Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PENWrQ_iy1eYEyx02s47UI9lfpI.roa
File: PENWrQ_iy1eYEyx02s47UI9lfpI.roa (raw, json)
Hash identifier: ZD0cG58QfA9eIDWjVYj3TgIjpulIPqSyhso+RjKg05I=
Subject key identifier: 3C:43:56:AD:0F:E2:CB:57:98:13:2C:74:DA:CE:3B:50:8F:65:7E:92
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08B6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PENWrQ_iy1eYEyx02s47UI9lfpI.roa
Signing time: Sun 18 May 2025 16:38:18 +0000
ROA not before: Sun 18 May 2025 16:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 16:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3C4356AD0FE2CB5798132C74DACE3B508F657E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:d9:65:91:4a:08:b8:67:71:c4:40:a4:45:
03:cb:c3:6e:92:67:fb:5b:2a:bd:b8:35:04:56:36:
6b:2a:dc:c4:e6:b2:66:6f:e9:e5:0c:f7:ee:92:17:
2f:cb:47:8a:45:c5:76:8e:90:64:4a:18:5b:48:3b:
eb:88:47:65:37:49:62:cb:a8:8f:e1:a2:d4:6c:c2:
01:81:30:6e:6e:34:49:f9:5b:3d:b4:0c:76:76:68:
de:34:ba:20:75:df:cb:87:fa:ac:4b:2b:fa:ce:f5:
ed:42:7b:10:44:f5:7c:1f:6c:23:53:f4:70:ee:1a:
27:e8:ed:c7:3e:4b:57:3c:17:63:27:99:49:98:bf:
b0:79:ed:e0:64:bb:ff:98:e0:bf:33:97:4f:ae:9e:
13:68:cd:53:e2:21:7e:74:c3:1f:00:b6:de:7a:2c:
0d:e4:d2:45:c7:7b:88:74:e7:35:55:ca:62:f7:8e:
fc:e9:36:7f:72:0f:ce:85:4c:30:50:f1:d3:82:09:
51:5e:1c:15:27:17:bb:e6:15:a2:a1:36:e3:b5:89:
a6:65:d6:3f:cd:bb:2a:56:e5:2e:f0:65:26:18:7c:
61:38:25:98:3f:10:20:74:6e:32:b9:cb:07:e2:46:
22:34:f2:8a:92:1a:4d:8e:c2:94:4b:7a:3d:5c:18:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:56:AD:0F:E2:CB:57:98:13:2C:74:DA:CE:3B:50:8F:65:7E:92
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PENWrQ_iy1eYEyx02s47UI9lfpI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:a5:6a:83:34:23:11:32:9a:30:eb:e2:7f:76:f0:59:7a:96:
74:cb:4f:d2:6e:f0:9a:69:f2:33:09:2c:c6:6a:00:d1:6d:fa:
82:03:ef:9d:17:3c:c0:28:52:66:06:9e:10:ee:d4:fa:99:be:
85:72:ca:3d:f1:92:ec:6d:53:41:87:56:cf:8e:6e:7c:c0:d7:
f0:61:27:18:da:ea:80:f0:3b:e1:aa:40:b7:cf:aa:e2:a3:ef:
d2:5e:24:6c:09:99:13:5d:c3:19:8c:96:00:a3:ea:9e:d9:20:
0e:0e:5e:cd:cc:94:e9:37:81:4b:cb:76:ac:39:94:c8:65:1c:
9d:99:b1:3f:ea:93:45:38:81:4b:7f:03:82:fd:e7:7b:79:be:
c7:cc:7a:c9:c9:92:d8:1b:2a:11:2f:9d:d4:94:26:3e:56:2d:
aa:c3:d2:b6:89:aa:e4:28:49:8f:ba:45:45:2a:ec:7b:cb:c6:
03:a9:1a:64:89:03:f2:af:32:19:86:75:13:b5:45:7f:33:90:
96:c3:15:be:cd:8e:1a:e9:d6:c3:56:57:36:16:3a:fe:47:85:
7a:05:04:d7:fe:e0:84:91:e8:7c:39:f1:dc:b5:15:f2:69:2d:
3e:74:44:99:a6:d8:a2:90:7b:62:f6:ff:fe:d5:5b:82:2e:2e:
bb:fd:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:45:54 2025 by rpki-client