:86:13:27:c1:c0:d9:7c:aa:0a:6e:d5:57:
e8:4d:60:35:17:c1:dc:77:77:bf:19:f8:62:63:0c:3c:b0:99:
c0:7b:6b:92:56:cb:ac:68:fe:54:46:63:b2:ba:1d:d3:4d:3e:
b3:0c:26:13:ab:2e:c1:55:bd:7c:d2:ff:65:41:ed:af:44:01:
eb:4e:78:aa:98:dd:35:c9:6c:df:f2:71:db:1d:ec:ef:21:7d:
0b:e8:7a:38:fc:70:39:4c:57:a9:51:3a:12:7b:97:d6:26:20:
53:c2:0a:20:bf:b1:c6:ec:ee:60:51:5e:02:ef:8a:33:a6:2d:
b9:9f:ac:b3:a8:99:ba:1e:d6:e3:9a:e2:c3:77:fe:e5:76:19:
c2:c9:5f:b8:b6:ef:a2:9a:03:c5:2b:17:a7:e9:ea:ba:0f:96:
fd:f8:76:b8:bc:34:00:82:af:bf:b1:ea:7d:70:85:d8:66:a6:
6d:ba:69:1c:b5:56:09:71:46:45:42:6a:62:b5:23:18:fa:8f:
b4:04:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:27:01 2025 by rpki-client