Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/k9AUKdBpTfuR6zr241d8s1MfwMQ.roa
File: k9AUKdBpTfuR6zr241d8s1MfwMQ.roa (raw, json)
Hash identifier: luxxjongFSgmpvLPPjppyZfkT62DlE3muR7+cxDptAE=
Subject key identifier: 93:D0:14:29:D0:69:4D:FB:91:EB:3A:F6:E3:57:7C:B3:53:1F:C0:C4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17F6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k9AUKdBpTfuR6zr241d8s1MfwMQ.roa
Signing time: Sun 08 Jun 2025 00:39:32 +0000
ROA not before: Sun 08 Jun 2025 00:39:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6134 (0x17f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 00:39:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=93D01429D0694DFB91EB3AF6E3577CB3531FC0C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:f0:3e:60:06:ab:a5:39:38:95:e0:49:67:
3d:c6:e9:f4:01:f8:87:90:9c:f5:28:ac:fd:5d:ff:
da:fb:80:e1:2c:a7:61:e6:20:24:f4:ef:71:16:ae:
f9:61:ab:db:50:81:e4:bf:11:73:c6:aa:d3:3d:79:
b4:45:fd:f2:76:16:ac:d9:2d:ea:e1:1d:33:34:b4:
aa:e4:96:06:90:1b:6c:bc:ad:d9:b9:23:3b:b1:a1:
e9:d8:bf:35:87:b2:6e:de:b6:ad:c2:10:a6:23:5f:
84:65:61:88:b4:fb:ca:ab:5c:b8:19:02:2c:b1:1d:
ab:b1:01:96:92:30:3a:41:89:b1:37:74:86:54:8d:
b2:bc:da:55:0a:67:96:6c:56:f7:16:bc:31:2b:1a:
a3:19:c6:e1:22:99:72:d6:31:72:12:46:5b:a2:38:
da:67:77:f5:c7:db:f5:bf:b3:15:e4:e7:ff:53:4c:
1f:56:d3:45:80:b3:e7:d1:81:4b:73:f3:c5:33:6a:
68:10:88:99:f8:62:26:c2:8c:6b:cc:cd:f9:67:c3:
f9:50:fd:f7:d1:15:27:c5:89:df:5b:a6:84:22:e7:
62:b3:10:4b:ec:6d:64:8e:92:7c:ae:03:48:15:71:
5c:51:50:3c:d7:ba:45:ac:34:ca:ee:dd:60:21:f7:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:14:29:D0:69:4D:FB:91:EB:3A:F6:E3:57:7C:B3:53:1F:C0:C4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k9AUKdBpTfuR6zr241d8s1MfwMQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:37:83:30:f7:0b:73:84:04:65:9b:32:8d:18:9a:f0:87:92:
9a:54:2f:be:6d:db:b3:93:30:9b:36:71:28:76:3b:12:d2:b1:
07:07:cc:db:70:72:3c:57:9a:cf:b0:c8:10:62:3a:59:dd:26:
f3:08:46:44:85:36:98:df:2f:fa:0c:9e:74:0c:fb:01:ba:ee:
cd:ed:79:ef:34:90:26:cf:6d:d7:9d:67:23:42:cd:02:7b:16:
41:b3:7b:3c:86:8f:a2:1b:cf:28:7b:0f:8e:cd:cf:53:c4:ed:
65:0d:8a:1c:f1:03:dc:fc:8b:d5:3d:d4:9e:0e:80:b0:74:c2:
69:de:0f:d8:40:a4:39:06:3e:ff:a1:16:c5:91:a0:80:c2:35:
b9:4a:ab:84:68:bc:d5:c0:e8:90:fe:ac:57:dc:9a:d9:f6:ab:
8d:7c:02:11:b6:36:72:8d:06:b8:b1:09:46:5d:78:c7:32:99:
e4:ea:45:47:a3:c9:f5:47:2d:01:a3:56:1c:78:26:fa:39:3e:
1a:81:51:aa:43:e4:ca:fe:c2:1c:9e:9b:06:37:7a:9c:fe:ae:
59:b4:e9:8f:1e:da:10:41:49:ea:66:53:4f:87:67:11:6d:46:
ad:16:5a:d3:7f:13:25:61:d0:54:18:c7:1e:b5:cb:e1:8e:fc:
ee:b7:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:12 2025 by rpki-client