Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/R8zAka0-eisS3vCjNESo1VyieRw.roa
File: R8zAka0-eisS3vCjNESo1VyieRw.roa (raw, json)
Hash identifier: kZF7omcmhBsStqze1f4fFfYnXNIMUjQCGaIlQjAPZLo=
Subject key identifier: 47:CC:C0:91:AD:3E:7A:2B:12:DE:F0:A3:34:44:A8:D5:5C:A2:79:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R8zAka0-eisS3vCjNESo1VyieRw.roa
Signing time: Mon 09 Jun 2025 03:39:45 +0000
ROA not before: Mon 09 Jun 2025 03:39:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6350 (0x18ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 03:39:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=47CCC091AD3E7A2B12DEF0A33444A8D55CA2791C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:1e:f5:9a:f8:7b:13:34:98:1b:24:72:df:
2d:b9:f0:b2:cd:93:63:c4:62:de:25:42:f9:81:8f:
aa:ab:b8:f4:ea:2a:1d:55:91:e6:c3:fb:de:c6:5b:
a5:b6:a1:c4:13:22:b6:c9:c7:e8:e1:50:03:09:ed:
d7:62:b7:48:7b:ed:f4:3d:db:7e:61:f6:e6:4e:07:
06:a0:81:0a:86:3c:fc:06:a7:30:f0:24:5d:d8:ca:
2d:16:af:88:eb:df:dc:f0:80:50:22:14:f0:a5:1a:
0f:ed:99:72:a3:f6:b8:63:15:96:30:34:99:32:ed:
4e:a0:1e:fa:61:2a:98:7b:25:33:a2:95:31:d1:5c:
80:d6:61:0e:a0:05:b0:5f:cb:8b:55:83:eb:f4:4f:
a2:7d:b6:8e:83:ac:9e:86:5f:5e:c2:8b:20:0d:56:
01:fa:be:23:15:12:90:0e:d0:22:81:8a:d8:12:3a:
78:c6:f8:34:bd:8b:55:95:89:e5:ae:df:bf:c0:f4:
26:ae:0a:57:fe:78:cd:83:70:29:98:ec:d7:83:19:
e3:41:63:b9:12:b3:f4:59:25:53:ff:69:6b:18:e6:
76:f7:ac:2c:34:26:eb:6e:16:a7:4f:46:fc:06:72:
e0:16:8d:18:04:3a:16:d0:d1:a6:3f:99:e6:af:8d:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CC:C0:91:AD:3E:7A:2B:12:DE:F0:A3:34:44:A8:D5:5C:A2:79:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R8zAka0-eisS3vCjNESo1VyieRw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:9c:56:84:6a:6e:1d:7c:73:93:14:ca:30:2d:e4:14:0b:62:
e0:f3:fb:f5:96:e7:fa:3f:e9:6e:09:28:59:ce:e5:34:18:88:
d5:60:a2:27:b0:bd:71:06:6f:68:d6:14:9a:4c:8c:aa:97:c8:
a5:e3:da:ea:91:b4:a2:4e:1f:21:09:50:fa:24:ec:f3:88:6a:
1b:5b:ea:c5:9c:83:58:40:79:1d:83:2e:e1:76:82:27:17:a4:
05:07:b5:b4:28:4c:e2:19:22:58:bb:68:59:88:13:0a:52:64:
8a:2b:4d:60:f2:a2:32:86:95:ec:27:69:f4:46:ed:f6:65:fa:
ab:61:92:8c:40:79:7f:d0:0e:39:90:b7:82:c2:1a:56:ba:d6:
58:4f:9f:b6:a6:22:66:ce:94:c9:30:bf:f5:62:8e:47:09:ab:
ed:74:9b:c7:9a:95:ef:bc:b2:db:43:d3:8d:c8:45:b5:e8:7f:
7d:30:42:07:75:4d:33:e2:c9:0c:74:3f:44:31:0d:a3:03:46:
c3:0a:76:17:6c:4b:d7:fa:0a:fb:ca:b8:10:ea:52:88:6d:9e:
af:4d:7a:54:7f:0b:22:5a:5e:ad:dd:12:6c:0e:a9:54:ae:a5:
8b:fc:d0:9a:d2:61:2e:d4:82:b9:2a:68:d9:0e:f6:15:e4:2f:
9b:8d:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:42:51 2025 by rpki-client