Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ToBupL_L-OZcQ6yjG4wGXj0lG1Y.roa
File: ToBupL_L-OZcQ6yjG4wGXj0lG1Y.roa (raw, json)
Hash identifier: Xd0u0iyekATW+bGLTyXUHbuYIFCx+9AWASPvrsKEh3w=
Subject key identifier: 4E:80:6E:A4:BF:CB:F8:E6:5C:43:AC:A3:1B:8C:06:5E:3D:25:1B:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 148A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ToBupL_L-OZcQ6yjG4wGXj0lG1Y.roa
Signing time: Tue 03 Jun 2025 11:09:59 +0000
ROA not before: Tue 03 Jun 2025 11:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5258 (0x148a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 11:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4E806EA4BFCBF8E65C43ACA31B8C065E3D251B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:aa:e1:1b:9b:d1:90:3b:f3:aa:e1:6b:06:
96:23:67:2f:29:8f:1c:98:94:df:81:dd:36:ce:15:
8f:ca:a3:1c:b3:48:e3:20:b9:45:10:66:db:4f:90:
30:93:c9:3b:a8:8b:32:22:7f:6c:65:1a:0c:7f:1a:
e8:46:e5:d4:01:15:f4:4d:3d:12:ca:63:6f:1e:dc:
35:c3:6d:c1:6a:8b:99:e5:3f:de:f8:40:22:e9:91:
75:f5:f8:b2:33:48:a4:b7:e6:b3:ed:1f:52:63:28:
e5:50:7f:fe:d0:95:10:75:7e:07:20:1a:6a:9b:b4:
7f:e3:76:7b:78:c2:bb:e2:65:dd:93:7f:f5:70:ef:
91:32:3d:2e:da:53:7b:79:39:15:30:8e:97:fd:8a:
0c:ba:99:1a:56:ef:bf:72:98:0e:2f:76:07:16:69:
db:0e:7d:b0:92:39:5d:73:66:1b:28:e2:7d:94:37:
9c:37:a8:70:c1:48:cf:6e:3a:35:cd:85:5f:7f:46:
ca:e0:5c:e3:14:28:84:7c:35:93:52:45:16:6e:51:
71:fa:93:b8:15:26:2d:80:d0:9b:70:b5:a4:08:6a:
e9:a1:f5:e2:ef:fb:99:bf:f4:fa:c8:82:9a:fc:1e:
fa:f9:00:3f:a9:8e:34:13:85:dc:15:d4:1c:2c:49:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:6E:A4:BF:CB:F8:E6:5C:43:AC:A3:1B:8C:06:5E:3D:25:1B:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ToBupL_L-OZcQ6yjG4wGXj0lG1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:f0:10:fe:aa:fb:fb:f3:df:d9:46:00:6d:22:8d:96:c2:fc:
0e:0b:1b:52:fb:2b:e1:00:25:5e:32:d6:46:66:76:ef:c2:f2:
33:f3:2d:28:b7:1d:56:b9:be:04:7c:c5:a5:c4:d4:11:7e:ee:
1b:57:7b:97:5a:21:ab:18:0f:7d:29:58:6d:dc:73:5e:80:84:
10:8b:ed:67:68:78:ac:6e:9e:55:cf:77:c4:48:61:27:96:af:
7a:24:77:1c:12:c7:b9:41:c5:b6:05:f7:a3:5c:69:47:73:2e:
da:9d:90:aa:ac:71:8f:f9:cf:f6:20:01:28:55:28:93:52:58:
76:0e:b6:2f:47:d3:90:d3:52:05:7e:ab:c2:0c:19:79:af:e3:
da:b5:ac:0d:94:09:3f:2e:4f:22:26:70:b1:3f:45:f4:25:d1:
3d:e9:97:42:72:7f:d7:52:be:f4:ab:bd:46:3b:66:02:88:c1:
05:6a:71:c0:9a:6a:3f:90:ae:82:67:72:cc:4a:2d:8f:4b:23:
0a:6b:f0:70:d9:97:ef:88:de:1c:6c:0a:7a:29:cf:a3:9e:58:
d9:ea:43:4b:7c:bf:83:29:01:72:9d:29:48:6d:89:de:79:c4:
59:be:b8:9b:ab:f4:1a:d6:93:55:80:0d:24:85:96:96:9c:00:
50:8b:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:27 2025 by rpki-client