Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Saeh_IT2Je098Fo61GbUGlvFXHY.roa
File: Saeh_IT2Je098Fo61GbUGlvFXHY.roa (raw, json)
Hash identifier: ld9gAIw37B5xoLU5M22dayn2/lcv7JURh0hJ+jmk8UQ=
Subject key identifier: 49:A7:A1:FC:84:F6:25:ED:3D:F0:5A:3A:D4:66:D4:1A:5B:C5:5C:76
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0102
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Saeh_IT2Je098Fo61GbUGlvFXHY.roa
Signing time: Thu 08 May 2025 10:08:06 +0000
ROA not before: Thu 08 May 2025 10:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 10:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49A7A1FC84F625ED3DF05A3AD466D41A5BC55C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:1e:9b:df:29:dd:a4:66:fd:d7:9e:74:97:
4f:d9:83:3f:38:a7:8f:f2:de:f2:e5:ac:c2:f5:12:
d1:e3:22:5e:aa:4c:2d:63:51:88:26:19:11:7c:ff:
c6:7d:bd:a1:d6:a5:a2:be:e4:42:ca:dc:0e:8f:f9:
84:78:92:91:dd:33:bd:54:84:26:28:77:8c:28:dd:
9c:0b:0c:72:82:9b:6e:a1:9c:b9:4b:3a:31:03:ce:
05:a9:61:c8:11:e8:5f:b2:0a:32:3b:9c:d8:a9:ef:
e8:88:e7:cd:6c:47:1a:e1:1a:ff:b2:1e:55:5f:43:
fb:07:de:2e:1c:41:64:dd:cd:7d:e9:67:f5:9f:61:
a3:bb:e5:e0:26:b8:e4:5b:32:d5:3f:57:13:03:a9:
c6:3b:e0:29:c0:cf:92:4c:de:52:85:a1:6a:65:15:
ef:f3:ef:3a:7d:b0:f8:65:d5:b5:3f:7c:b8:ac:a2:
4c:22:95:30:77:70:f5:ac:c3:07:ce:54:aa:e7:12:
90:39:fb:4a:f4:4d:c2:a7:de:3c:c0:94:0a:b1:c2:
35:e2:8a:75:c6:02:0f:d9:c6:9a:b9:a1:b5:04:5a:
10:f1:6d:ce:74:76:2e:ca:70:61:e0:fc:92:e5:50:
06:6d:ee:6b:f7:5d:8f:42:b0:a4:b8:88:fc:8d:f2:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A7:A1:FC:84:F6:25:ED:3D:F0:5A:3A:D4:66:D4:1A:5B:C5:5C:76
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Saeh_IT2Je098Fo61GbUGlvFXHY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:86:2e:d6:16:99:e8:6b:bc:3e:0b:d2:f5:ae:fc:74:db:14:
3e:77:79:63:74:48:26:94:5b:71:76:d9:ba:7d:6f:97:60:54:
45:6c:2e:b7:c6:7d:b7:20:e1:38:16:0f:42:c6:cf:80:25:07:
34:dc:eb:dd:dc:b3:79:25:a1:d9:a9:41:d8:eb:f6:03:dc:d5:
75:4a:63:04:20:d4:95:3e:60:e7:c9:07:a0:1d:c7:ea:7b:ae:
bf:e6:a5:e0:59:71:e7:69:5b:ec:cc:28:a6:65:7b:71:c9:0d:
2a:4b:19:03:e1:37:1e:24:05:ee:65:94:32:8e:8e:ab:7f:c6:
c8:1e:62:2d:aa:8b:71:ca:ac:40:52:36:b5:a4:b3:71:a4:73:
c3:ce:6b:2a:62:2b:76:f6:98:6d:83:17:f3:32:31:ec:d3:b7:
29:7f:f9:85:db:c8:cc:80:23:4b:f5:91:ef:77:de:e5:ec:46:
16:a9:32:72:e2:10:e4:27:a4:6b:3f:ad:e6:3f:be:b2:38:c7:
8b:4f:7a:48:0f:cf:91:93:e3:55:39:b4:7a:0c:ab:95:9b:40:
34:4d:21:1d:f4:ce:1b:dd:49:ef:a9:52:b4:2d:20:43:f0:f9:
16:72:04:55:82:ce:1a:c3:46:a5:8d:bc:54:86:2f:05:13:65:
f0:8b:3e:2f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx
MDA4MDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ5QTdBMUZDODRGNjI1
RUQzREYwNUEzQUQ0NjZENDFBNUJDNTVDNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhBh6b3yndpGb91550l0/Zgz84p4/y3vLlrML1EtHjIl6qTC1j
UYgmGRF8/8Z9vaHWpaK+5ELK3A6P+YR4kpHdM71UhCYod4wo3ZwLDHKCm26hnLlL
OjEDzgWpYcgR6F+yCjI7nNip7+iI581sRxrhGv+yHlVfQ/sH3i4cQWTdzX3pZ/Wf
YaO75eAmuORbMtU/VxMDqcY74CnAz5JM3lKFoWplFe/z7zp9sPhl1bU/fLisokwi
lTB3cPWswwfOVKrnEpA5+0r0TcKn3jzAlAqxwjXiinXGAg/Zxpq5obUEWhDxbc50
di7KcGHg/JLlUAZt7mv3XY9CsKS4iPyN8sLTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSaeh/IT2Je098Fo61GbUGlvFXHYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TYWVoX0lUMkplMDk4Rm82
MUdiVUdsdkZYSFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAeGLtYWmehrvD4L0vWu/HTbFD53eWN0SCaU
W3F22bp9b5dgVEVsLrfGfbcg4TgWD0LGz4AlBzTc693cs3klodmpQdjr9gPc1XVK
YwQg1JU+YOfJB6Adx+p7rr/mpeBZcedpW+zMKKZle3HJDSpLGQPhNx4kBe5llDKO
jqt/xsgeYi2qi3HKrEBSNrWks3Gkc8POaypiK3b2mG2DF/MyMezTtyl/+YXbyMyA
I0v1ke933uXsRhapMnLiEOQnpGs/reY/vrI4x4tPekgPz5GT41U5tHoMq5WbQDRN
IR30zhvdSe+pUrQtIEPw+RZyBFWCzhrDRqWNvFSGLwUTZfCLPi8=
-----END CERTIFICATE-----
Generated at Fri Jun 20 19:59:33 2025 by rpki-client