Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dVq-aDeTGf3e8RyqNx8WuBQYHFM.roa
File: dVq-aDeTGf3e8RyqNx8WuBQYHFM.roa (raw, json)
Hash identifier: dQjMiQPFKKOY/kVuHCm4tMigDKjdSaQmOQVfNF9e9h0=
Subject key identifier: 75:5A:BE:68:37:93:19:FD:DE:F1:1C:AA:37:1F:16:B8:14:18:1C:53
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 015A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dVq-aDeTGf3e8RyqNx8WuBQYHFM.roa
Signing time: Thu 08 May 2025 21:07:44 +0000
ROA not before: Thu 08 May 2025 21:07:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 21:07:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=755ABE68379319FDDEF11CAA371F16B814181C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:86:bd:a0:cf:80:fa:0b:4e:3b:d2:26:72:
96:cb:64:aa:dc:e5:6f:f5:71:3c:52:bd:a9:6d:5c:
a9:c9:51:ec:ea:21:8f:32:46:35:57:c7:50:ef:26:
b2:ba:87:ec:e5:c0:f2:2a:05:ff:c2:89:33:af:27:
44:3b:30:f3:d7:41:44:aa:ee:eb:25:12:a0:58:ac:
68:44:70:4f:ea:a7:ac:d0:bb:2e:28:e2:30:44:9f:
6f:85:08:12:da:1f:94:14:6b:fe:77:a8:c6:a7:d5:
90:10:c3:e9:5c:b2:8c:3b:fd:37:a2:91:65:e8:48:
c5:4b:f5:f0:c1:47:69:96:de:ad:13:4d:3f:f9:e0:
21:8f:b9:63:a3:56:37:f6:67:6d:1a:3f:53:a3:d0:
2b:bc:15:12:d2:40:97:03:40:94:6c:82:6f:fc:50:
cf:e2:78:d2:04:d3:84:3a:58:1d:2a:18:55:a6:f4:
bd:1b:6e:56:d0:c5:db:68:70:0e:c4:ac:e7:fd:f7:
79:5e:ee:45:c0:f1:a9:f5:8c:83:9e:26:f0:99:d5:
a2:d2:4a:37:be:af:b2:40:70:f5:69:97:bc:fe:99:
b1:bd:28:92:7e:6f:16:67:1e:0e:fc:0f:4b:13:fb:
a6:00:c3:14:5a:17:47:13:22:3f:e8:a7:50:50:46:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:BE:68:37:93:19:FD:DE:F1:1C:AA:37:1F:16:B8:14:18:1C:53
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dVq-aDeTGf3e8RyqNx8WuBQYHFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:8c:4a:84:a8:2b:c6:94:c2:09:9b:ba:45:42:13:95:7e:d8:
72:15:37:b6:53:ac:eb:4c:9a:47:60:c1:d6:df:01:25:65:40:
24:20:eb:26:76:6a:3a:eb:d1:2d:47:dc:3b:b3:e4:a0:81:7a:
17:6d:62:d8:59:72:d3:dc:1b:be:d1:b4:77:78:2d:56:00:16:
eb:68:5c:74:29:0f:66:84:e4:04:a7:67:3a:f3:ee:80:5a:c0:
e8:59:c1:21:a7:d8:d9:a1:a1:4e:6c:b9:4c:07:0c:78:99:1e:
f0:5a:09:80:05:78:ff:b5:48:65:ce:fa:60:a8:0e:c4:da:5d:
3a:40:f4:59:92:54:9a:30:72:97:05:b6:33:95:0c:0b:a6:a6:
ec:54:3a:d9:5d:b0:6a:6b:a9:44:53:7f:d9:fa:e7:16:c0:2b:
55:50:bc:6a:66:c1:60:f0:74:1a:db:c7:a0:a4:16:83:2e:6c:
76:5e:3c:c6:e7:ff:39:1c:38:f8:07:f1:f1:12:3a:6a:9c:ea:
81:a3:c6:63:5f:4d:cf:9a:5c:42:08:19:32:4f:8d:3d:0f:fb:
d9:4f:e9:63:24:e9:8a:5d:a9:9b:70:1f:72:ef:f9:3f:06:66:
25:78:9b:46:94:e4:e0:e3:a6:d7:3e:18:d9:35:82:ea:0c:17:
e6:16:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:14:50 2025 by rpki-client