Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qU6w3vOV3c_0tmKz8QUAcgiULx0.roa
File: qU6w3vOV3c_0tmKz8QUAcgiULx0.roa (raw, json)
Hash identifier: FHJ8cyD2AY4J5Ai6+9NtlwOOv5UXHxhmXipwQWpJYVg=
Subject key identifier: A9:4E:B0:DE:F3:95:DD:CF:F4:B6:62:B3:F1:05:00:72:08:94:2F:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19BE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qU6w3vOV3c_0tmKz8QUAcgiULx0.roa
Signing time: Tue 10 Jun 2025 09:39:48 +0000
ROA not before: Tue 10 Jun 2025 09:39:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6590 (0x19be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 09:39:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A94EB0DEF395DDCFF4B662B3F105007208942F1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:da:c1:d7:0b:ed:98:fd:3e:1d:ff:d2:cb:
0f:c4:b0:4c:30:21:65:c3:79:ec:7f:0b:32:b4:6f:
cb:1b:79:3d:23:e5:43:dd:74:3b:ad:a7:22:15:61:
a7:f6:81:34:71:a0:5d:43:f3:e2:d9:71:0c:3e:4f:
01:71:9b:06:df:c2:92:1a:5f:f3:f8:35:46:41:f6:
4a:a6:35:ec:80:7f:b9:b7:0a:27:01:11:b8:70:51:
fc:bf:87:b8:1b:09:23:e0:99:19:ad:54:fa:a9:59:
66:d5:14:65:72:f7:47:36:e4:38:81:a1:12:92:83:
f2:84:5e:18:d7:91:f7:05:62:bf:4a:8f:66:bc:43:
24:93:a5:b7:0f:9f:f5:98:2d:11:41:a6:22:db:31:
59:0d:1d:39:5d:cb:b4:8d:b7:ba:b0:ae:96:7e:0a:
24:e4:da:49:df:2e:73:c6:98:4d:49:77:85:1f:d1:
01:27:2a:88:c7:fe:e5:2c:2d:9c:28:18:80:2e:42:
f8:07:07:11:44:8a:92:54:3c:30:de:99:54:c0:6f:
dc:11:da:8f:c2:32:3f:8b:9d:b7:d7:c5:ff:1d:0b:
29:d1:02:fb:e0:9e:6f:9a:b4:13:0b:a7:77:67:1c:
3e:82:7c:83:22:bb:11:74:6f:ba:70:34:b1:93:45:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:B0:DE:F3:95:DD:CF:F4:B6:62:B3:F1:05:00:72:08:94:2F:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qU6w3vOV3c_0tmKz8QUAcgiULx0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:48:46:d8:06:36:c7:93:19:26:13:18:b3:cc:b1:74:22:56:
36:55:b4:dd:3d:77:ef:33:b1:ec:10:64:4a:e0:e5:c7:94:ac:
f0:0b:93:2a:3f:75:49:af:65:ea:43:ff:eb:32:4d:9f:77:da:
09:d4:d6:2e:4c:35:b8:5b:6d:74:64:7f:48:a2:ad:8b:fb:06:
06:01:aa:3a:99:ff:69:87:d3:b7:19:06:61:2e:29:58:84:4d:
4b:f5:bd:68:c2:9f:f2:7d:86:57:8f:dd:c4:b5:a8:a3:a1:f5:
34:90:61:98:17:1a:b3:1a:1d:6a:af:c8:58:b3:d9:07:09:80:
10:b2:27:9f:bf:79:47:66:99:5a:c6:21:b9:d7:48:dd:58:a7:
aa:65:09:9b:65:9e:a7:c1:85:e2:a6:6a:0c:6a:c7:a5:4b:8a:
fb:44:d4:fa:73:bb:26:e7:0e:e5:10:cf:9e:43:8f:2b:70:f9:
ff:95:a2:bf:df:9e:78:ca:bd:65:4a:bd:eb:2b:a8:33:ee:44:
91:ee:00:ef:d4:d4:28:24:9b:59:70:82:a0:df:d8:f7:06:f6:
25:d4:77:1e:84:c7:a2:7b:3a:78:44:d5:51:3c:68:21:d5:3a:
fd:fc:d4:eb:18:74:eb:21:e2:2d:f9:d6:21:4f:31:91:13:df:
75:d0:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:05 2025 by rpki-client