Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LetdlLzLPLqBJ3ToVsz0mT4Wa1c.roa
File: LetdlLzLPLqBJ3ToVsz0mT4Wa1c.roa (raw, json)
Hash identifier: pyuVrZcoFVIfP2YMo+AXiZnaoBCf24v1f3F4/UO8Gyw=
Subject key identifier: 2D:EB:5D:94:BC:CB:3C:BA:81:27:74:E8:56:CC:F4:99:3E:16:6B:57
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 194E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LetdlLzLPLqBJ3ToVsz0mT4Wa1c.roa
Signing time: Mon 09 Jun 2025 19:39:41 +0000
ROA not before: Mon 09 Jun 2025 19:39:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6478 (0x194e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 19:39:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2DEB5D94BCCB3CBA812774E856CCF4993E166B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:d7:03:3c:19:e4:e1:f5:3d:fc:70:c8:ef:
ac:90:56:6e:ab:ad:24:70:4c:b9:07:90:b7:8a:b5:
b9:95:47:46:8b:86:fa:58:5c:1e:b4:b5:ba:f1:bf:
a7:b1:37:c0:08:f7:72:78:03:5c:79:44:ab:6a:8c:
25:cb:88:09:e3:be:e0:d8:7a:49:5d:c4:3d:6a:bd:
42:1a:e9:9d:fc:5f:c3:89:65:66:2d:aa:ee:42:38:
45:21:6d:80:2d:05:d7:21:48:07:16:e7:88:d3:ea:
a7:d9:f9:5e:85:a8:e7:a5:64:00:86:de:55:5e:05:
5a:e6:8f:60:19:89:08:1b:ff:cb:6c:e0:97:5c:03:
cc:4c:19:9d:f7:d9:4f:6d:e7:a5:0a:89:6a:db:0b:
66:3f:a7:4f:17:6d:c4:8e:92:29:51:f6:03:fb:79:
c2:a5:d4:68:52:08:76:39:00:f7:83:7e:d4:67:64:
45:41:2a:d0:c3:85:86:5e:20:1d:bd:ae:ea:ec:c5:
86:b9:fa:b9:2c:72:a6:e8:f8:23:b0:52:47:19:09:
6b:bb:17:1c:83:2a:47:58:f0:4a:3b:c9:da:66:f8:
4e:ed:f7:68:e6:9a:40:58:d1:8f:b9:5a:23:90:46:
54:e1:a3:1d:4a:a4:39:e0:60:64:d8:e4:b1:0e:51:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:5D:94:BC:CB:3C:BA:81:27:74:E8:56:CC:F4:99:3E:16:6B:57
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LetdlLzLPLqBJ3ToVsz0mT4Wa1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:a1:1e:bb:73:8a:72:fe:02:c4:99:ca:5e:d7:b5:e6:a9:fd:
6f:54:76:59:bd:64:40:fc:d5:50:c7:76:22:ca:4b:78:b4:83:
50:2a:44:45:a6:a7:85:98:11:46:b6:63:1e:c3:29:fd:0b:05:
2d:0a:10:cf:79:12:21:eb:82:c2:2c:59:71:f3:30:78:66:3e:
fa:e1:42:31:42:0f:eb:5f:88:bd:91:dc:3e:61:cc:f2:42:d6:
ed:04:7c:10:6b:4e:d8:e7:e6:36:ad:ce:04:41:f2:44:36:ca:
bc:28:49:6a:8f:13:78:53:9c:d6:d6:c5:0c:04:23:b2:e3:22:
ed:0a:21:a6:e9:1e:68:ce:34:07:8a:b4:63:15:50:0e:ae:4f:
cb:5b:5e:50:d3:4a:dd:32:52:86:5d:22:24:b7:b4:a6:c7:d1:
8d:ac:d0:ab:96:04:d2:c4:95:43:12:67:b0:fc:40:4b:82:91:
a8:eb:ab:c6:c2:ea:35:7b:01:5a:6e:92:99:be:45:1a:e9:68:
71:9a:0e:b7:49:57:71:62:15:46:31:eb:91:a0:7d:d3:84:1f:
1e:ed:24:3b:32:d3:aa:05:d1:63:49:c0:5b:1c:1e:ba:cf:08:
c4:c9:2f:ea:a9:03:9b:30:81:17:d4:37:fd:16:79:a0:c0:85:
30:ea:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:19 2025 by rpki-client