Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qMdDRaRBg_L757rHSC3PYsAJ2_E.roa
File: qMdDRaRBg_L757rHSC3PYsAJ2_E.roa (raw, json)
Hash identifier: O3GFpEEER7TjcmP/s8bLKPF+VP7xA4y/1Y5CTVYk8/4=
Subject key identifier: A8:C7:43:45:A4:41:83:F2:FB:E7:BA:C7:48:2D:CF:62:C0:09:DB:F1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17C2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qMdDRaRBg_L757rHSC3PYsAJ2_E.roa
Signing time: Sat 07 Jun 2025 18:09:32 +0000
ROA not before: Sat 07 Jun 2025 18:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6082 (0x17c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 18:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A8C74345A44183F2FBE7BAC7482DCF62C009DBF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:98:88:21:eb:ac:b0:3c:68:47:f7:d8:d7:
2c:bf:a2:1f:67:61:4e:40:22:ec:47:f5:e4:ae:c4:
41:c5:9f:36:09:84:71:05:92:e1:57:d4:25:44:d7:
7c:2a:28:fa:d5:51:5b:59:0e:5a:cc:aa:d5:8e:2e:
14:af:09:6f:98:a3:63:f0:52:8d:02:a6:7e:2e:c4:
9f:27:ca:1b:4d:0a:31:34:d7:87:71:1a:1d:8c:dc:
e5:b6:d6:95:08:1f:0e:86:9f:45:5f:83:6d:96:b1:
3e:40:61:6c:02:87:b8:91:d3:49:9d:13:30:19:35:
0e:8c:fa:07:92:ff:ab:7c:2a:c5:01:2b:38:73:a4:
20:b4:8d:9c:65:6e:57:c9:2d:f7:94:95:46:b4:c3:
6d:31:b0:e2:39:9c:cc:ef:26:68:63:dc:f4:14:e3:
79:bc:1a:f9:67:9a:a6:8f:27:98:c7:ad:49:23:dd:
a9:0f:71:05:89:bc:c2:a8:56:25:05:3e:bc:e8:10:
2a:66:e1:15:8a:b7:c9:b3:10:22:55:bd:7e:e9:c3:
13:58:70:7a:b0:22:9e:9f:fd:5b:ea:24:b5:a7:e5:
60:46:dd:73:8f:b9:51:e7:db:d6:19:b2:ce:1a:32:
d9:af:ed:e6:05:e6:33:82:29:1d:f8:68:13:fe:54:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C7:43:45:A4:41:83:F2:FB:E7:BA:C7:48:2D:CF:62:C0:09:DB:F1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qMdDRaRBg_L757rHSC3PYsAJ2_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:5f:4c:3e:78:58:55:a0:6b:33:b4:9c:88:65:6b:d6:e3:81:
85:d2:47:12:53:9a:29:4d:83:fd:23:63:ac:f7:f2:b1:9d:26:
d5:3f:77:79:34:1d:7d:e6:b7:c9:60:18:26:4f:c3:65:53:0c:
87:fb:e9:b9:48:eb:7e:32:6a:74:1d:cf:04:dc:fb:17:4a:09:
f7:1d:8c:a5:fb:51:ac:f7:3a:2e:dc:8d:36:30:29:56:e2:c4:
3e:fe:66:4b:c2:7d:cd:37:26:78:16:73:90:22:2c:f6:09:4d:
43:b0:fe:b6:31:d8:d5:d9:5a:09:57:81:4f:8e:a1:f3:46:9f:
a6:3c:55:4b:32:12:27:a3:be:5a:43:6c:ed:5c:5c:5c:de:a8:
e7:21:03:70:08:1e:02:20:df:24:ed:2c:85:90:9f:b9:2a:21:
db:ae:2c:d3:f7:30:a2:d2:8e:96:63:83:04:92:f9:b7:ae:0d:
79:c4:eb:92:63:e6:2b:0d:17:58:89:31:65:71:05:8b:5e:ff:
b5:cb:97:7f:3b:e5:72:02:eb:2e:7e:fe:7d:02:e2:64:df:9d:
81:7b:e8:73:32:9d:11:2f:7b:05:d7:6e:f7:ae:8b:ba:e2:eb:
f8:87:bf:ef:ec:5f:5f:7b:cd:8a:88:09:e9:60:1a:26:0d:31:
42:d8:06:37
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcx
ODA5MzJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE4Qzc0MzQ1QTQ0MTgz
RjJGQkU3QkFDNzQ4MkRDRjYyQzAwOURCRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOX5iIIeussDxoR/fY1yy/oh9nYU5AIuxH9eSuxEHFnzYJhHEF
kuFX1CVE13wqKPrVUVtZDlrMqtWOLhSvCW+Yo2PwUo0Cpn4uxJ8nyhtNCjE014dx
Gh2M3OW21pUIHw6Gn0Vfg22WsT5AYWwCh7iR00mdEzAZNQ6M+geS/6t8KsUBKzhz
pCC0jZxlblfJLfeUlUa0w20xsOI5nMzvJmhj3PQU43m8GvlnmqaPJ5jHrUkj3akP
cQWJvMKoViUFPrzoECpm4RWKt8mzECJVvX7pwxNYcHqwIp6f/VvqJLWn5WBG3XOP
uVHn29YZss4aMtmv7eYF5jOCKR34aBP+VL/vAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqMdDRaRBg/L757rHSC3PYsAJ2/EwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9xTWREUmFSQmdfTDc1N3JI
U0MzUFlzQUoyX0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBABFfTD54WFWgazO0nIhla9bjgYXSRxJTmilN
g/0jY6z38rGdJtU/d3k0HX3mt8lgGCZPw2VTDIf76blI634yanQdzwTc+xdKCfcd
jKX7Uaz3Oi7cjTYwKVbixD7+ZkvCfc03JngWc5AiLPYJTUOw/rYx2NXZWglXgU+O
ofNGn6Y8VUsyEiejvlpDbO1cXFzeqOchA3AIHgIg3yTtLIWQn7kqIduuLNP3MKLS
jpZjgwSS+beuDXnE65Jj5isNF1iJMWVxBYte/7XLl3875XIC6y5+/n0C4mTfnYF7
6HMynREvewXXbveui7ri6/iHv+/sX197zYqICelgGiYNMULYBjc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:53:15 2025 by rpki-client