Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Aa0rIdTyij3dXGiTfQ8j9aMr4.roa
File: O4Aa0rIdTyij3dXGiTfQ8j9aMr4.roa (raw, json)
Hash identifier: lUSflP0JSgZzt7k5xE2jCqmp2IKZQMwUHxx+ZSQV930=
Subject key identifier: 3B:80:1A:D2:B2:1D:4F:28:A3:DD:D5:C6:89:37:D0:F2:3F:5A:32:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01F6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Aa0rIdTyij3dXGiTfQ8j9aMr4.roa
Signing time: Fri 09 May 2025 16:37:46 +0000
ROA not before: Fri 09 May 2025 16:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 16:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3B801AD2B21D4F28A3DDD5C68937D0F23F5A32BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:63:4a:f4:fc:57:61:15:0d:e5:ab:b3:02:a7:
fc:e0:92:c2:81:27:0c:a8:3b:4b:f6:13:58:a3:6b:
91:a7:d0:d7:bd:a3:34:a0:25:22:cd:1f:ff:41:19:
a7:6c:9f:ca:39:30:b5:76:9a:56:c6:6a:ce:3d:62:
8b:b4:6e:7f:6f:9d:bb:89:38:f2:72:a9:ee:92:37:
ec:f5:14:22:0e:f9:4f:84:82:d5:61:a8:8d:fb:87:
f9:13:c2:d2:38:b8:3c:bb:e0:6e:03:ff:06:83:ba:
3a:cb:b8:d7:ea:e4:16:4b:cd:a0:1f:e9:55:fd:43:
6e:93:5b:af:e7:12:52:ca:9a:fe:05:e3:d3:37:e4:
bc:0a:37:66:67:83:a1:7d:8e:ea:22:95:1c:be:77:
ad:54:87:18:77:5f:cd:41:77:23:75:f1:92:ad:67:
3f:c7:01:c9:9d:49:eb:a9:e8:11:54:bc:95:dc:50:
42:ed:82:65:11:f0:e9:a6:8a:1d:ba:8a:dc:89:4b:
c1:98:c0:21:9b:2a:1f:8d:79:31:34:50:ca:58:1a:
cb:f9:93:bc:45:72:fb:76:a6:11:1a:9b:b1:a6:ba:
54:b8:7b:dc:7b:7b:ee:f6:66:52:83:0d:0c:fc:49:
e3:6c:ec:75:f9:3a:1a:ad:80:36:50:3a:61:ba:17:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:1A:D2:B2:1D:4F:28:A3:DD:D5:C6:89:37:D0:F2:3F:5A:32:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O4Aa0rIdTyij3dXGiTfQ8j9aMr4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:3e:4f:5d:de:93:e2:96:e5:17:1c:d9:7b:25:cd:13:c2:ae:
d0:93:c5:dc:b6:27:cb:20:68:ed:42:36:70:f8:95:cf:5a:a8:
79:d2:70:6a:83:8f:b9:01:10:5e:03:63:d4:7b:fc:d0:20:fe:
11:e4:85:01:63:38:0d:7a:e6:04:0a:0b:d4:71:45:d6:aa:ef:
94:ed:aa:8f:e7:b2:44:a5:22:95:99:8c:fd:02:e2:bb:dc:ab:
1c:5a:51:bc:fa:e3:3c:14:4b:7c:4e:88:8e:c1:b9:9f:52:7d:
a6:6f:82:da:6a:c7:af:59:4a:60:28:11:8d:5e:33:9d:12:fa:
82:2e:58:8c:c5:04:77:ae:aa:fa:46:97:ee:40:96:3a:48:2d:
69:4a:70:aa:23:e4:7c:c0:56:b7:3d:4f:76:16:c3:3d:84:6a:
79:5b:d0:aa:5f:da:00:d8:24:b5:5d:a8:1c:f0:59:b1:03:31:
3f:63:dc:01:a8:7e:65:8f:3d:d6:39:d6:25:20:52:2c:f6:1c:
c3:19:c5:ff:4c:51:a0:43:8d:e4:d1:ee:2c:3f:58:7d:12:6b:
70:bd:47:76:9c:55:1d:cf:e0:8d:31:5a:c5:85:45:5e:af:87:
d6:4d:6f:2f:93:a1:e1:5b:c4:65:34:e1:47:cb:1e:54:ac:26:
12:e9:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:44:16 2025 by rpki-client