Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Kob85Qi2_GOlxTmH7VQzPlaB_l4.roa
File: Kob85Qi2_GOlxTmH7VQzPlaB_l4.roa (raw, json)
Hash identifier: ocYMq0Z6K/cbBbmwigvm2kmZ2FYJxDxbEieRtPQhyyU=
Subject key identifier: 2A:86:FC:E5:08:B6:FC:63:A5:C5:39:87:ED:54:33:3E:56:81:FE:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1ABE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kob85Qi2_GOlxTmH7VQzPlaB_l4.roa
Signing time: Wed 11 Jun 2025 17:39:47 +0000
ROA not before: Wed 11 Jun 2025 17:39:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6846 (0x1abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 17:39:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A86FCE508B6FC63A5C53987ED54333E5681FE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:f8:d4:b1:e8:5f:f8:91:d1:95:03:bd:cc:
19:fb:97:51:16:65:16:69:ac:52:05:c7:6b:fd:8f:
e6:b0:f1:5b:82:f9:fa:85:90:b7:20:82:bd:c9:6c:
12:c1:a3:83:3b:de:13:74:f6:e7:d1:50:a3:19:d0:
ab:0d:6a:42:fd:00:e6:46:09:98:31:03:2f:f2:7b:
7b:d7:df:76:56:76:d3:c9:06:36:39:25:8b:c4:48:
c3:4a:c0:34:5f:2f:c7:ac:3f:49:b2:b6:21:46:3c:
ad:58:e7:1a:ee:56:2b:16:b5:94:99:8b:55:c8:54:
6b:b6:ed:4d:44:b3:10:e2:1b:9e:19:7a:cb:4f:7e:
65:82:2f:4b:02:1a:91:09:e5:cc:f4:8a:00:55:5e:
8e:b8:bb:40:5b:00:79:a5:72:71:f9:9b:93:33:27:
1c:ef:f7:a5:62:c5:7a:8b:be:f3:da:40:eb:83:91:
e5:9e:11:3b:2f:24:18:98:6c:79:39:08:07:d5:e3:
8e:3e:7f:aa:87:06:f1:05:cd:8b:75:fb:cb:d8:db:
b7:45:fb:2f:a4:78:d1:16:77:ff:8d:8b:1f:99:63:
3e:56:7f:b7:d5:ce:8e:0d:b4:42:29:7b:5b:77:27:
08:f0:71:be:f8:b0:96:d2:13:a8:51:4b:9a:b3:d6:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:FC:E5:08:B6:FC:63:A5:C5:39:87:ED:54:33:3E:56:81:FE:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Kob85Qi2_GOlxTmH7VQzPlaB_l4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:ef:e7:bb:43:4d:cf:ba:a5:f9:00:f9:01:1d:26:42:49:c7:
fe:54:25:21:ca:d2:a5:fc:68:c4:f9:64:56:b9:bd:28:d3:99:
cc:bf:6f:85:7c:94:7a:8e:40:c6:61:0e:42:d6:e4:85:78:84:
29:03:db:8d:1b:27:9b:1b:47:64:39:63:81:aa:e1:6c:36:05:
66:72:1b:d6:94:e6:85:94:76:71:49:22:96:7e:01:d6:79:aa:
0e:3b:3a:8c:4e:93:e0:37:90:1c:7c:99:6f:3f:cd:69:24:a2:
8a:50:7a:6c:97:54:18:a5:ed:79:c7:5a:47:a6:89:bc:73:e4:
9b:80:ce:f8:cf:f1:0b:ce:90:77:d7:92:5a:4f:42:d2:22:95:
2b:c0:1c:c1:ad:57:36:61:b1:74:0c:12:0d:e4:72:46:40:00:
68:5a:09:c4:12:db:23:c3:fd:ac:4c:4e:41:cb:eb:e5:06:8b:
6c:33:c7:c1:a6:65:69:9f:f4:aa:e5:98:89:92:4a:77:90:55:
6d:b1:b9:30:0c:02:ff:82:b5:9a:83:60:f7:6e:7c:be:0a:3a:
6d:13:64:6e:88:b0:b0:ee:04:65:d0:87:b3:b2:63:97:32:58:
23:92:3c:b8:16:73:a4:52:61:a7:a0:d1:08:60:57:24:ca:de:
23:18:dd:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTEx
NzM5NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJBODZGQ0U1MDhCNkZD
NjNBNUM1Mzk4N0VENTQzMzNFNTY4MUZFNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvn/jUsehf+JHRlQO9zBn7l1EWZRZprFIFx2v9j+aw8VuC+fqF
kLcggr3JbBLBo4M73hN09ufRUKMZ0KsNakL9AOZGCZgxAy/ye3vX33ZWdtPJBjY5
JYvESMNKwDRfL8esP0mytiFGPK1Y5xruVisWtZSZi1XIVGu27U1EsxDiG54ZestP
fmWCL0sCGpEJ5cz0igBVXo64u0BbAHmlcnH5m5MzJxzv96VixXqLvvPaQOuDkeWe
ETsvJBiYbHk5CAfV444+f6qHBvEFzYt1+8vY27dF+y+keNEWd/+Nix+ZYz5Wf7fV
zo4NtEIpe1t3Jwjwcb74sJbSE6hRS5qz1v6NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKob85Qi2/GOlxTmH7VQzPlaB/l4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Lb2I4NVFpMl9HT2x4VG1I
N1ZRelBsYUJfbDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGXv57tDTc+6pfkA+QEdJkJJx/5UJSHK0qX8
aMT5ZFa5vSjTmcy/b4V8lHqOQMZhDkLW5IV4hCkD240bJ5sbR2Q5Y4Gq4Ww2BWZy
G9aU5oWUdnFJIpZ+AdZ5qg47OoxOk+A3kBx8mW8/zWkkoopQemyXVBil7XnHWkem
ibxz5JuAzvjP8QvOkHfXklpPQtIilSvAHMGtVzZhsXQMEg3kckZAAGhaCcQS2yPD
/axMTkHL6+UGi2wzx8GmZWmf9KrlmImSSneQVW2xuTAMAv+CtZqDYPdufL4KOm0T
ZG6IsLDuBGXQh7OyY5cyWCOSPLgWc6RSYaeg0QhgVyTK3iMY3To=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:26 2025 by rpki-client