Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/M2GF7zSxFgVQKPsoq_CDWSdmLuY.roa
File: M2GF7zSxFgVQKPsoq_CDWSdmLuY.roa (raw, json)
Hash identifier: Jeqz9TfVDqJY2G3/6lgyr3KDNvRJESI2ZbPBY3pjzuI=
Subject key identifier: 33:61:85:EF:34:B1:16:05:50:28:FB:28:AB:F0:83:59:27:66:2E:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1442
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M2GF7zSxFgVQKPsoq_CDWSdmLuY.roa
Signing time: Tue 03 Jun 2025 02:09:14 +0000
ROA not before: Tue 03 Jun 2025 02:09:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5186 (0x1442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 02:09:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=336185EF34B116055028FB28ABF0835927662EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:bd:b9:a4:35:ab:be:56:d1:b7:37:cb:7d:
37:e5:9d:48:7e:a8:b6:c3:15:a9:be:64:85:d6:50:
b4:3f:3d:05:e7:56:6b:fc:10:84:54:e0:4d:e8:ad:
42:cf:7d:e0:f8:49:73:31:6c:e2:93:b6:1c:dd:c4:
73:a6:f8:5a:70:0f:cc:5f:4a:af:ff:4a:b5:bd:71:
69:cb:f7:d3:65:36:40:90:ac:60:28:c8:2d:03:fe:
79:ec:d2:09:c0:5a:66:38:56:cd:cb:c6:6d:c7:00:
ac:c7:38:3e:34:d2:1c:92:fe:d2:a2:53:17:c9:38:
06:21:91:08:dd:1d:1d:ef:00:3e:0c:7e:51:59:16:
cd:48:7d:65:3e:fc:90:a6:64:69:30:69:c0:b9:e5:
9c:c5:a5:ae:4a:23:f2:b9:48:58:ce:1a:be:a8:c1:
6f:29:2d:c8:6b:c0:7a:f1:09:93:41:6a:3d:f7:bd:
6d:83:ca:ad:0a:4a:3f:7f:86:55:b4:85:75:b4:5f:
a3:bf:9d:e0:da:ae:6a:79:e2:35:c4:df:d2:43:60:
5d:d2:a4:ad:3a:5e:72:f4:8e:a8:78:c7:64:c2:53:
c4:f5:db:8a:93:91:fb:59:31:42:a6:19:0d:62:7a:
5a:46:ab:2d:d3:98:ef:4d:a9:2c:fe:b9:6a:e8:ab:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:85:EF:34:B1:16:05:50:28:FB:28:AB:F0:83:59:27:66:2E:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M2GF7zSxFgVQKPsoq_CDWSdmLuY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:23:67:c5:cc:fc:ea:f8:42:63:0c:43:e4:de:b8:ba:6d:27:
ac:3d:50:29:0e:75:5e:bf:92:17:dc:f7:86:12:3c:42:99:6c:
f0:7e:13:69:34:7c:80:70:e5:a7:cc:bc:30:8b:f2:7f:87:a9:
6d:47:55:7d:d5:76:62:af:d0:3c:1a:98:23:6f:c5:3a:ef:89:
5f:31:86:38:8b:df:70:4d:39:17:39:07:af:6c:41:8d:5f:ca:
42:3d:12:a0:0b:c8:2a:dc:e3:f3:ca:ff:ad:e8:c9:75:07:2d:
e5:0d:9a:d3:9f:b3:9e:d6:c1:96:11:6b:3e:91:57:c7:d1:ae:
cd:39:b1:b9:e4:cc:9a:9b:79:eb:d7:48:f2:b3:55:ff:b2:85:
83:58:7d:d4:f9:c3:7b:9d:51:df:0d:65:b9:d5:24:8c:d7:ee:
1b:00:b3:29:03:c0:9d:9e:c2:52:67:e7:5e:48:33:b8:a5:f0:
16:06:06:00:94:e9:be:07:98:40:d8:71:10:dd:c3:6c:eb:01:
48:64:82:8a:9c:ab:38:2d:f0:e7:96:90:e6:95:8d:25:fa:e9:
c3:35:71:4f:c7:e1:d6:c6:84:f7:5f:bb:82:34:8d:a1:ab:85:
5f:48:bf:6e:c6:08:33:33:8b:e9:4d:08:e4:3d:a7:f1:1e:34:
56:e4:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:10 2025 by rpki-client