Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rMw-l1IpRp-xO7BrcPkUuw3IiXM.roa
File: rMw-l1IpRp-xO7BrcPkUuw3IiXM.roa (raw, json)
Hash identifier: wBVd3DHKm5zdbYObpIDIIhn8SVhjXfLjuzV8ghKEUAU=
Subject key identifier: AC:CC:3E:97:52:29:46:9F:B1:3B:B0:6B:70:F9:14:BB:0D:C8:89:73
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15A2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rMw-l1IpRp-xO7BrcPkUuw3IiXM.roa
Signing time: Wed 04 Jun 2025 22:09:23 +0000
ROA not before: Wed 04 Jun 2025 22:09:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5538 (0x15a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 22:09:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ACCC3E975229469FB13BB06B70F914BB0DC88973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:88:7f:f0:be:4a:eb:0e:f5:8b:9b:d1:b2:
36:a9:5b:97:50:26:58:bd:ed:68:4b:c5:1b:dd:0c:
ca:3f:6a:75:85:56:e9:34:39:da:72:f8:67:fd:cc:
13:62:5d:c6:2f:84:67:a7:d7:4c:20:4c:5c:69:59:
c6:3a:f0:36:74:28:6e:73:ac:d7:e7:eb:50:23:27:
22:ff:bc:e2:ee:c9:24:85:39:8d:42:0c:98:2f:77:
a7:51:3d:e9:9a:39:77:c4:b1:f9:40:a5:e5:fe:87:
fd:38:74:32:3e:19:8c:9f:de:01:63:2e:96:4a:ca:
dc:83:89:5b:29:f8:ad:65:42:a4:d9:0f:54:5e:da:
ba:19:aa:37:29:0a:d3:a3:b9:bc:2c:6a:86:24:dd:
19:44:6b:3b:71:2f:e0:f4:01:1f:df:67:eb:2e:e9:
cb:43:7c:15:f8:e2:c8:5d:1a:49:a7:42:5e:ca:fc:
f9:30:12:40:94:4d:94:92:87:99:34:6a:e0:55:6c:
c1:cc:4f:6e:d8:b1:24:35:8e:7d:d0:8a:a4:43:2a:
b3:7d:02:53:fb:b5:9e:cd:76:7b:59:a1:f2:d9:8f:
1e:8a:62:b7:1c:43:e6:85:8e:7b:46:8c:04:91:fa:
b4:fc:13:b4:3b:11:f6:0d:8a:fb:6a:1b:08:bd:54:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:3E:97:52:29:46:9F:B1:3B:B0:6B:70:F9:14:BB:0D:C8:89:73
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rMw-l1IpRp-xO7BrcPkUuw3IiXM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:ee:ba:16:72:06:8d:fa:3d:c4:e6:84:b4:e2:d7:61:29:d3:
cf:e6:3d:f5:b7:e9:34:21:db:8a:35:72:e9:7d:4b:f7:d1:02:
7f:da:c8:39:05:8f:b0:10:82:26:ef:3d:a0:df:d9:52:bd:cd:
a1:27:ee:b8:43:ba:a7:30:34:bc:a9:58:9c:3b:81:49:23:dc:
51:00:c8:28:08:b1:4a:59:5d:a1:cc:10:3f:2d:5e:6a:73:37:
64:f3:f8:ba:c2:e2:ea:48:e7:4b:d5:9b:11:d8:e8:00:21:73:
3d:ff:5e:3f:04:a8:ef:9a:5a:42:26:9b:fc:c4:7f:01:4e:86:
79:7f:7e:46:0b:a0:e0:05:dc:a7:53:93:8b:ef:59:62:17:5c:
bc:a1:cc:d5:82:4f:e9:60:29:62:2b:65:bd:81:08:35:ba:ba:
8a:02:e6:f5:90:5b:3a:ee:fb:97:50:0f:fd:06:9b:eb:ad:3d:
dd:32:25:5b:28:8b:11:84:44:e0:c4:e0:76:54:56:9a:99:7f:
1b:2e:60:c8:ce:85:6e:8e:4b:f4:06:02:9a:b6:73:e8:b1:20:
56:b5:4d:a2:f2:ee:66:2a:0e:3a:06:5d:87:24:83:3b:f4:a9:
01:d0:87:f7:17:73:ff:1e:25:53:07:95:79:ae:82:13:6f:f7:
de:cb:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:50:30 2025 by rpki-client