Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bR5UQAvEP9gwYOe-R5EGvKA_7mc.roa
File: bR5UQAvEP9gwYOe-R5EGvKA_7mc.roa (raw, json)
Hash identifier: wpUbh3ui8bcKu8ld3OWWJb+sTKLneFkZJcoBfrXNwRw=
Subject key identifier: 6D:1E:54:40:0B:C4:3F:D8:30:60:E7:BE:47:91:06:BC:A0:3F:EE:67
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14FA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bR5UQAvEP9gwYOe-R5EGvKA_7mc.roa
Signing time: Wed 04 Jun 2025 01:09:17 +0000
ROA not before: Wed 04 Jun 2025 01:09:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5370 (0x14fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 01:09:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6D1E54400BC43FD83060E7BE479106BCA03FEE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:4b:cf:2d:fd:4c:18:36:14:e3:d0:96:77:
7b:0a:4e:3c:cd:b8:2e:1d:b5:e3:c6:23:c3:54:5d:
91:fa:9f:a1:c7:53:85:75:9c:22:05:b5:d6:97:10:
82:b3:9b:40:8c:d6:9e:66:95:49:a3:5e:c9:47:65:
cd:d5:af:16:ed:f9:3f:e8:63:ae:17:d4:89:d2:ee:
2a:63:7e:d2:24:29:92:84:ff:aa:31:c1:73:86:0a:
ca:4c:0b:57:50:6d:39:ef:68:81:0f:2c:e5:38:36:
f6:36:10:49:10:89:45:94:9d:c2:23:98:cb:ae:d3:
2d:81:ee:a4:5e:34:84:fe:6c:b9:24:ad:1a:4b:eb:
d3:49:89:4e:4b:92:d1:6a:c0:dc:d6:90:66:5f:e1:
2a:c3:1a:3c:36:94:f1:17:c1:15:51:bc:5c:e4:88:
38:d5:08:a0:c0:40:dc:bb:93:5c:c0:07:e2:20:f7:
08:73:06:13:14:45:4c:42:2a:b0:ef:45:bd:e6:12:
5f:72:f6:ae:ea:6b:de:15:48:d6:62:46:ca:77:02:
aa:38:7a:d9:33:c0:d3:4c:04:e3:9e:b6:20:54:3e:
67:96:93:19:b8:d2:d4:98:40:a4:57:90:aa:27:6c:
d2:2d:b3:50:c4:c1:95:f6:16:4a:ff:4c:5d:6c:c0:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:54:40:0B:C4:3F:D8:30:60:E7:BE:47:91:06:BC:A0:3F:EE:67
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bR5UQAvEP9gwYOe-R5EGvKA_7mc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:72:81:43:38:ab:f0:72:be:f3:2d:25:ca:2a:b2:e8:cc:b2:
72:16:e0:48:16:79:33:f4:8e:fb:de:79:78:08:06:3b:24:33:
4f:75:4a:60:5c:32:87:fc:59:51:7f:eb:36:e4:04:11:80:f7:
fd:c3:a1:5b:a6:25:a7:c3:da:cb:c5:ba:05:e8:c1:63:22:d1:
d7:77:ff:8a:47:59:22:5a:35:42:4e:c4:35:4e:ac:4b:55:e0:
47:a4:35:28:12:f2:1d:29:d1:eb:90:7b:6f:81:57:bf:7b:62:
6d:3a:66:bc:e1:25:55:be:78:37:6a:fc:8a:9f:31:65:60:ec:
31:58:c9:10:2f:94:7f:d9:95:94:66:00:ee:ed:9c:40:92:9c:
17:1d:8a:b7:e9:2e:09:23:cf:1a:72:82:e5:30:9a:8d:ad:ad:
cf:cc:ae:13:ba:c0:d6:24:67:0c:ec:c2:4c:ec:ed:49:fb:f8:
fa:9a:60:77:2b:af:77:56:1d:95:30:cd:85:6c:6b:d0:e7:55:
74:7d:6d:c2:85:79:ba:b5:75:ab:c9:6c:f1:0d:da:ea:eb:c5:
6d:74:20:5e:61:96:23:cb:66:7b:d8:1e:41:9b:b3:dc:a9:cd:
af:0d:e5:63:d8:30:37:4c:33:f0:5d:28:81:b6:48:58:8c:c8:
a2:4f:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:29 2025 by rpki-client