Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wkmBf7WS6YERklMCKV4m3efwUPM.roa
File: wkmBf7WS6YERklMCKV4m3efwUPM.roa (raw, json)
Hash identifier: 9auztbEkS8xH2eTxq7KS47TMdY7XK590R8hfnU9bNCQ=
Subject key identifier: C2:49:81:7F:B5:92:E9:81:11:92:53:02:29:5E:26:DD:E7:F0:50:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AAA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wkmBf7WS6YERklMCKV4m3efwUPM.roa
Signing time: Wed 11 Jun 2025 15:09:57 +0000
ROA not before: Wed 11 Jun 2025 15:09:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6826 (0x1aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 15:09:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C249817FB592E98111925302295E26DDE7F050F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:9d:1e:9c:ae:e0:84:45:7f:f6:df:e7:a3:
98:0b:54:d9:51:96:d1:cf:12:34:32:e2:91:dd:a7:
5b:71:d1:e0:f7:c0:52:29:1a:38:11:dd:8e:9a:f8:
66:da:84:88:22:5b:a8:d5:be:90:dc:ed:c2:21:85:
c1:48:6c:95:a5:d9:d7:f9:f0:fa:38:d1:4b:62:51:
cd:a6:4f:f4:b2:99:eb:bc:30:eb:7d:dc:f1:cb:4a:
58:2c:b5:e7:63:26:5c:2d:50:e6:3c:be:14:e9:65:
5f:c9:89:2e:ff:f9:99:92:50:68:89:2b:7c:9a:26:
1c:d8:93:0d:db:86:6a:15:52:14:99:a2:24:24:e5:
56:66:f9:56:b9:fe:8f:e0:d5:49:cb:96:87:17:49:
56:4b:a3:1e:8b:d3:be:31:a4:ef:8d:9b:12:52:cf:
58:ba:64:50:c5:d1:aa:54:ff:34:8a:67:50:14:d6:
e5:83:f6:b3:77:24:34:52:4e:c7:0b:7a:a2:bf:02:
a3:0d:49:71:ac:bf:65:9f:85:de:1c:50:3d:50:47:
c6:cc:ff:e8:34:ac:a6:33:1a:44:88:f4:ff:38:b0:
df:36:47:61:45:58:91:43:34:b8:15:48:03:a4:d8:
c3:02:d1:03:6c:63:2f:3b:7e:43:e1:a1:0b:aa:ab:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:81:7F:B5:92:E9:81:11:92:53:02:29:5E:26:DD:E7:F0:50:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wkmBf7WS6YERklMCKV4m3efwUPM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:7b:19:7c:f5:7c:6a:f9:fb:3c:9e:9e:85:9a:c3:f6:f0:17:
e5:f6:5b:97:32:b5:31:5e:5b:bc:dc:ca:69:1c:74:9d:5a:b0:
53:6f:40:7e:f3:d5:ad:ee:41:f4:6e:85:6d:26:3b:37:07:ed:
8e:28:de:83:b1:04:78:94:38:04:57:da:ae:fc:bf:a6:1c:8c:
ce:e0:7a:01:c1:f1:8e:47:8a:d4:6f:48:a2:2d:a3:67:a8:e4:
52:50:d0:ba:c2:81:1a:60:ea:b6:c8:a9:c0:3a:cf:0a:64:55:
7a:ac:dd:5e:18:c4:af:2f:1b:77:f4:e0:80:b3:0f:81:3c:6d:
cf:84:17:09:b4:76:07:7d:90:6c:1c:15:6f:9f:8c:1c:c7:02:
0d:30:5c:83:ae:74:1c:ea:48:89:54:68:c6:2c:79:2c:f0:2f:
8e:47:48:13:46:1e:6a:fa:5a:44:b4:95:bd:67:0a:16:84:3c:
d1:dd:2f:54:5f:e1:8d:a9:a9:f0:f3:6c:e2:5c:48:b1:9e:df:
e6:6a:a7:8c:ad:8c:ea:54:5b:2c:a5:f1:05:75:95:65:80:3e:
10:84:a3:23:91:f6:dc:d7:e0:e5:f8:66:18:c3:ea:2c:21:6c:
56:6d:16:e9:04:f5:4f:53:fd:c7:bf:cf:20:fb:f3:86:3d:c6:
72:8a:26:89
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTEx
NTA5NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMyNDk4MTdGQjU5MkU5
ODExMTkyNTMwMjI5NUUyNkRERTdGMDUwRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx1p0enK7ghEV/9t/no5gLVNlRltHPEjQy4pHdp1tx0eD3wFIp
GjgR3Y6a+GbahIgiW6jVvpDc7cIhhcFIbJWl2df58Po40UtiUc2mT/Symeu8MOt9
3PHLSlgstedjJlwtUOY8vhTpZV/JiS7/+ZmSUGiJK3yaJhzYkw3bhmoVUhSZoiQk
5VZm+Va5/o/g1UnLlocXSVZLox6L074xpO+NmxJSz1i6ZFDF0apU/zSKZ1AU1uWD
9rN3JDRSTscLeqK/AqMNSXGsv2Wfhd4cUD1QR8bM/+g0rKYzGkSI9P84sN82R2FF
WJFDNLgVSAOk2MMC0QNsYy87fkPhoQuqqxKRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwkmBf7WS6YERklMCKV4m3efwUPMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93a21CZjdXUzZZRVJrbE1D
S1Y0bTNlZndVUE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBADt7GXz1fGr5+zyenoWaw/bwF+X2W5cytTFe
W7zcymkcdJ1asFNvQH7z1a3uQfRuhW0mOzcH7Y4o3oOxBHiUOARX2q78v6YcjM7g
egHB8Y5HitRvSKIto2eo5FJQ0LrCgRpg6rbIqcA6zwpkVXqs3V4YxK8vG3f04ICz
D4E8bc+EFwm0dgd9kGwcFW+fjBzHAg0wXIOudBzqSIlUaMYseSzwL45HSBNGHmr6
WkS0lb1nChaEPNHdL1Rf4Y2pqfDzbOJcSLGe3+Zqp4ytjOpUWyyl8QV1lWWAPhCE
oyOR9tzX4OX4ZhjD6iwhbFZtFukE9U9T/ce/zyD784Y9xnKKJok=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:27:05 2025 by rpki-client