Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/p5ysKVeL5y_d_UqtGcYkDJxlcRM.roa
File: p5ysKVeL5y_d_UqtGcYkDJxlcRM.roa (raw, json)
Hash identifier: 0zxBLs7RJQ5yvdrMRH+VmPeMFzwIsr2iWjPTbmgYrtc=
Subject key identifier: A7:9C:AC:29:57:8B:E7:2F:DD:FD:4A:AD:19:C6:24:0C:9C:65:71:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F42
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p5ysKVeL5y_d_UqtGcYkDJxlcRM.roa
Signing time: Tue 27 May 2025 10:08:47 +0000
ROA not before: Tue 27 May 2025 10:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3906 (0xf42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 10:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A79CAC29578BE72FDDFD4AAD19C6240C9C657113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:ec:13:1a:a7:39:1e:bc:79:82:01:42:76:
a2:f6:d9:49:60:f7:67:11:f6:a3:88:d5:2f:69:0a:
cb:1d:b4:9f:fc:8e:b8:d3:66:16:c1:66:35:01:4a:
7f:1a:61:50:cb:cf:9a:84:41:e5:e3:04:9b:de:5c:
ce:65:81:03:a2:51:f1:eb:39:70:fe:45:55:39:2a:
f9:64:44:8a:da:14:c3:7a:86:2f:79:a6:c4:be:58:
84:21:26:b6:90:88:25:b8:e7:14:9f:51:01:46:09:
84:3e:78:4c:00:95:93:ad:0f:18:74:79:13:85:6f:
bb:8f:53:79:5d:27:9e:03:03:07:00:7e:1c:ac:fc:
0a:de:5e:07:66:ab:2e:38:f8:5e:48:08:25:d7:d4:
59:80:e9:e9:cf:b6:e4:d1:14:08:eb:85:ee:8f:4c:
99:fa:2e:7a:b3:39:e2:cd:84:bb:3a:93:30:58:c7:
af:95:43:dc:05:02:83:f3:07:ee:41:a1:75:54:5e:
b3:e8:78:58:53:57:92:c3:ef:92:de:17:93:45:59:
c7:f1:11:d6:ee:0b:9e:c4:ce:6f:34:15:8d:fe:8d:
7c:81:18:2e:be:c6:92:b9:9e:7c:d0:66:32:6a:a5:
b6:bf:18:c5:67:e9:df:fb:b4:d9:7d:af:f1:3a:90:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:AC:29:57:8B:E7:2F:DD:FD:4A:AD:19:C6:24:0C:9C:65:71:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p5ysKVeL5y_d_UqtGcYkDJxlcRM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:b1:d0:26:8c:1a:e7:1b:b6:89:d8:ca:2b:b4:1a:86:06:3d:
1a:a8:ae:03:af:8c:bf:c2:56:d5:fd:dc:bd:c8:97:4d:14:26:
ef:3b:6e:9f:ad:b1:ad:98:9d:7d:5f:9e:77:19:41:68:44:bc:
0c:e5:f7:9e:95:73:2d:f5:59:25:83:b9:48:d3:72:92:e2:3f:
c2:8d:1e:12:e6:a1:58:f0:b6:49:17:54:ea:1c:a3:1e:ab:aa:
79:e0:15:72:31:0a:ca:b7:33:c6:b9:3f:2a:78:b3:1f:9b:27:
81:be:ea:b6:e9:ae:4f:62:ea:55:32:3a:bb:7e:e8:72:9e:fb:
da:c6:4e:05:95:50:71:28:01:41:d8:b5:12:1d:7e:ff:78:30:
03:ca:da:7d:a1:41:e3:54:61:bb:84:2d:f8:57:3d:54:51:84:
22:22:84:32:97:ee:0a:d5:e7:df:a1:41:fc:77:95:6e:dc:52:
43:8a:03:45:04:75:ea:c3:b6:da:23:83:c5:cb:6b:3d:b3:0a:
f1:ca:ee:f3:f0:ad:e6:83:d2:ab:bd:59:08:81:23:ff:47:df:
6d:6b:75:34:90:21:3e:9f:79:70:88:fb:f0:c3:fe:80:37:6d:
f4:db:51:bc:7f:66:61:fe:f2:d9:2e:0c:5f:80:e2:e0:59:c4:
06:bf:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:23:34 2025 by rpki-client