Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VDO9_vE6iyJgniHv7UbGS1jDTss.roa
File: VDO9_vE6iyJgniHv7UbGS1jDTss.roa (raw, json)
Hash identifier: 0uVMvqhGenmiruhTUNIgghqWmwxBF4azXrS1ggQ5hxo=
Subject key identifier: 54:33:BD:FE:F1:3A:8B:22:60:9E:21:EF:ED:46:C6:4B:58:C3:4E:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A9E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VDO9_vE6iyJgniHv7UbGS1jDTss.roa
Signing time: Wed 11 Jun 2025 13:39:57 +0000
ROA not before: Wed 11 Jun 2025 13:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 13:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5433BDFEF13A8B22609E21EFED46C64B58C34ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:67:8e:2d:57:3b:24:e5:01:48:39:55:55:
07:cc:00:3d:69:c3:c2:a6:f2:bc:6a:f6:a6:7a:98:
e1:89:38:7a:23:f5:9f:39:1b:b5:00:ba:f5:3a:9b:
a0:4f:42:1c:c7:50:67:a4:e3:22:0e:0e:b8:68:f9:
66:f9:c4:3c:99:eb:be:45:95:71:75:8a:23:c1:de:
5a:1a:c8:c4:ae:04:31:49:f9:e0:e1:cc:1a:64:42:
df:42:0f:b1:2b:e3:89:cf:f9:67:60:1f:46:73:a2:
4c:7e:d0:2d:35:b6:fd:a2:a8:59:36:27:04:d7:0e:
09:27:16:40:8a:82:50:97:14:f2:df:fa:6f:bf:1d:
e3:f2:21:29:d1:6e:62:c9:49:8c:94:ae:67:f1:71:
4c:75:ec:d3:58:4e:ee:72:ce:ad:03:69:b9:1f:74:
b0:a6:47:40:50:6f:f0:ed:9a:d2:84:23:10:ca:b0:
b1:44:04:19:91:f6:ec:72:74:51:3a:96:38:24:35:
19:da:43:10:40:d4:14:4e:3e:b8:ac:88:21:f6:f9:
a2:2f:7e:5b:fc:bf:3c:0a:b1:f3:7d:92:75:21:b1:
0e:4d:5b:c8:7e:63:78:e7:ad:c5:35:51:98:29:bb:
55:10:d4:8d:4a:56:17:07:27:c0:91:89:ef:b9:b6:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:BD:FE:F1:3A:8B:22:60:9E:21:EF:ED:46:C6:4B:58:C3:4E:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VDO9_vE6iyJgniHv7UbGS1jDTss.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:22:04:56:16:3e:3c:cd:bb:ba:9f:0b:f1:4b:59:d9:a8:64:
1b:7d:a2:b1:c8:8b:94:8d:9f:1a:98:9c:6e:77:08:6b:c5:1e:
29:12:f2:e6:05:5b:6c:3e:4d:e0:cd:77:34:75:dc:1c:4b:1c:
93:97:b6:40:20:55:02:51:44:9c:0d:72:8a:c4:a2:43:57:84:
b6:7a:15:bf:2a:21:32:da:e2:53:6f:84:ad:1f:4b:12:5e:29:
83:a3:5f:8e:8f:fe:73:a0:54:86:38:2a:ed:be:79:00:ff:06:
97:f7:6a:3b:9d:16:20:73:db:7a:12:3f:c5:20:e8:f1:50:fd:
21:cf:5b:04:19:5b:8d:96:00:8c:53:29:2e:ff:1b:f7:53:b2:
d0:79:ea:ca:98:96:03:4b:1b:3a:ec:ca:c0:37:ae:1e:62:73:
91:ab:88:ae:20:c2:76:c1:0a:6a:c0:0c:3c:87:b5:eb:32:f1:
8f:a8:28:48:5d:94:3c:3a:d0:ca:6b:95:d0:5c:0f:d4:3d:e9:
cd:81:b7:8d:78:dd:71:dc:62:04:c4:86:2d:df:7e:ec:d6:3d:
07:a0:8a:d1:87:ee:d0:6f:2f:0f:19:41:61:59:9c:e2:35:cf:
32:a0:46:0d:8f:f8:97:1a:15:39:7b:49:a0:87:6e:b3:21:8b:
79:f2:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:05:29 2025 by rpki-client