Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UtK7Xt1VghQuciDd0Kd8uQwxpv0.roa
File: UtK7Xt1VghQuciDd0Kd8uQwxpv0.roa (raw, json)
Hash identifier: 26E+mm2/l7pwyENMphJ1dzw7ZjAPB9nMdkRXZ8Mwxvg=
Subject key identifier: 52:D2:BB:5E:DD:55:82:14:2E:72:20:DD:D0:A7:7C:B9:0C:31:A6:FD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0A16
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UtK7Xt1VghQuciDd0Kd8uQwxpv0.roa
Signing time: Tue 20 May 2025 12:38:24 +0000
ROA not before: Tue 20 May 2025 12:38:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 12:38:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=52D2BB5EDD5582142E7220DDD0A77CB90C31A6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:ee:01:0f:e5:f7:0a:22:34:4d:bc:b7:fe:
b4:ed:9b:66:a9:b1:cb:be:e1:84:54:00:03:34:ef:
a0:ad:4a:58:92:82:82:0d:4d:3f:7c:e1:a8:fa:31:
a7:7d:d0:28:37:a6:4d:7d:86:8e:16:ec:d2:14:21:
16:7f:45:7a:da:18:90:80:d0:81:60:14:82:4e:a7:
c9:0c:9f:22:35:97:5f:8f:63:75:a5:75:8f:81:29:
4b:42:da:30:60:8a:ad:5a:67:71:82:c7:4f:b9:14:
76:87:ac:f6:23:59:7e:56:ad:13:66:7d:6e:11:db:
62:8e:47:ce:c7:79:46:9a:30:88:bc:13:24:7b:d2:
15:4f:b6:62:84:0a:7a:a6:ef:4c:e4:ca:37:11:8e:
14:a8:3c:47:f4:34:59:d1:db:86:a4:98:2a:8f:07:
61:d0:2e:8b:6f:75:3a:4c:e1:31:38:53:d1:19:1b:
b5:7d:93:ce:e6:d3:c5:f7:b8:41:c2:be:0e:3c:5a:
5e:a4:24:45:0f:bf:bc:a6:ce:80:0e:76:b3:ed:c4:
c3:3d:5e:40:2f:4e:bc:50:b3:e7:65:d9:a8:b2:f1:
65:24:9f:d1:fc:fa:01:1b:0a:5e:2c:cb:f4:1e:82:
df:79:6a:76:d4:ae:39:11:65:3f:e4:2f:7a:6f:5b:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:BB:5E:DD:55:82:14:2E:72:20:DD:D0:A7:7C:B9:0C:31:A6:FD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UtK7Xt1VghQuciDd0Kd8uQwxpv0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:70:16:0d:1d:53:5d:3e:c1:31:28:5c:72:99:2e:f5:2b:e7:
f3:59:52:ab:93:90:3b:08:f3:2c:cd:4e:ff:0f:ee:e6:bc:47:
a1:58:af:0c:72:67:96:f5:e1:3a:17:6f:97:4f:f6:2e:62:10:
5e:aa:5a:67:4a:d0:c7:94:ad:06:33:b0:4e:cf:16:d2:9b:e9:
ed:73:f1:65:01:f1:4d:de:b2:67:75:5e:2f:60:aa:0b:d0:6a:
d9:9e:31:62:1f:c8:d9:fe:97:9e:b8:db:74:58:38:c9:37:73:
4b:6e:65:5a:a2:9c:58:f6:11:bf:dc:ba:a0:2f:4e:6e:f9:61:
15:5b:ff:78:66:a9:6e:c5:81:31:da:00:b0:38:4c:e4:40:b6:
e6:e3:d9:d5:34:8c:f2:47:0f:e0:b4:e4:35:98:0f:02:a9:ef:
5e:d0:ee:9e:38:3c:7d:50:71:b7:06:1d:39:b3:5d:af:c6:23:
8c:f0:a9:6c:c7:5c:ed:32:0a:f3:52:32:7c:c7:52:14:87:50:
76:de:1e:57:11:df:be:43:a6:5c:33:8a:b6:ac:c8:45:66:fa:
ff:da:91:1f:f4:5e:99:4d:c6:b3:88:20:76:90:b1:0e:4d:65:
f0:e8:11:09:c9:51:e0:85:65:5d:04:82:55:7c:73:87:11:de:
4c:cf:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:37:20 2025 by rpki-client