Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/x-_zeCfcV1ddQJWKD9HAdtf9c9U.roa
File: x-_zeCfcV1ddQJWKD9HAdtf9c9U.roa (raw, json)
Hash identifier: ESnEdVxq0fodCNyL2VjuTJxHgS11GsOuycMCWdKxP6I=
Subject key identifier: C7:EF:F3:78:27:DC:57:57:5D:40:95:8A:0F:D1:C0:76:D7:FD:73:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 176E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x-_zeCfcV1ddQJWKD9HAdtf9c9U.roa
Signing time: Sat 07 Jun 2025 07:40:13 +0000
ROA not before: Sat 07 Jun 2025 07:40:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5998 (0x176e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 07:40:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C7EFF37827DC57575D40958A0FD1C076D7FD73D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8e:3d:5f:d0:dc:fb:dd:8f:93:44:c7:0b:42:
95:12:e0:fe:70:d4:2d:97:1f:96:44:e3:0f:aa:0e:
d9:85:3e:82:00:6d:01:de:fb:70:45:9c:5c:25:c4:
28:4b:a7:ca:a9:9d:2b:39:ec:94:0a:3b:ed:82:59:
a7:bc:46:ba:3f:28:13:33:22:c6:a3:ac:bb:82:43:
7a:72:64:c3:66:2c:cd:9b:da:72:c4:19:29:fb:54:
cc:46:b1:f7:27:58:4a:42:d4:d5:2c:8b:93:19:2d:
1a:ad:84:7d:4a:2e:b6:c7:d8:ee:ed:b2:43:4a:b3:
86:06:14:d5:5c:75:6d:db:0f:4b:bc:02:d8:61:e5:
ea:d6:f2:98:b8:32:e8:99:a6:25:f8:f7:d1:de:3a:
48:88:b8:87:81:bc:1a:90:71:09:a7:4b:1b:d2:d4:
82:03:74:f0:dd:24:20:45:eb:c7:ce:58:e2:7a:5d:
09:2d:e8:2c:c7:17:3d:dc:bc:ba:e9:0a:c9:ab:03:
1f:71:bd:df:b9:7c:72:f6:35:4b:07:e4:f9:b5:7b:
98:e7:79:78:d5:f0:52:bf:e6:d1:44:05:6f:f9:9e:
ff:0d:1d:a2:81:be:6b:87:2b:e6:29:fd:6a:d0:3f:
81:cc:e0:a5:3d:85:f4:a7:35:2a:e5:06:c6:3b:e5:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:F3:78:27:DC:57:57:5D:40:95:8A:0F:D1:C0:76:D7:FD:73:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x-_zeCfcV1ddQJWKD9HAdtf9c9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:f6:96:12:8d:2b:10:b1:0d:31:ae:b8:3b:fb:bd:ef:b5:75:
1f:c2:f6:e3:fc:1d:54:3a:d6:9e:1f:97:27:12:84:cc:54:6e:
96:35:a5:c2:0c:bf:25:4b:37:3c:03:40:0e:43:6d:67:46:9d:
63:4b:51:00:ba:fa:37:de:c7:d5:8f:dd:24:5c:cb:51:94:ff:
0e:65:e2:dc:2c:ad:d4:6e:20:6f:59:c7:c6:4d:01:8b:62:9b:
d1:14:b3:b2:03:b4:5e:78:93:fa:01:33:4d:7b:b7:74:1d:84:
d9:7e:71:a8:5c:1d:eb:76:34:ba:5e:b1:16:68:fb:6b:8a:d3:
08:ed:1a:4f:87:34:1f:50:ed:aa:1c:d6:df:05:6a:17:97:13:
f1:54:3c:3d:a5:f6:23:a8:ca:25:9b:a6:e4:25:b0:e5:1d:2f:
2c:c0:31:92:dc:7d:37:69:23:95:52:0d:17:77:4f:d2:eb:ff:
f3:44:6a:cb:de:69:65:bf:33:97:4a:a0:00:34:aa:dc:a5:bf:
66:b6:00:15:66:8b:24:87:ce:f0:cd:c0:d6:76:95:c7:c5:73:
54:ac:a7:2b:6b:4f:13:e9:27:8f:94:6d:85:d9:55:78:a7:cd:
b3:39:84:0a:55:cb:df:be:08:87:d4:80:84:04:35:6d:cd:81:
fa:d5:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:18 2025 by rpki-client