Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Sd2SLTa4cX06Q0O-mKSsQhpdox8.roa
File: Sd2SLTa4cX06Q0O-mKSsQhpdox8.roa (raw, json)
Hash identifier: yd4nh2+bkLT4j5kKVCkovcBzI2fBbZg6pGhss9OtUFg=
Subject key identifier: 49:DD:92:2D:36:B8:71:7D:3A:43:43:BE:98:A4:AC:42:1A:5D:A3:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 134A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sd2SLTa4cX06Q0O-mKSsQhpdox8.roa
Signing time: Sun 01 Jun 2025 19:09:58 +0000
ROA not before: Sun 01 Jun 2025 19:09:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4938 (0x134a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 19:09:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49DD922D36B8717D3A4343BE98A4AC421A5DA31F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:7d:89:5c:03:bc:2d:07:8b:80:5a:de:db:
b9:f7:4e:0d:da:78:c6:7f:f6:2b:55:be:63:51:8b:
17:49:81:1a:c0:03:9f:8a:84:10:1b:35:0d:ef:7e:
77:7b:ea:56:7a:4d:35:a5:fb:67:bc:96:41:e2:9a:
db:4a:61:66:d4:6f:cc:95:68:6c:fe:86:d1:4d:53:
54:b6:4f:cf:2c:cd:80:47:f0:ca:b8:af:4f:17:a2:
98:e2:b3:41:08:9a:8c:81:40:0f:24:6c:e7:2b:80:
e4:51:cb:d5:a6:61:ab:fb:1b:bd:32:31:18:91:d9:
b9:99:97:51:b2:26:6f:61:59:e1:97:b0:ad:35:eb:
1d:03:d5:5d:0d:97:d5:b9:25:b7:9c:f8:79:16:e0:
11:c4:05:6d:8a:5c:cd:aa:1b:90:12:70:6f:b9:5c:
00:e8:3a:0e:cc:f5:96:71:4d:b2:59:e4:b1:1d:24:
dc:8f:ae:fa:d1:31:72:bb:a7:14:b8:2c:f1:eb:5f:
9f:19:7d:87:de:9f:e3:2d:c2:b6:53:80:6f:c3:24:
7d:47:5b:64:b8:55:fb:f1:3a:18:d0:4a:91:fb:65:
31:ce:aa:6c:a2:d4:85:64:71:0e:83:08:69:23:55:
7f:82:69:eb:ea:0e:e0:d2:b1:93:68:4b:52:24:cd:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:92:2D:36:B8:71:7D:3A:43:43:BE:98:A4:AC:42:1A:5D:A3:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sd2SLTa4cX06Q0O-mKSsQhpdox8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:75:ed:25:bf:69:53:ee:b9:9a:c2:f3:4f:e8:88:62:14:4e:
f6:ba:c4:d5:c3:48:54:4d:48:2e:65:2c:ee:6c:df:30:38:3a:
81:e9:a9:03:cc:74:1a:61:3a:ce:86:a3:90:0e:51:70:37:bf:
14:29:29:6d:e9:0c:98:0a:17:a7:86:8f:1d:a5:ef:98:12:a7:
c0:a6:db:7c:d9:3c:0b:eb:ab:84:e5:2a:a5:d6:46:8c:1d:9e:
36:e9:95:17:44:f5:ae:64:88:de:a2:12:d9:66:d1:04:94:fb:
78:09:2d:92:b9:c2:50:de:49:01:3a:a2:86:3b:d0:67:06:fb:
c3:dd:4b:5a:eb:c8:45:83:2f:44:01:ba:2d:c5:b2:14:4a:4c:
7d:de:56:ea:8e:07:b3:d3:d5:3f:b8:ed:15:ff:d0:cb:f7:e7:
c6:e5:51:8c:b7:67:25:8c:4f:72:da:8d:65:e8:c3:c1:13:75:
58:c7:80:63:80:ef:a5:86:1b:fc:8e:00:73:22:06:91:a4:32:
a9:1d:8a:31:01:b3:ad:94:2b:56:10:b8:9b:fb:19:96:76:09:
21:6d:25:95:df:76:07:24:8d:c6:c5:0c:f0:3e:c6:6d:e7:68:
68:0b:9d:03:36:09:08:09:dc:1e:1a:60:73:b7:de:c5:0d:94:
d8:81:02:5e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDEx
OTA5NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ5REQ5MjJEMzZCODcx
N0QzQTQzNDNCRTk4QTRBQzQyMUE1REEzMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwXH2JXAO8LQeLgFre27n3Tg3aeMZ/9itVvmNRixdJgRrAA5+K
hBAbNQ3vfnd76lZ6TTWl+2e8lkHimttKYWbUb8yVaGz+htFNU1S2T88szYBH8Mq4
r08Xopjis0EImoyBQA8kbOcrgORRy9WmYav7G70yMRiR2bmZl1GyJm9hWeGXsK01
6x0D1V0Nl9W5Jbec+HkW4BHEBW2KXM2qG5AScG+5XADoOg7M9ZZxTbJZ5LEdJNyP
rvrRMXK7pxS4LPHrX58ZfYfen+MtwrZTgG/DJH1HW2S4VfvxOhjQSpH7ZTHOqmyi
1IVkcQ6DCGkjVX+CaevqDuDSsZNoS1IkzQ+LAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSd2SLTa4cX06Q0O+mKSsQhpdox8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TZDJTTFRhNGNYMDZRME8t
bUtTc1FocGRveDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIx17SW/aVPuuZrC80/oiGIUTva6xNXDSFRN
SC5lLO5s3zA4OoHpqQPMdBphOs6Go5AOUXA3vxQpKW3pDJgKF6eGjx2l75gSp8Cm
23zZPAvrq4TlKqXWRowdnjbplRdE9a5kiN6iEtlm0QSU+3gJLZK5wlDeSQE6ooY7
0GcG+8PdS1rryEWDL0QBui3FshRKTH3eVuqOB7PT1T+47RX/0Mv358blUYy3ZyWM
T3LajWXow8ETdVjHgGOA76WGG/yOAHMiBpGkMqkdijEBs62UK1YQuJv7GZZ2CSFt
JZXfdgckjcbFDPA+xm3naGgLnQM2CQgJ3B4aYHO33sUNlNiBAl4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:04:06 2025 by rpki-client