Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sWH0VfpgnlHOdCQGSQVdfhQfJS0.roa
File: sWH0VfpgnlHOdCQGSQVdfhQfJS0.roa (raw, json)
Hash identifier: DK9KPurgSZjcn/lfBd8bbnAEYqd0TncyFt+KPVbdHTI=
Subject key identifier: B1:61:F4:55:FA:60:9E:51:CE:74:24:06:49:05:5D:7E:14:1F:25:2D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15AE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sWH0VfpgnlHOdCQGSQVdfhQfJS0.roa
Signing time: Wed 04 Jun 2025 23:39:22 +0000
ROA not before: Wed 04 Jun 2025 23:39:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 23:39:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B161F455FA609E51CE74240649055D7E141F252D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:bd:91:5e:0b:01:f3:8b:38:a2:c3:d9:ca:
8c:20:10:11:a1:0e:c4:fb:7f:b9:e3:75:b9:38:d2:
29:d0:ca:66:2c:41:2f:30:a1:7e:51:fe:10:fd:5d:
c9:ce:45:77:9b:44:39:34:86:69:19:c2:e0:00:df:
b9:07:bb:56:b8:e9:8b:66:90:60:f4:11:c4:77:b4:
13:e5:d8:e8:a7:8c:f9:18:6b:4e:09:ef:0e:bc:7b:
2c:0e:1e:13:f3:e6:a6:6d:0a:d7:5c:0f:97:71:45:
f1:82:03:79:46:3a:df:39:24:1c:08:02:07:68:28:
e0:82:af:38:4d:8e:ed:84:49:fc:53:0e:88:86:b3:
ab:cf:1f:5b:3f:fc:5b:30:9b:c0:88:34:49:f8:ba:
56:3a:2f:ed:bc:d7:ad:85:5c:ac:a8:ac:fa:31:23:
73:67:d9:a7:f4:65:77:ba:b6:3c:f5:72:88:26:5a:
91:8c:6d:1f:18:76:30:c7:52:8f:7c:10:46:77:85:
de:bc:18:0e:96:0d:a4:47:11:8b:55:a5:d6:bb:91:
23:05:1d:e6:1e:a5:65:a5:b5:6a:c4:7f:05:33:1a:
b8:ea:02:b4:34:e0:a6:b6:13:07:8b:bb:dd:f7:34:
0f:38:4a:d7:2d:43:03:82:fa:d5:fc:ec:cb:a9:98:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:F4:55:FA:60:9E:51:CE:74:24:06:49:05:5D:7E:14:1F:25:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sWH0VfpgnlHOdCQGSQVdfhQfJS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:d2:c2:68:ab:30:76:4a:23:60:80:88:8e:44:9f:b5:91:85:
65:02:9c:36:94:1a:07:d9:e4:7e:fd:2a:6a:43:4b:82:94:db:
1b:d7:56:37:18:70:a8:2c:bb:56:28:d4:5e:82:fb:f4:27:0f:
1a:0e:c2:bd:c1:4d:ee:a4:1f:00:b5:77:22:b4:47:03:28:2b:
81:27:cd:01:29:fd:36:e1:f3:6b:e9:0c:e1:88:75:a4:b7:a2:
4f:42:4d:a8:90:13:c2:0b:27:c6:df:c2:47:4e:ac:9b:9b:ed:
33:a1:c5:58:44:bb:54:97:0a:d8:0b:d2:9a:8f:43:1d:69:9b:
5e:df:5a:0d:7a:9f:74:46:26:2a:50:77:80:4f:06:f9:e4:c3:
dc:97:ea:4c:aa:ce:06:5a:2e:9c:f0:80:65:ab:ed:90:90:70:
cb:df:4b:3f:f7:7c:cb:6b:cf:11:68:f8:08:8a:f6:93:bc:3e:
d6:d5:c7:aa:a4:18:9c:5c:41:d0:63:4d:3a:7d:d6:65:c8:ab:
ff:89:48:2c:a8:2b:e7:78:04:a3:59:47:48:8b:48:9b:9b:ee:
5a:50:f0:c4:13:6b:2d:bb:39:32:4c:9c:16:25:e0:29:74:35:
6b:f4:70:36:f8:e0:51:5b:34:d1:8a:b5:0c:f2:8d:a3:cc:f8:
41:dd:87:a2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQy
MzM5MjJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEIxNjFGNDU1RkE2MDlF
NTFDRTc0MjQwNjQ5MDU1RDdFMTQxRjI1MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp1b2RXgsB84s4osPZyowgEBGhDsT7f7njdbk40inQymYsQS8w
oX5R/hD9XcnORXebRDk0hmkZwuAA37kHu1a46YtmkGD0EcR3tBPl2OinjPkYa04J
7w68eywOHhPz5qZtCtdcD5dxRfGCA3lGOt85JBwIAgdoKOCCrzhNju2ESfxTDoiG
s6vPH1s//Fswm8CINEn4ulY6L+28162FXKyorPoxI3Nn2af0ZXe6tjz1cogmWpGM
bR8YdjDHUo98EEZ3hd68GA6WDaRHEYtVpda7kSMFHeYepWWltWrEfwUzGrjqArQ0
4Ka2EweLu933NA84StctQwOC+tX87MupmEG/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsWH0VfpgnlHOdCQGSQVdfhQfJS0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9zV0gwVmZwZ25sSE9kQ1FH
U1FWZGZoUWZKUzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAI3SwmirMHZKI2CAiI5En7WRhWUCnDaUGgfZ
5H79KmpDS4KU2xvXVjcYcKgsu1Yo1F6C+/QnDxoOwr3BTe6kHwC1dyK0RwMoK4En
zQEp/Tbh82vpDOGIdaS3ok9CTaiQE8ILJ8bfwkdOrJub7TOhxVhEu1SXCtgL0pqP
Qx1pm17fWg16n3RGJipQd4BPBvnkw9yX6kyqzgZaLpzwgGWr7ZCQcMvfSz/3fMtr
zxFo+AiK9pO8PtbVx6qkGJxcQdBjTTp91mXIq/+JSCyoK+d4BKNZR0iLSJub7lpQ
8MQTay27OTJMnBYl4Cl0NWv0cDb44FFbNNGKtQzyjaPM+EHdh6I=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:14:56 2025 by rpki-client