Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nsqDf6Bhek1DSrRZB4Lv07ssKvM.roa
File: nsqDf6Bhek1DSrRZB4Lv07ssKvM.roa (raw, json)
Hash identifier: wOutO7iBcf5oxPsrrlbXTCJtj6sFkpIqXxHewgfZle4=
Subject key identifier: 9E:CA:83:7F:A0:61:7A:4D:43:4A:B4:59:07:82:EF:D3:BB:2C:2A:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1756
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nsqDf6Bhek1DSrRZB4Lv07ssKvM.roa
Signing time: Sat 07 Jun 2025 04:39:28 +0000
ROA not before: Sat 07 Jun 2025 04:39:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5974 (0x1756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 04:39:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9ECA837FA0617A4D434AB4590782EFD3BB2C2AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:fb:75:63:45:31:c2:7c:66:72:11:82:07:
07:11:38:ad:e8:e9:46:36:00:d4:6c:3a:98:c0:07:
4b:f0:71:55:64:96:07:2e:01:b0:ec:4b:9b:11:12:
fe:a4:7a:2b:9d:e5:1f:f8:11:ba:13:89:5c:54:94:
6c:22:c9:fa:6a:4c:e4:7e:e2:28:8f:19:e4:4e:5b:
5b:39:b3:80:90:70:a7:30:e8:b3:ff:0b:26:c8:37:
bc:c0:a1:57:3c:41:ef:8e:69:fc:a1:31:77:90:73:
49:48:cb:63:89:b3:c8:60:5f:b3:a2:b1:1b:4c:8d:
7a:8a:9a:f0:6a:d8:b9:f2:93:5f:27:63:9f:b8:6d:
75:96:dc:57:92:25:93:31:80:13:ee:c8:88:21:53:
87:53:ba:a4:c3:3c:50:bf:e6:00:e5:3e:59:fc:c2:
f4:9f:6e:ba:48:d0:cb:1c:81:b7:b4:b7:f0:66:80:
58:e8:48:cb:3e:90:c4:52:4e:f1:97:47:9f:e3:bb:
64:e0:3f:9e:59:71:77:f7:c5:77:21:95:5b:a6:a1:
c8:c1:88:25:8b:41:0e:64:40:fb:d9:94:71:9c:ac:
b7:4a:ca:0f:68:f6:64:9c:fa:a4:31:e8:6b:97:29:
fa:44:35:19:de:9f:e7:7f:b9:8e:db:6a:ec:47:fb:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:83:7F:A0:61:7A:4D:43:4A:B4:59:07:82:EF:D3:BB:2C:2A:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nsqDf6Bhek1DSrRZB4Lv07ssKvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:68:40:ae:9d:f6:9b:4b:b4:d0:f9:56:09:c1:30:92:e3:17:
31:ec:7d:3c:68:2c:ad:0c:81:e4:a5:a3:bd:23:55:6e:7c:20:
8f:94:38:33:c2:54:5f:73:bf:cc:36:56:85:75:c6:7e:ae:4a:
aa:8f:c8:51:21:ef:72:2d:35:e7:df:12:55:fe:68:2b:45:dc:
e5:95:22:4c:e5:85:27:47:85:d5:9d:42:15:8d:57:5c:8c:f1:
c8:4b:21:61:63:6a:a7:48:79:32:9f:4a:a2:0a:76:e4:e7:c0:
e6:ce:c4:9f:f6:46:4a:ee:b3:ee:8d:ee:19:12:7f:a6:5e:12:
32:81:2b:5a:c2:f3:cf:13:5c:05:fa:70:69:f1:17:ae:1f:a2:
32:5c:a1:4a:cb:ed:3f:08:b3:97:ae:c9:92:c2:b2:58:ad:a4:
91:f3:ce:b6:1c:08:70:08:f1:10:ef:0c:6e:74:f2:f4:72:e9:
34:0a:4e:ad:ea:69:51:92:a5:64:1e:b8:1b:2f:7b:79:5c:65:
ee:cb:4c:50:18:59:bd:fd:69:6d:b8:12:f7:8a:37:8a:03:9e:
d0:9f:c1:33:8e:7d:91:24:62:66:b8:af:82:fd:23:c5:37:6c:
b0:b5:18:d0:49:9e:1d:87:20:b8:09:cd:ad:80:51:5b:b3:94:
c7:df:7f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:49 2025 by rpki-client