Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uSbI9oO8hd2U1m8uo3P2_NfpPxg.roa
File: uSbI9oO8hd2U1m8uo3P2_NfpPxg.roa (raw, json)
Hash identifier: I1+k/OovooPf792J7pX37b2530Mcfig9XRs2WrjCl5Q=
Subject key identifier: B9:26:C8:F6:83:BC:85:DD:94:D6:6F:2E:A3:73:F6:FC:D7:E9:3F:18
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 184E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uSbI9oO8hd2U1m8uo3P2_NfpPxg.roa
Signing time: Sun 08 Jun 2025 11:39:34 +0000
ROA not before: Sun 08 Jun 2025 11:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6222 (0x184e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 11:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B926C8F683BC85DD94D66F2EA373F6FCD7E93F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:98:4f:17:ec:65:8f:05:73:6e:32:32:b2:
98:80:ec:71:d3:f1:6c:e7:80:e0:9a:a8:24:d7:c4:
af:1c:9e:85:66:db:f1:02:9c:1b:4f:b6:2a:a4:a3:
67:bb:c7:9c:8b:c9:cb:0b:a2:77:0c:a4:59:8a:78:
54:74:48:bf:cf:3e:a1:db:50:41:f6:0c:47:ee:2a:
3f:4b:ea:1d:ad:e6:3a:a2:0f:0e:77:de:fc:1e:5d:
aa:a5:f6:09:c8:28:56:60:f5:c3:f9:63:ae:5a:b1:
06:04:ad:b0:eb:e9:34:04:dc:6c:b5:85:e1:99:96:
6e:fe:cd:33:fb:6a:d2:f5:77:d6:40:dc:82:93:d2:
b5:22:64:3e:bd:7e:99:74:77:be:41:c0:62:d3:a1:
fe:56:73:a6:ae:aa:52:a6:b3:97:20:9b:87:3f:6b:
84:fd:1f:79:9f:03:5e:88:fa:a1:4d:b2:2b:8f:a9:
1e:0b:a0:2b:a1:3d:04:e7:91:6e:63:fc:ea:5e:31:
2a:77:b3:2d:8a:e3:8a:8a:85:1f:4f:b2:8b:f7:d4:
97:96:5a:74:d5:d1:4d:e2:ae:9c:f1:6c:20:e6:59:
d8:83:58:28:d4:45:fb:c2:b8:47:73:9f:07:2f:56:
0d:b1:81:bf:2c:53:c1:ac:35:d0:c6:93:fa:16:d4:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:C8:F6:83:BC:85:DD:94:D6:6F:2E:A3:73:F6:FC:D7:E9:3F:18
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uSbI9oO8hd2U1m8uo3P2_NfpPxg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:a7:82:92:de:da:24:4f:5e:ee:68:09:24:52:39:ae:ac:5a:
67:ce:17:09:21:05:57:3f:3b:21:41:e6:43:4f:c9:c6:dc:0e:
67:6d:63:f4:be:f9:d7:b2:cc:a6:5b:e9:11:fb:06:f1:d3:39:
4f:30:63:27:c9:9c:2c:2c:97:18:09:8e:4c:a8:53:db:5a:79:
84:56:51:ac:22:ef:02:15:c9:c1:f9:22:80:9c:a6:ea:e7:d1:
eb:77:c3:99:01:6e:0b:84:8c:da:c1:fa:c6:a5:3d:8e:a9:bc:
86:a4:ff:1f:e0:45:58:0f:e3:ee:e9:c8:55:9e:23:f1:02:61:
3b:ee:cb:c0:36:26:64:7c:74:0b:da:e3:43:97:31:82:66:f5:
7f:97:c0:b3:6d:c8:4a:59:21:11:07:a6:8c:8f:bc:f9:f1:bf:
3f:82:1b:75:b5:38:b6:9b:a2:3e:62:cc:ed:08:61:76:28:1d:
75:9f:22:16:ba:f2:95:72:93:1d:6a:0d:69:2c:dc:2f:1b:e3:
dc:ba:57:d8:87:57:08:4d:dd:f9:df:63:1a:31:a9:e1:4f:b1:
3a:67:f7:1a:72:ec:17:76:19:e6:4a:48:c5:71:1c:ca:2f:22:
7c:a6:a6:c6:2f:96:55:12:fe:66:94:f5:ad:93:f5:f8:84:26:
13:bd:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:04 2025 by rpki-client