Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XKV2Xb7e9r7FXkedKBZJEcJaYTc.roa
File: XKV2Xb7e9r7FXkedKBZJEcJaYTc.roa (raw, json)
Hash identifier: m2HN2QKnGJ/coABVlLWzSOxt/9gBCtx+B6NIHUKWu48=
Subject key identifier: 5C:A5:76:5D:BE:DE:F6:BE:C5:5E:47:9D:28:16:49:11:C2:5A:61:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13F2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XKV2Xb7e9r7FXkedKBZJEcJaYTc.roa
Signing time: Mon 02 Jun 2025 16:09:13 +0000
ROA not before: Mon 02 Jun 2025 16:09:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5106 (0x13f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 16:09:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5CA5765DBEDEF6BEC55E479D28164911C25A6137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:93:59:bc:da:52:8f:61:84:ae:57:d6:4c:
5c:f9:06:de:e6:30:86:95:0c:38:0c:ac:58:06:6e:
58:5a:45:6d:86:71:ee:44:37:d9:98:40:a3:1c:65:
a2:ea:27:3c:63:be:07:c2:b8:49:ec:ca:2c:39:7a:
1c:5a:c3:e1:37:50:44:28:b8:a5:2c:f0:9e:53:a6:
d4:7e:b4:15:2b:6e:f0:ac:da:48:25:cd:ca:53:80:
ef:be:ce:2d:bd:e4:5a:0d:3a:cd:79:9f:03:6b:7b:
6e:0f:8d:a9:3c:34:67:1a:d8:e4:85:97:1c:e1:c1:
8e:02:fc:83:52:32:3a:81:4e:54:27:cf:a5:38:6e:
29:ec:1a:a0:6c:22:4d:e4:71:f9:c6:a3:61:37:e1:
e3:56:83:ac:b8:9b:87:48:ef:b7:fc:85:93:dc:ab:
00:98:cb:7f:15:9f:68:00:32:b0:1a:bf:27:0e:f2:
f9:18:3c:e9:e4:87:9d:76:77:1b:6e:3e:a3:91:34:
89:b8:97:db:30:5c:06:5f:c5:44:31:05:d2:26:81:
26:33:08:03:b0:62:11:7c:a8:75:c8:6d:8a:73:74:
7c:3a:c6:2b:e2:a4:b0:1e:07:ed:8a:68:0d:85:5d:
19:ab:01:46:57:d7:f8:0d:47:b8:0b:20:56:18:2c:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:76:5D:BE:DE:F6:BE:C5:5E:47:9D:28:16:49:11:C2:5A:61:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XKV2Xb7e9r7FXkedKBZJEcJaYTc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:32:19:a5:94:c7:71:cf:3d:16:43:9c:f7:3a:1c:8d:08:35:
ba:df:76:b4:33:79:19:94:da:21:19:06:34:36:d5:3f:01:81:
25:4e:f3:f8:75:1d:89:c8:32:69:c4:1b:2e:d3:7e:db:c4:8d:
d0:3e:34:54:07:bd:55:44:b6:10:ed:1b:e0:59:c0:9d:1f:9d:
39:a7:4f:7f:8c:0a:67:c3:0c:38:1b:e7:c4:73:4b:46:da:a4:
3f:65:bb:b4:5d:bc:0d:13:b2:c5:c2:1a:ff:d7:ae:8f:f0:24:
bc:0d:a7:0a:52:ca:b0:a1:d1:46:a7:50:fd:41:a4:49:3d:13:
fe:8c:dd:01:33:bc:0d:d6:80:b3:ea:bb:c2:e6:d2:17:5d:b4:
35:c7:7c:bf:3b:87:bb:25:f9:5e:12:17:b3:a2:f6:83:c1:c4:
16:0b:30:6f:c6:3c:f0:f8:2b:d9:5f:59:af:e9:21:fe:4e:e4:
14:34:19:12:47:ba:13:7c:d8:01:47:8a:5d:26:4d:e8:c0:e8:
0c:c1:5d:04:96:58:b5:1e:17:a7:23:6c:52:dd:ef:fc:09:c7:
c9:32:6c:a5:59:06:c3:1c:c2:5b:9c:49:db:bf:a2:2d:ec:6b:
2a:aa:c4:06:db:f8:ff:ec:af:56:77:43:5e:3b:ff:3d:d4:2d:
60:70:98:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDIx
NjA5MTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDVDQTU3NjVEQkVERUY2
QkVDNTVFNDc5RDI4MTY0OTExQzI1QTYxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDebJNZvNpSj2GErlfWTFz5Bt7mMIaVDDgMrFgGblhaRW2Gce5E
N9mYQKMcZaLqJzxjvgfCuEnsyiw5ehxaw+E3UEQouKUs8J5TptR+tBUrbvCs2kgl
zcpTgO++zi295FoNOs15nwNre24Pjak8NGca2OSFlxzhwY4C/INSMjqBTlQnz6U4
binsGqBsIk3kcfnGo2E34eNWg6y4m4dI77f8hZPcqwCYy38Vn2gAMrAavycO8vkY
POnkh512dxtuPqORNIm4l9swXAZfxUQxBdImgSYzCAOwYhF8qHXIbYpzdHw6xivi
pLAeB+2KaA2FXRmrAUZX1/gNR7gLIFYYLAzBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXKV2Xb7e9r7FXkedKBZJEcJaYTcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9YS1YyWGI3ZTlyN0ZYa2Vk
S0JaSkVjSmFZVGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIgyGaWUx3HPPRZDnPc6HI0INbrfdrQzeRmU
2iEZBjQ21T8BgSVO8/h1HYnIMmnEGy7TftvEjdA+NFQHvVVEthDtG+BZwJ0fnTmn
T3+MCmfDDDgb58RzS0bapD9lu7RdvA0TssXCGv/Xro/wJLwNpwpSyrCh0UanUP1B
pEk9E/6M3QEzvA3WgLPqu8Lm0hddtDXHfL87h7sl+V4SF7Oi9oPBxBYLMG/GPPD4
K9lfWa/pIf5O5BQ0GRJHuhN82AFHil0mTejA6AzBXQSWWLUeF6cjbFLd7/wJx8ky
bKVZBsMcwlucSdu/oi3sayqqxAbb+P/sr1Z3Q147/z3ULWBwmIM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:12 2025 by rpki-client