Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kTAVPL3oWlOC_DcLgFJpUvoMOF8.roa
File: kTAVPL3oWlOC_DcLgFJpUvoMOF8.roa (raw, json)
Hash identifier: 9R6kvx81XatbFqzKJ1ggJJxFnAtnBCMT1AQA+m5ozFY=
Subject key identifier: 91:30:15:3C:BD:E8:5A:53:82:FC:37:0B:80:52:69:52:FA:0C:38:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BE2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kTAVPL3oWlOC_DcLgFJpUvoMOF8.roa
Signing time: Fri 13 Jun 2025 06:09:52 +0000
ROA not before: Fri 13 Jun 2025 06:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7138 (0x1be2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 06:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9130153CBDE85A5382FC370B80526952FA0C385F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:18:24:31:d3:ac:04:00:0d:c5:95:fc:45:
4f:d2:3d:6f:dc:aa:91:3b:83:ff:30:d6:62:e0:21:
30:3e:bd:f6:c4:70:77:ac:36:e9:e9:7a:d3:dc:a7:
6e:8e:c9:88:69:96:60:46:82:52:9a:ef:d0:8b:ac:
68:72:98:ef:b5:e8:ab:46:1e:33:b5:2b:86:fd:a8:
77:d8:ff:f8:3d:c9:8a:6d:2e:cc:44:0b:da:12:65:
d0:a6:ee:d6:9c:8e:61:e2:29:99:ba:e5:a8:ee:50:
ef:09:47:fe:8c:02:79:25:bd:6e:b8:5b:21:fc:c7:
74:7e:0b:31:89:7c:60:ef:0a:6d:d6:4b:e0:b9:c1:
c5:8d:ea:6a:2c:be:b2:85:94:d6:db:69:fa:04:31:
37:de:ac:cd:7e:d5:5f:0d:80:59:8d:33:14:da:0e:
e4:62:41:01:a3:0b:23:21:93:dc:31:8b:16:26:6e:
44:e4:f0:d6:b1:bb:34:14:38:d7:76:ba:b1:10:28:
d5:ce:68:69:0e:41:3c:e3:f3:85:ab:0a:fe:e9:c9:
bd:a7:c0:8c:1b:e0:8d:d6:d2:39:e3:6f:f0:81:5b:
bb:8a:5d:4d:98:94:6b:6f:63:40:be:7f:e2:fe:65:
88:b9:48:f4:47:1e:c2:db:df:cf:34:87:ba:bd:1b:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:15:3C:BD:E8:5A:53:82:FC:37:0B:80:52:69:52:FA:0C:38:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kTAVPL3oWlOC_DcLgFJpUvoMOF8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:30:42:ab:0d:7d:8e:9a:0a:a0:b9:84:dc:7a:76:79:cc:4b:
09:bf:6a:00:62:54:94:95:a4:dd:d2:d2:75:6e:de:66:06:be:
62:d1:c4:96:6b:42:1d:73:09:5c:a5:24:6b:d0:7d:0b:5b:e8:
00:f8:82:7f:ed:50:a5:fe:b7:16:1d:83:2c:35:a5:2c:6d:2e:
7b:bc:44:14:80:cd:a8:0b:8d:97:cb:0a:e4:27:b9:5e:6a:59:
f4:35:a2:b5:97:75:c1:14:c4:9b:8a:bb:91:b0:ff:b8:20:f0:
eb:9c:b5:85:7a:e1:f2:76:ae:7d:e2:3f:cb:04:f0:84:0d:63:
5e:c9:1a:48:fd:3c:71:0c:ab:0c:bf:90:9a:fa:dc:a4:0a:2f:
2a:21:3e:a1:9f:31:21:18:6a:33:76:db:02:00:63:e0:a9:d1:
23:56:e4:a2:b1:a6:25:4f:ad:74:59:e9:3f:a7:7e:3e:38:38:
b3:42:55:3a:d6:c1:6a:ca:a3:dc:88:47:e1:e8:c2:5d:46:e9:
ca:07:29:c8:55:b5:03:91:36:df:b5:42:d2:c8:df:0a:dd:88:
70:d9:4b:4f:52:27:16:65:53:fe:02:75:12:6a:46:39:6e:92:
ef:73:b6:2e:2f:d5:69:e6:db:cc:d2:b1:55:a0:e0:bd:4c:90:
25:fd:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:23:45 2025 by rpki-client