Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jl8UqYzwJRK3WYH3moP8t49FFRc.roa
File: jl8UqYzwJRK3WYH3moP8t49FFRc.roa (raw, json)
Hash identifier: CBbzVxI4BM7skY7XhxPxQNizp0JDje9ppGkPbSfwbQ8=
Subject key identifier: 8E:5F:14:A9:8C:F0:25:12:B7:59:81:F7:9A:83:FC:B7:8F:45:15:17
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jl8UqYzwJRK3WYH3moP8t49FFRc.roa
Signing time: Sun 08 Jun 2025 23:09:41 +0000
ROA not before: Sun 08 Jun 2025 23:09:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6314 (0x18aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 23:09:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8E5F14A98CF02512B75981F79A83FCB78F451517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:d4:63:09:1a:6d:cd:b5:dd:0b:3a:6b:57:
5c:01:17:a5:ef:ac:c4:94:31:9f:ca:f1:d5:4f:12:
33:0c:f1:10:37:a0:03:74:82:cb:8f:d9:12:63:4d:
6f:a7:cb:26:2a:5e:f1:1e:a1:9f:32:9b:eb:69:8e:
9e:3f:c0:bc:e5:23:fe:67:c1:f4:b7:8c:03:06:b3:
3b:18:53:95:62:a0:84:1b:b8:ed:4b:f4:02:a7:19:
9a:0d:87:4a:fc:80:d7:23:be:83:ff:03:3a:c1:21:
a0:f9:6b:12:4e:9d:d1:aa:46:df:6e:ec:c9:ad:7f:
63:03:68:fa:be:3d:c4:4b:90:3b:71:f8:7e:4e:f7:
96:b8:7b:ce:0e:2b:e4:4b:0d:4e:5e:ff:7e:b1:a6:
06:e8:87:36:44:aa:13:d7:5d:5b:52:dc:31:d4:d4:
a1:c9:48:d4:86:dc:8a:11:7c:3e:78:62:ef:c2:8f:
f3:34:8d:4c:f6:58:56:13:69:b6:81:ea:af:19:00:
7a:ff:c7:d3:b3:ad:91:a5:96:be:fb:ed:0c:4c:93:
e6:f8:be:f5:74:74:48:cf:a1:45:8e:6f:02:2d:74:
2c:bb:f5:e0:e2:4c:22:4c:55:d3:50:87:76:46:c3:
b2:92:01:fa:bb:59:6c:93:b1:6b:0e:a9:6a:d1:1e:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:14:A9:8C:F0:25:12:B7:59:81:F7:9A:83:FC:B7:8F:45:15:17
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jl8UqYzwJRK3WYH3moP8t49FFRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:6b:0b:de:4b:ac:4c:80:71:f5:4f:62:8a:31:24:fe:1e:7c:
2e:d0:49:f6:4b:58:af:48:27:c5:a5:dd:e0:c8:44:71:31:9d:
d9:e7:4a:10:72:59:72:d8:2d:01:42:1d:c8:00:eb:0e:f9:36:
30:e8:b9:38:f2:2a:21:24:34:b9:06:23:d1:50:b0:c0:97:38:
50:7a:51:63:ea:22:ab:eb:e7:fb:f9:c8:45:5f:8f:50:58:97:
75:58:fa:c2:15:8b:51:c6:fa:8d:32:43:83:8e:72:b6:96:01:
be:d7:be:9d:5b:61:ad:b6:50:d5:c6:9b:cc:cb:32:bb:29:4b:
aa:4b:b4:13:18:cd:14:28:55:07:2e:02:ae:30:34:08:4c:0e:
d8:8d:9a:9c:9d:90:8f:58:ac:db:57:36:5f:49:5c:55:dc:ab:
6c:46:26:97:7c:fe:46:af:fa:96:bb:a1:17:16:0d:92:e3:92:
6b:c9:cb:8a:2f:77:34:97:07:39:da:2e:d9:62:73:f9:40:7b:
26:9f:74:c9:b0:a2:7c:3c:71:44:98:ed:23:08:44:dd:71:73:
94:04:ae:18:30:55:bd:86:56:ef:63:ad:d1:39:c0:3e:5b:90:
9e:c7:b4:eb:d3:2d:89:b3:58:7a:49:9e:d7:ed:a6:53:45:61:
55:6b:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:50:01 2025 by rpki-client