Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0CeDtujUMCSCZ-Qxx2RcSrzHJ_I.roa
File: 0CeDtujUMCSCZ-Qxx2RcSrzHJ_I.roa (raw, json)
Hash identifier: +Q1svyHVT11YYl9Tt2iYjzBkZOjNgagKG1KXFTFS1Go=
Subject key identifier: D0:27:83:B6:E8:D4:30:24:82:67:E4:31:C7:64:5C:4A:BC:C7:27:F2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CF9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0CeDtujUMCSCZ-Qxx2RcSrzHJ_I.roa
Signing time: Sat 24 May 2025 09:09:16 +0000
ROA not before: Sat 24 May 2025 09:09:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 09:09:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D02783B6E8D430248267E431C7645C4ABCC727F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:32:c0:25:10:77:d0:84:c5:3f:77:e7:8e:
87:56:58:6a:a8:cf:e8:d5:c3:52:15:b1:98:64:4d:
04:cc:1a:c7:96:5a:af:94:af:5a:7a:65:3b:e4:1b:
0e:e0:2e:5e:9b:e0:d3:56:e0:f0:dd:7e:f2:89:0f:
54:cf:e0:8f:e7:7a:1c:84:86:9b:6e:a7:1f:32:d8:
88:c6:98:27:68:a2:22:94:0f:7a:a9:67:ba:70:7f:
f9:34:46:6b:56:5e:bb:70:70:be:0a:17:57:89:45:
f7:11:dd:dc:43:53:21:70:75:13:35:55:fc:99:1c:
53:83:c8:75:1f:e3:36:52:e1:67:d2:85:9f:eb:de:
ff:9c:c1:f7:db:f0:ee:6b:93:53:3b:6a:76:56:83:
6f:ce:39:5a:b7:80:ee:52:ee:2c:89:07:80:7b:ab:
47:8a:64:e9:90:ab:65:8c:9a:71:9d:ed:fe:ec:19:
5f:b7:06:42:8e:df:d0:99:a8:fe:b9:1b:a6:74:82:
87:15:d8:54:31:4c:4a:d1:0d:ea:42:5f:6e:0a:01:
21:cc:50:89:3b:c9:2d:a1:0e:10:a3:67:bd:36:1e:
3a:22:3a:f6:43:3f:fb:b1:7c:98:30:63:93:ff:86:
48:1a:f1:e4:6a:dd:c1:28:0e:60:6f:7c:3d:3b:db:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:83:B6:E8:D4:30:24:82:67:E4:31:C7:64:5C:4A:BC:C7:27:F2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0CeDtujUMCSCZ-Qxx2RcSrzHJ_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:1f:b6:63:34:2d:2d:be:71:0b:66:13:d4:0e:6d:5d:f8:8a:
08:33:56:58:5d:8e:ac:ea:47:27:d7:2d:4d:f5:7e:eb:d1:93:
5c:dc:2c:d6:8a:24:cd:db:95:4d:f7:46:94:76:94:c2:49:53:
06:11:6b:51:9c:af:af:52:78:ec:e7:b9:9a:aa:2d:b2:34:5a:
3f:53:b4:c3:63:7f:f0:ec:cf:93:e0:3f:95:00:62:3a:1a:b8:
08:a9:3c:e0:95:70:1c:bd:4f:78:b6:94:a4:f8:bb:7d:ca:1e:
73:1e:68:6b:b6:5e:c4:81:c3:5f:fe:bf:05:ee:30:5b:c7:98:
30:56:b4:0c:6a:d7:96:36:34:b5:eb:5d:44:53:f1:2f:de:2d:
54:8e:83:a0:da:0c:3c:34:db:7e:14:31:0b:6b:f8:f0:0f:29:
e6:34:3e:20:cf:33:30:ab:c6:59:65:b4:60:d9:8d:a9:ed:d9:
15:41:a0:b1:e8:6f:e8:1c:39:44:9a:ff:3e:3e:8d:cc:19:79:
78:11:d6:18:ca:a3:f5:8f:09:1b:2e:24:e4:6b:e4:6d:35:14:
e7:f3:71:e7:b7:4c:63:cc:46:55:b6:0b:08:e4:93:ea:43:26:
19:15:13:8e:1e:71:cd:53:b8:8c:a3:cb:cc:62:45:fe:45:4c:
94:44:3c:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw
OTA5MTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQwMjc4M0I2RThENDMw
MjQ4MjY3RTQzMUM3NjQ1QzRBQkNDNzI3RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7tTLAJRB30ITFP3fnjodWWGqoz+jVw1IVsZhkTQTMGseWWq+U
r1p6ZTvkGw7gLl6b4NNW4PDdfvKJD1TP4I/nehyEhptupx8y2IjGmCdooiKUD3qp
Z7pwf/k0RmtWXrtwcL4KF1eJRfcR3dxDUyFwdRM1VfyZHFODyHUf4zZS4WfShZ/r
3v+cwffb8O5rk1M7anZWg2/OOVq3gO5S7iyJB4B7q0eKZOmQq2WMmnGd7f7sGV+3
BkKO39CZqP65G6Z0gocV2FQxTErRDepCX24KASHMUIk7yS2hDhCjZ702HjoiOvZD
P/uxfJgwY5P/hkga8eRq3cEoDmBvfD0723ihAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0CeDtujUMCSCZ+Qxx2RcSrzHJ/IwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8wQ2VEdHVqVU1DU0NaLVF4
eDJSY1NyekhKX0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABIftmM0LS2+cQtmE9QObV34iggzVlhdjqzq
RyfXLU31fuvRk1zcLNaKJM3blU33RpR2lMJJUwYRa1Gcr69SeOznuZqqLbI0Wj9T
tMNjf/Dsz5PgP5UAYjoauAipPOCVcBy9T3i2lKT4u33KHnMeaGu2XsSBw1/+vwXu
MFvHmDBWtAxq15Y2NLXrXURT8S/eLVSOg6DaDDw0234UMQtr+PAPKeY0PiDPMzCr
xllltGDZjant2RVBoLHob+gcOUSa/z4+jcwZeXgR1hjKo/WPCRsuJORr5G01FOfz
cee3TGPMRlW2Cwjkk+pDJhkVE44ecc1TuIyjy8xiRf5FTJREPMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:19 2025 by rpki-client