Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vqlZD9eklIDk0RBuL9GYWPhla3g.roa
File: vqlZD9eklIDk0RBuL9GYWPhla3g.roa (raw, json)
Hash identifier: qUzpylREGWBEKS5bf2gsyzuUFZOqZRyYdtmx5R9BPWs=
Subject key identifier: BE:A9:59:0F:D7:A4:94:80:E4:D1:10:6E:2F:D1:98:58:F8:65:6B:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 177A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vqlZD9eklIDk0RBuL9GYWPhla3g.roa
Signing time: Sat 07 Jun 2025 09:09:34 +0000
ROA not before: Sat 07 Jun 2025 09:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6010 (0x177a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 09:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BEA9590FD7A49480E4D1106E2FD19858F8656B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:a1:44:9d:e3:84:cd:98:59:fc:d8:03:99:
b8:cd:f0:f4:f8:4a:5d:56:84:65:1e:8a:65:6c:e4:
17:1f:61:30:a9:44:2f:79:2c:0b:57:97:81:48:f9:
1d:81:6b:22:28:fe:e8:55:a0:5b:f5:53:bc:49:fb:
91:eb:d0:c4:06:c9:c0:74:e4:ed:eb:b5:85:36:29:
f0:2e:78:26:78:3e:ad:8a:03:6d:f2:15:fe:63:b6:
65:76:e1:70:44:9a:5f:ca:ba:c0:a4:8e:97:fa:94:
89:da:54:05:73:78:9f:ed:69:82:3c:b3:1e:62:e7:
7c:63:1d:e7:dd:6d:59:ba:68:cb:09:f1:77:7e:10:
1c:72:e9:0f:6c:1d:52:c6:d1:6d:bb:2d:cb:6c:72:
54:88:cd:fd:dd:0d:d7:de:77:ab:02:ea:93:0f:b3:
2e:69:a3:74:6e:14:e4:6b:55:f3:eb:62:d9:f2:d5:
4c:88:ee:3a:21:f6:3f:94:2f:95:92:9d:18:e0:67:
6d:6b:f1:52:4b:8b:80:87:5d:dc:b9:0e:40:e3:cd:
9f:e1:72:85:00:e8:b4:71:6c:32:7b:5e:1c:35:7e:
12:f1:43:a9:14:05:c5:e6:65:f2:2a:8e:7a:74:16:
f4:c5:b2:35:15:7f:25:0c:6c:40:a1:e7:7c:46:ff:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:59:0F:D7:A4:94:80:E4:D1:10:6E:2F:D1:98:58:F8:65:6B:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vqlZD9eklIDk0RBuL9GYWPhla3g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:32:f4:11:ea:b9:25:a1:ab:e1:e8:75:73:42:bf:80:37:56:
4f:6d:ee:2e:2e:93:90:03:c5:83:8c:53:7c:72:35:2e:09:b9:
7e:4c:74:f4:a2:13:c0:db:2f:d5:7e:4f:63:4b:5d:fe:c9:5c:
cb:6e:93:7d:4c:c1:23:8d:2d:68:f1:30:36:f3:7d:c3:d3:47:
0e:a8:87:20:8f:32:a6:a7:79:e9:de:b6:08:da:c9:d8:7d:cb:
12:d9:a6:6e:5f:14:26:6c:e3:55:eb:4b:60:69:b0:62:34:5f:
a2:74:23:88:e6:57:fd:fd:d2:fb:29:cb:f9:88:2a:41:39:21:
5d:28:17:2e:74:0a:93:df:3f:f4:39:34:40:4e:4a:2a:3f:0d:
e9:2c:4b:18:9a:4a:44:e9:b0:1c:e5:08:73:3a:2d:6c:1a:73:
f0:6d:f2:cd:e8:31:2b:66:99:01:2a:b9:e0:87:90:95:ec:67:
2e:18:91:49:37:07:d7:79:b3:03:48:8d:ca:f1:ee:fa:92:f4:
ea:17:6f:33:51:1c:d3:68:bd:76:7a:4a:f8:f4:5c:83:cb:50:
24:e1:d4:54:a3:32:3f:38:eb:b3:14:78:59:ba:97:52:3f:35:
09:02:48:5f:5a:66:2d:6b:87:7f:4f:ba:c6:07:af:1b:bb:37:
1d:81:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:58:55 2025 by rpki-client