Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nvhxiDPHXBZXdRIx3nfpFoU-sGg.roa
File: nvhxiDPHXBZXdRIx3nfpFoU-sGg.roa (raw, json)
Hash identifier: SHhUXaVl9IfgqTXwiJ1Oul3p9p60N7sK9bOlnWqDQ94=
Subject key identifier: 9E:F8:71:88:33:C7:5C:16:57:75:12:31:DE:77:E9:16:85:3E:B0:68
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 170A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nvhxiDPHXBZXdRIx3nfpFoU-sGg.roa
Signing time: Fri 06 Jun 2025 19:09:31 +0000
ROA not before: Fri 06 Jun 2025 19:09:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5898 (0x170a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 19:09:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EF8718833C75C1657751231DE77E916853EB068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:05:14:fa:39:9f:d3:e1:f6:8a:c9:e4:84:
85:0f:ce:29:31:62:38:11:06:4e:55:9f:8e:06:e0:
4e:37:a4:fb:9a:4c:cf:74:8c:c6:d7:b7:66:f3:d7:
79:f7:f5:f6:84:5e:55:c8:e6:3a:13:f5:ec:e0:d6:
0e:fb:84:64:6b:cc:e6:0f:7a:64:e3:c2:55:60:5e:
18:10:95:96:f8:4c:da:6d:c2:3e:e4:c6:52:1d:d3:
ed:c7:ce:6e:f8:92:9d:ed:7f:da:74:3b:3a:46:f0:
61:d5:d4:3a:cd:f8:b2:fe:33:b0:5d:5c:4a:c2:36:
8e:42:ea:9b:36:56:f5:e8:e8:08:b1:51:3e:6e:8f:
d7:49:89:93:cd:37:9b:dd:04:3c:49:82:a8:aa:b2:
ac:dc:a9:1b:7b:db:cb:32:63:65:9f:65:70:c4:60:
bd:d2:ce:4f:15:8d:2f:28:81:11:bb:4d:7f:2b:6b:
4a:b2:84:9a:db:30:82:3e:fe:c1:70:86:87:8f:a1:
20:e8:97:1c:ba:93:e8:33:81:29:2f:23:a6:ff:f0:
62:e7:c7:5a:19:5f:b9:7f:76:e6:03:67:3c:a9:ad:
42:06:e3:3f:7d:01:52:0f:27:99:e7:3e:83:5c:d0:
9b:b1:5a:6f:95:1e:42:0e:22:dc:fd:a0:f1:33:05:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:71:88:33:C7:5C:16:57:75:12:31:DE:77:E9:16:85:3E:B0:68
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nvhxiDPHXBZXdRIx3nfpFoU-sGg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:1a:f9:a5:4d:a3:66:7e:5f:b3:fc:40:c8:79:45:01:15:38:
1e:03:40:32:0b:07:b6:25:4c:99:50:b2:52:43:16:a0:17:28:
dc:41:a7:63:0f:37:5d:eb:e5:7e:77:75:3f:96:e7:70:af:98:
33:d5:7f:71:98:1e:bc:bb:29:b2:79:6e:4f:7a:d4:14:cc:8b:
b9:4d:b1:f3:1c:3a:5d:bd:bc:7d:f5:ea:97:9b:47:5d:6e:80:
c2:c6:3e:7d:f7:49:b6:bc:f9:4c:e0:3b:82:0e:2b:76:1c:1b:
e6:c1:af:26:7e:1e:e0:12:1d:3a:e4:6e:ed:56:e5:9f:1f:e5:
fb:84:8f:62:d0:28:1e:b5:57:42:34:42:f2:0f:ce:72:cb:34:
1c:4c:fa:e0:bc:37:3a:18:fd:cd:7e:7e:a4:9e:92:e1:93:15:
eb:2a:78:d3:6d:ae:16:2d:f6:05:1e:08:48:9a:17:42:22:a4:
d3:c3:2b:92:7d:cb:d6:70:f2:39:83:35:bf:39:c6:1a:ed:f2:
ae:f0:f5:ae:0c:5b:f5:5e:2b:d3:e1:39:76:9c:79:2b:ac:98:
15:70:6a:f5:77:5d:f4:54:67:9a:6d:6a:46:0e:ae:6d:b9:48:
dc:d2:ba:b9:9c:99:3e:fc:41:b6:fe:e9:02:aa:7c:dc:34:94:
60:29:e4:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYx
OTA5MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlFRjg3MTg4MzNDNzVD
MTY1Nzc1MTIzMURFNzdFOTE2ODUzRUIwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeEwUU+jmf0+H2isnkhIUPzikxYjgRBk5Vn44G4E43pPuaTM90
jMbXt2bz13n39faEXlXI5joT9ezg1g77hGRrzOYPemTjwlVgXhgQlZb4TNptwj7k
xlId0+3Hzm74kp3tf9p0OzpG8GHV1DrN+LL+M7BdXErCNo5C6ps2VvXo6AixUT5u
j9dJiZPNN5vdBDxJgqiqsqzcqRt728syY2WfZXDEYL3Szk8VjS8ogRG7TX8ra0qy
hJrbMII+/sFwhoePoSDolxy6k+gzgSkvI6b/8GLnx1oZX7l/duYDZzyprUIG4z99
AVIPJ5nnPoNc0JuxWm+VHkIOItz9oPEzBW4bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnvhxiDPHXBZXdRIx3nfpFoU+sGgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9udmh4aURQSFhCWlhkUkl4
M25mcEZvVS1zR2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJ8a+aVNo2Z+X7P8QMh5RQEVOB4DQDILB7Yl
TJlQslJDFqAXKNxBp2MPN13r5X53dT+W53CvmDPVf3GYHry7KbJ5bk961BTMi7lN
sfMcOl29vH316pebR11ugMLGPn33Sba8+UzgO4IOK3YcG+bBryZ+HuASHTrkbu1W
5Z8f5fuEj2LQKB61V0I0QvIPznLLNBxM+uC8NzoY/c1+fqSekuGTFesqeNNtrhYt
9gUeCEiaF0IipNPDK5J9y9Zw8jmDNb85xhrt8q7w9a4MW/VeK9PhOXaceSusmBVw
avV3XfRUZ5ptakYOrm25SNzSurmcmT78Qbb+6QKqfNw0lGAp5Mc=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:07:06 2025 by rpki-client