Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KtGrMxtUy2mD9cdkd9uAXaEQ9nc.roa
File: KtGrMxtUy2mD9cdkd9uAXaEQ9nc.roa (raw, json)
Hash identifier: TdjvxSHIQlGI5jEihoAgAnuUPOa97a37rXd/NOUy4iQ=
Subject key identifier: 2A:D1:AB:33:1B:54:CB:69:83:F5:C7:64:77:DB:80:5D:A1:10:F6:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19CA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KtGrMxtUy2mD9cdkd9uAXaEQ9nc.roa
Signing time: Tue 10 Jun 2025 11:09:42 +0000
ROA not before: Tue 10 Jun 2025 11:09:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6602 (0x19ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 11:09:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2AD1AB331B54CB6983F5C76477DB805DA110F677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:d3:92:75:dc:a9:32:e6:a5:bf:b9:66:dc:
77:74:fe:02:f7:73:f2:e2:6a:03:52:e8:42:07:9a:
64:85:58:a4:c2:22:15:64:fa:14:c6:16:da:e5:d6:
04:e0:c6:a0:41:84:19:84:da:10:10:ef:b7:dd:e8:
d5:3e:df:6e:f1:6b:60:60:8b:7c:eb:78:84:20:fc:
95:f7:5b:b7:d8:ad:e9:d7:88:3c:2b:3d:a4:eb:3c:
b0:a8:03:b9:6e:a3:84:a3:9e:b7:6f:3b:db:3a:a7:
71:45:a3:ec:8e:fc:c1:06:bf:4d:e4:a1:bc:f8:c3:
7a:c4:dc:aa:7a:0d:35:3c:96:8b:e1:7c:1b:ec:bf:
a9:f2:02:4b:63:1d:2d:81:21:f7:9f:b4:3a:25:07:
26:e0:d1:1a:a8:88:1a:47:1a:51:9c:2d:76:a6:7e:
c3:35:80:d4:4d:b3:cc:d1:16:08:51:06:df:0f:5a:
b6:98:fc:68:f2:32:eb:ca:65:fd:e8:09:14:f0:a4:
e0:32:f8:04:ed:db:f5:26:2c:4e:93:b2:08:0c:b4:
ed:28:e5:a5:ad:b5:f9:51:04:81:f7:e2:da:37:66:
ef:8c:ac:0a:84:e1:6c:92:bb:75:37:00:e3:d1:b2:
c5:4f:0a:0b:1b:7d:5c:d4:b9:dd:bc:96:9a:02:27:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:AB:33:1B:54:CB:69:83:F5:C7:64:77:DB:80:5D:A1:10:F6:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KtGrMxtUy2mD9cdkd9uAXaEQ9nc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:8b:9d:0e:93:1e:4f:02:db:b8:c2:4a:57:ab:94:e5:c3:97:
a5:d9:c3:67:75:fd:82:20:6e:ca:d3:ed:e1:ae:af:49:ee:bb:
a6:d2:9e:22:12:76:15:d6:45:0b:b8:4f:95:41:77:7c:19:9f:
00:5d:69:be:2d:40:bc:5d:82:d9:c8:94:49:db:02:ba:5b:06:
68:d1:81:d2:b2:82:a7:bd:9c:f0:97:fe:08:55:2d:dc:8a:22:
82:42:66:8c:16:a5:4b:75:d0:30:3e:34:a5:75:0c:07:a0:82:
a8:95:31:99:f4:72:ed:5c:d6:df:36:f7:e7:1d:93:90:de:7d:
03:82:87:4c:27:ed:bb:1c:9e:ec:7b:3c:24:ec:e9:29:b7:66:
29:c1:8a:56:10:7d:13:44:a7:29:9c:15:91:4c:4b:26:0a:6d:
e6:1f:bb:8c:8b:d7:7c:0a:7a:97:a6:75:3f:f8:98:41:0e:bb:
a1:fe:ba:c9:69:97:1d:ed:4d:f8:e3:87:af:9b:91:3c:de:5a:
e6:33:a9:1f:9c:94:cd:1e:8e:67:ac:27:4a:75:d6:57:e4:11:
b0:71:f4:58:8b:51:ac:08:fd:8a:89:4e:48:68:e5:91:ad:b7:
e6:da:ae:d1:81:4e:ae:16:7e:08:7d:a2:fd:80:81:88:0a:db:
22:c2:c5:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx
MTA5NDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJBRDFBQjMzMUI1NENC
Njk4M0Y1Qzc2NDc3REI4MDVEQTExMEY2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2kNOSddypMualv7lm3Hd0/gL3c/LiagNS6EIHmmSFWKTCIhVk
+hTGFtrl1gTgxqBBhBmE2hAQ77fd6NU+327xa2Bgi3zreIQg/JX3W7fYrenXiDwr
PaTrPLCoA7luo4SjnrdvO9s6p3FFo+yO/MEGv03kobz4w3rE3Kp6DTU8lovhfBvs
v6nyAktjHS2BIfeftDolBybg0RqoiBpHGlGcLXamfsM1gNRNs8zRFghRBt8PWraY
/GjyMuvKZf3oCRTwpOAy+ATt2/UmLE6TsggMtO0o5aWttflRBIH34to3Zu+MrAqE
4WySu3U3AOPRssVPCgsbfVzUud28lpoCJyYhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKtGrMxtUy2mD9cdkd9uAXaEQ9ncwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9LdEdyTXh0VXkybUQ5Y2Rr
ZDl1QVhhRVE5bmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAISLnQ6THk8C27jCSlerlOXDl6XZw2d1/YIg
bsrT7eGur0nuu6bSniISdhXWRQu4T5VBd3wZnwBdab4tQLxdgtnIlEnbArpbBmjR
gdKygqe9nPCX/ghVLdyKIoJCZowWpUt10DA+NKV1DAeggqiVMZn0cu1c1t829+cd
k5DefQOCh0wn7bscnux7PCTs6Sm3ZinBilYQfRNEpymcFZFMSyYKbeYfu4yL13wK
epemdT/4mEEOu6H+uslplx3tTfjjh6+bkTzeWuYzqR+clM0ejmesJ0p11lfkEbBx
9FiLUawI/YqJTkho5ZGtt+bartGBTq4Wfgh9ov2AgYgK2yLCxZ8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:19 2025 by rpki-client