Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/i91A8p-9V0Uo4fi566M6ta508iE.roa
File: i91A8p-9V0Uo4fi566M6ta508iE.roa (raw, json)
Hash identifier: nCjREZA20+VRpOh3zx9lViVsIx9vk1mvk7ffQZJGXvE=
Subject key identifier: 8B:DD:40:F2:9F:BD:57:45:28:E1:F8:B9:EB:A3:3A:B5:AE:74:F2:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DFE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i91A8p-9V0Uo4fi566M6ta508iE.roa
Signing time: Sun 25 May 2025 17:38:35 +0000
ROA not before: Sun 25 May 2025 17:38:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 17:38:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8BDD40F29FBD574528E1F8B9EBA33AB5AE74F221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:29:61:63:15:2f:00:88:be:3c:ed:df:59:
54:90:c1:e1:3b:c5:e3:13:45:bc:57:80:97:ac:ac:
a9:c5:7f:20:5c:16:cd:6b:5a:6e:a7:69:13:7d:c2:
1b:a0:ff:b8:c2:79:4a:32:13:55:68:0f:eb:96:28:
ee:e1:66:81:9c:1d:c4:53:05:0a:7d:8f:57:e7:95:
ed:26:f8:df:5c:3c:cc:e8:3f:96:02:47:ad:23:bf:
06:f2:28:21:9e:33:fa:05:50:d6:c4:ba:42:d6:9e:
f7:72:53:0a:c6:e8:8b:37:fc:4f:84:6e:1b:06:1d:
60:9e:3e:f9:50:dc:e4:98:f5:ef:ef:b2:62:8f:4e:
ca:34:64:48:8e:2e:8b:d8:1c:50:57:93:d8:b3:a3:
ed:e7:4f:ab:29:4e:99:96:b2:4b:79:35:f5:d4:a1:
6a:c0:48:e9:94:b8:95:b8:e8:13:ef:70:bf:76:04:
96:1d:8b:97:7c:b7:b2:23:c1:aa:97:96:d2:65:b8:
a5:51:7f:ab:58:d5:23:a1:16:96:18:c2:4c:07:b6:
9e:5f:f5:a1:00:07:9c:1d:37:4f:ce:25:a3:98:50:
d0:16:89:2d:9d:b3:7e:83:3d:c4:fc:3a:89:81:f5:
ee:7d:8a:96:54:ce:46:4b:7c:19:25:ed:74:5b:17:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:40:F2:9F:BD:57:45:28:E1:F8:B9:EB:A3:3A:B5:AE:74:F2:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i91A8p-9V0Uo4fi566M6ta508iE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:a9:00:53:a3:f6:93:0c:5a:45:d8:9c:db:12:8f:72:73:c2:
b8:59:04:ef:ea:c1:41:8a:41:c1:b8:59:1e:68:d9:ee:cd:fe:
e1:97:ee:ee:12:95:6d:ec:ac:82:2d:dc:7e:fb:ae:ec:66:fe:
29:89:76:6f:de:fb:fe:43:b8:c8:4b:57:b2:5f:14:3f:7f:d1:
45:62:0d:e3:05:4b:15:ac:ed:e4:01:f5:8d:a7:af:d5:14:a7:
fa:72:0f:d7:45:f7:0f:98:ba:79:d7:33:29:e8:94:b4:b4:e9:
bd:6c:f2:a9:ff:e2:74:23:3d:90:90:60:a4:4b:78:75:a1:46:
39:d1:a3:20:f0:96:21:92:26:5f:93:89:0c:93:b2:7a:f6:c0:
ee:ed:0c:af:9f:a6:40:d2:75:d1:36:c2:10:c4:81:20:9b:18:
a8:3b:5f:ce:47:c9:a7:5b:f3:5a:71:be:8e:78:c3:d9:ad:f2:
3b:47:7a:23:3c:75:d9:b3:78:09:c9:54:46:28:bc:a2:8a:77:
65:23:ff:40:91:7f:41:21:12:7e:5a:a5:00:ba:c6:5e:32:a3:
3f:0f:77:9a:9c:2b:f4:1f:d7:86:78:90:f5:45:c9:12:fd:aa:
85:ff:b3:ba:ef:00:e6:d8:e4:5e:ef:19:83:23:49:93:3a:70:
c3:7a:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:05:33 2025 by rpki-client