Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OR1vkdiji064xOvjDBuhT6Pk-04.roa
File: OR1vkdiji064xOvjDBuhT6Pk-04.roa (raw, json)
Hash identifier: tAs3VbMYJu+2re3Pr/vkHGSCnV8rkSzjIzM7qTr//cQ=
Subject key identifier: 39:1D:6F:91:D8:A3:8B:4E:B8:C4:EB:E3:0C:1B:A1:4F:A3:E4:FB:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0512
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OR1vkdiji064xOvjDBuhT6Pk-04.roa
Signing time: Tue 13 May 2025 20:08:49 +0000
ROA not before: Tue 13 May 2025 20:08:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 20:08:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=391D6F91D8A38B4EB8C4EBE30C1BA14FA3E4FB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:79:b9:c1:18:d4:3a:c9:1e:f3:2b:44:3e:
59:32:aa:22:bb:91:60:57:55:80:58:7b:58:26:f9:
e3:be:d2:aa:e1:5a:51:16:4d:fe:9b:05:d9:72:e9:
b2:e7:f8:b6:60:96:49:68:8c:1a:74:67:bb:50:1f:
53:1c:7b:05:0c:a1:a3:ad:35:98:f1:b5:17:6a:e4:
19:e5:27:3d:fc:b5:18:92:bf:9b:8e:d8:6c:6e:2a:
c1:23:4b:4a:ce:99:3d:9b:b8:63:c0:04:57:e2:72:
17:4f:05:eb:fc:c7:21:45:20:b1:9c:e4:32:de:3e:
8e:e4:4d:32:63:15:cf:50:83:66:49:a0:61:1b:a2:
bf:ea:3f:c7:d0:79:c1:dc:9e:3e:3f:72:0d:dd:9c:
40:da:8e:c0:a5:5c:0b:b4:53:78:5f:ce:a1:fd:d4:
5a:c0:33:20:20:2a:a2:30:0f:a8:3b:dc:a0:07:2d:
42:1c:77:74:4d:22:73:cb:54:bb:0e:fb:ef:d4:fd:
ff:be:50:a3:ab:48:98:9b:f0:44:59:29:c3:85:12:
41:00:31:e1:44:95:d6:37:cf:4e:62:10:01:bb:f1:
f7:31:7a:4d:d0:ae:f5:db:4a:6e:6e:27:da:0b:bc:
67:2e:1c:76:e7:e6:4b:8b:d7:6f:f8:f0:14:93:f2:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:6F:91:D8:A3:8B:4E:B8:C4:EB:E3:0C:1B:A1:4F:A3:E4:FB:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OR1vkdiji064xOvjDBuhT6Pk-04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:6c:68:d0:ac:38:ed:98:04:fa:50:e7:b9:32:93:81:20:8c:
d1:10:33:fe:18:81:d4:bb:3e:d3:49:f6:3d:df:eb:af:d9:3f:
f2:54:64:ac:19:3a:60:91:b9:fe:e0:05:52:8c:93:65:bd:72:
21:01:62:36:51:7e:4f:7d:10:7b:95:85:17:15:a6:ca:fd:8a:
78:33:df:9d:70:7d:91:e9:84:b7:e7:b7:be:86:a4:c9:84:a2:
95:51:90:8c:b5:89:4a:2f:a8:1b:05:c4:e6:e7:a3:d2:45:de:
d3:89:a7:07:4e:b8:6a:d9:98:e9:ca:0a:95:21:53:75:c1:c8:
5a:dc:42:cc:84:bf:c8:56:dd:d2:ca:65:b4:a5:b6:55:ac:ff:
ff:73:63:fb:81:bb:50:54:08:c7:e9:9f:5d:d3:9b:ab:04:26:
15:25:4b:67:28:24:29:9e:9e:ef:e4:e9:43:46:d1:ed:64:4b:
37:3e:62:88:1c:93:3e:bb:49:9e:98:5a:98:b7:fb:d1:f5:79:
16:73:10:e8:ba:b9:bb:ec:fc:2c:d1:7d:0b:f2:68:4a:11:96:
2e:7e:c2:5a:f3:59:00:4b:fc:eb:ee:0f:63:dd:57:eb:40:69:
64:1a:84:0e:61:0f:75:5e:36:a2:2e:17:e6:c3:53:ce:c7:26:
6c:f7:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:26 2025 by rpki-client