Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cqiXvy5be2mjCtB36NpSotG61U8.roa
File: cqiXvy5be2mjCtB36NpSotG61U8.roa (raw, json)
Hash identifier: uCXHdBarzELjvQTawMozL9AoJaG1eru2yVZnxkas4NY=
Subject key identifier: 72:A8:97:BF:2E:5B:7B:69:A3:0A:D0:77:E8:DA:52:A2:D1:BA:D5:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B32
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cqiXvy5be2mjCtB36NpSotG61U8.roa
Signing time: Thu 12 Jun 2025 08:09:55 +0000
ROA not before: Thu 12 Jun 2025 08:09:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6962 (0x1b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 08:09:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=72A897BF2E5B7B69A30AD077E8DA52A2D1BAD54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:31:bd:02:13:1c:f8:23:be:fb:3a:ce:6f:
74:fe:3e:be:91:53:c5:95:57:02:68:9f:35:c8:43:
f8:e0:80:4f:98:15:a0:31:10:3e:23:34:6a:6e:36:
45:d8:09:29:94:40:5d:27:41:8c:21:db:b2:9d:39:
22:cc:0f:83:6b:b3:cf:f9:1a:3a:69:41:b5:22:2a:
f8:71:44:aa:af:a9:36:99:3c:9a:e5:64:22:10:95:
40:52:06:92:c7:6a:ad:57:57:30:d3:7a:d9:b9:66:
28:34:8e:3b:12:6e:48:4e:a7:98:0a:f9:18:5d:18:
6f:d2:85:4f:f5:5a:0c:13:17:aa:13:08:57:d8:1d:
b0:da:39:a7:1d:f4:46:2f:9d:1d:25:13:35:0b:f8:
ef:da:ff:18:90:0f:5a:13:b0:21:86:de:46:cf:82:
c8:ba:b7:c1:fc:fb:58:fa:ad:36:ae:b2:fe:74:12:
0f:d0:9f:c6:5c:70:e8:37:7c:03:d0:0d:fe:fc:9c:
6a:a9:db:59:75:2f:ab:3b:df:ba:23:f1:d0:1d:f6:
55:77:f6:13:80:82:53:9d:db:dd:a2:f7:4d:2d:ba:
a1:fc:33:c8:83:d3:16:3b:10:8a:7c:2e:25:be:79:
b3:99:95:5a:23:48:78:b1:f7:39:8e:7f:c1:01:d5:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:97:BF:2E:5B:7B:69:A3:0A:D0:77:E8:DA:52:A2:D1:BA:D5:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cqiXvy5be2mjCtB36NpSotG61U8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:06:0d:95:72:0a:ad:0f:70:e9:f1:de:6f:50:b3:4b:b3:2e:
43:68:24:e4:ce:71:95:6a:70:33:43:15:c6:50:05:a1:14:ac:
c3:94:ea:62:bd:57:86:53:13:f3:31:85:86:e4:27:50:39:e0:
1a:7f:2e:5e:3b:52:01:81:79:cb:32:a0:c4:5b:96:61:23:f4:
0e:51:8c:56:cc:3d:5f:c6:7d:2a:77:62:84:22:25:da:ce:6b:
eb:a1:6d:8b:07:53:d8:fc:e1:60:d2:5f:49:39:78:3c:e9:51:
e1:51:e4:67:1e:63:67:bf:e7:21:ce:8c:69:92:dc:cd:b4:40:
4b:53:ff:56:96:5e:89:a1:d3:37:78:d2:96:a4:3b:c6:3f:06:
ca:3b:6b:f8:a2:9b:76:0a:71:49:4d:43:d9:c8:92:74:6a:e2:
ad:e2:b5:41:29:d4:21:53:21:3e:b4:3e:c5:ae:c3:72:3e:77:
83:c5:ee:30:c0:19:76:88:fe:16:f1:42:be:51:39:81:c1:91:
b7:fa:1d:cd:3d:66:1b:3c:60:4c:6f:02:e2:14:75:09:17:46:
4c:b4:b5:0e:15:f5:4a:e5:b6:41:2e:04:71:be:1b:b8:cc:0c:
c8:05:91:22:84:ef:ca:db:c1:85:8f:12:bb:94:80:53:4c:eb:
f7:82:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:08:27 2025 by rpki-client