Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hb2vdhOEgQjvZTFVBZvWDzRnKYs.roa
File: hb2vdhOEgQjvZTFVBZvWDzRnKYs.roa (raw, json)
Hash identifier: zOuYJ98plVp17vRdaXoYQiqcMDvMkrCcddWeH+MbQ2E=
Subject key identifier: 85:BD:AF:76:13:84:81:08:EF:65:31:55:05:9B:D6:0F:34:67:29:8B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 180E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hb2vdhOEgQjvZTFVBZvWDzRnKYs.roa
Signing time: Sun 08 Jun 2025 03:39:38 +0000
ROA not before: Sun 08 Jun 2025 03:39:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6158 (0x180e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 03:39:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=85BDAF7613848108EF653155059BD60F3467298B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:59:dc:d2:e7:14:97:15:90:97:19:15:4a:
02:d8:bb:f7:56:e2:4a:94:cb:08:a6:b1:90:bb:7a:
67:53:32:d8:51:7b:89:75:d0:0c:4f:88:f6:2f:7e:
ae:53:c9:50:04:30:09:32:44:1f:42:b6:7f:1b:11:
fc:79:0c:3a:f8:27:b8:62:f4:bd:0b:0b:57:c7:64:
9a:08:ce:18:76:dd:cb:3c:00:a7:87:d3:3e:f4:a5:
07:45:af:b9:bb:ed:41:37:d4:1d:67:c1:83:0c:44:
bc:84:a2:b6:fe:00:7b:c9:43:26:9d:7b:de:b9:98:
69:ea:31:05:8f:e1:7c:4a:6a:7e:64:7e:0c:33:04:
18:9b:54:cb:0b:c0:e5:20:84:e5:c1:14:34:dc:ea:
e7:7f:24:85:ed:40:1d:29:db:a2:9d:94:cc:4c:3a:
8c:26:27:9d:82:9d:dc:85:9d:1d:41:68:f7:cb:2d:
ee:c9:ec:7b:82:4d:3e:96:96:80:0b:6a:f4:ac:bf:
a5:c7:86:d1:14:02:95:bc:bf:99:a0:df:fc:2d:39:
b0:fb:59:76:6f:1d:fa:f6:99:75:4d:a5:d3:3f:1f:
59:8e:15:b0:7d:34:5e:a9:af:80:70:c2:27:46:d6:
45:4a:18:f1:b7:3f:a3:a2:53:d4:ca:02:77:7a:23:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:AF:76:13:84:81:08:EF:65:31:55:05:9B:D6:0F:34:67:29:8B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hb2vdhOEgQjvZTFVBZvWDzRnKYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:f6:85:dd:bd:87:0a:6a:83:58:48:e8:85:65:bd:e3:b2:c7:
e2:b3:27:24:37:7b:5b:5b:7f:50:06:9b:75:88:15:0f:6f:1c:
0d:1b:e3:f7:5a:9a:db:62:e2:89:4d:04:5b:a7:ab:76:3e:14:
d4:4c:fc:21:0b:ba:21:74:3b:74:9c:da:67:98:52:6c:7e:66:
a0:4b:19:e5:6a:d7:e9:9f:e8:b5:a4:7d:c4:e2:29:06:cb:01:
30:37:4e:de:5f:dd:6b:cf:1b:4a:54:2a:3f:48:52:53:0b:34:
5f:9d:94:98:e6:20:83:8f:07:66:26:77:6d:83:68:3b:08:13:
43:a2:7c:09:3e:da:c8:71:bf:78:54:aa:8a:ea:36:14:81:0a:
bc:b9:63:1c:a4:ce:16:1d:36:bd:12:4a:1a:e3:be:46:ac:0e:
04:33:22:6c:8f:b2:ea:26:7f:36:d1:48:74:9d:79:9b:ea:5d:
f6:e0:f3:e9:0d:ce:e0:6d:9d:43:25:3e:e9:21:1f:f1:19:bb:
e4:da:c7:2f:4a:a4:94:58:74:b9:c9:45:c3:39:32:c4:c8:77:
39:74:cb:ee:60:c8:6a:07:23:66:7e:07:10:e4:08:66:bf:d8:
fb:e9:ad:55:0d:2a:a2:19:b5:bc:d7:5f:27:e1:29:d3:c5:0a:
8c:93:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:03:43 2025 by rpki-client