Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gUGbOU83mrA3N73v9G4wcGIOJ_Y.roa
File: gUGbOU83mrA3N73v9G4wcGIOJ_Y.roa (raw, json)
Hash identifier: fq8EzSGyfNetTAPKJe76NFQcKpNUt1Fp20zryOEDQR4=
Subject key identifier: 81:41:9B:39:4F:37:9A:B0:37:37:BD:EF:F4:6E:30:70:62:0E:27:F6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A22
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gUGbOU83mrA3N73v9G4wcGIOJ_Y.roa
Signing time: Tue 10 Jun 2025 22:09:46 +0000
ROA not before: Tue 10 Jun 2025 22:09:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6690 (0x1a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 22:09:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=81419B394F379AB03737BDEFF46E3070620E27F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:6c:f7:0e:0d:5b:81:4c:0a:fa:5b:bb:02:
a7:33:1f:17:fa:92:a3:da:f0:6d:1b:67:26:46:4b:
b0:92:ca:63:47:0e:8a:e1:bd:0e:94:bf:f8:ab:71:
d9:6e:05:a4:09:e7:f0:34:3d:a3:82:29:2c:1c:70:
de:3d:82:cd:e4:25:c8:ff:ce:42:00:24:fe:5f:82:
32:8c:ee:7e:7f:9e:d8:9e:85:02:15:af:9b:be:30:
75:1a:86:4b:43:ab:10:c6:60:e0:64:cd:0b:01:ac:
cc:83:f0:82:77:7f:37:eb:82:98:cf:a8:88:0e:40:
77:54:91:ed:73:f4:d4:a1:6d:6b:18:92:0b:f3:fc:
f0:96:b7:24:3d:5a:c5:61:a8:71:61:b7:3f:f2:6c:
86:db:f7:aa:94:38:dd:35:0e:22:12:54:f0:ed:bc:
a1:86:50:72:66:91:47:48:32:01:7d:ef:f3:da:de:
54:4e:5f:7f:15:a1:46:54:e9:8d:8e:c4:5f:58:a9:
c2:b7:4a:12:32:c0:97:30:4e:5c:18:aa:3c:bb:d7:
43:1e:c9:da:fa:38:2b:96:e7:3d:6a:04:28:84:59:
6b:b6:f3:df:a8:09:3f:ac:5d:02:0f:20:d5:52:61:
76:84:79:ea:9e:27:a1:4f:48:3a:3f:cf:33:bc:11:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:9B:39:4F:37:9A:B0:37:37:BD:EF:F4:6E:30:70:62:0E:27:F6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gUGbOU83mrA3N73v9G4wcGIOJ_Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:a6:37:d5:15:a7:53:94:df:2a:c5:f0:a5:61:da:3a:74:5e:
ed:a4:27:e7:6b:0c:97:b5:3c:03:8f:4e:9e:b5:e7:51:25:30:
10:35:38:c2:08:a8:f9:46:74:f0:4a:8c:3f:b0:91:20:f4:42:
60:1f:86:88:60:02:ba:b9:76:19:c0:fb:ae:bf:65:a2:24:a1:
b1:11:73:1e:6a:4f:b1:15:fa:e7:40:95:53:f9:2f:9b:9b:74:
7f:bc:cf:32:bc:25:a9:3e:7b:09:6f:a1:69:93:93:b3:70:0d:
b0:fb:4d:fe:9b:a1:3b:da:a8:07:14:6d:79:0c:79:11:a0:71:
32:8b:bd:91:27:c8:ae:7e:d0:83:1c:09:ba:33:38:bf:d6:68:
f1:65:2a:e9:8f:83:ce:89:29:65:5d:36:5b:f3:65:59:03:2b:
ce:ef:f7:39:dc:17:04:d3:78:55:82:dd:eb:00:9e:42:b2:56:
f3:2f:e5:4f:9b:58:50:24:e6:9d:88:60:15:11:89:94:57:5e:
4e:43:43:19:de:48:3f:04:02:24:b9:74:03:8a:75:ed:1f:89:
88:42:1d:4b:10:94:f2:21:15:f3:0d:4b:25:c6:f9:f6:4a:d7:
f3:d7:af:26:6d:16:96:a8:89:cb:e9:8b:2d:ba:e4:d6:cf:50:
3c:83:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:43 2025 by rpki-client