Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0NBsNDc1J-jLDWJkKx124HXML3I.roa
File: 0NBsNDc1J-jLDWJkKx124HXML3I.roa (raw, json)
Hash identifier: bMBw7/xueb5Tl0qtAFeWUhv3m9lRqW5QrfmXGIH1swQ=
Subject key identifier: D0:D0:6C:34:37:35:27:E8:CB:0D:62:64:2B:1D:76:E0:75:CC:2F:72
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09F5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0NBsNDc1J-jLDWJkKx124HXML3I.roa
Signing time: Tue 20 May 2025 08:38:56 +0000
ROA not before: Tue 20 May 2025 08:38:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549 (0x9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 08:38:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D0D06C34373527E8CB0D62642B1D76E075CC2F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:7d:6c:e1:05:66:23:91:e4:a1:87:cb:d2:
2f:48:17:88:0f:11:9f:60:fc:15:ba:50:d1:59:08:
29:42:9a:fb:d5:88:ae:3a:72:57:d2:a2:a8:73:4c:
20:a3:57:50:00:17:fd:7b:f5:cf:66:9c:61:48:c4:
79:2c:81:e5:a8:b4:1e:ff:57:b6:f1:c3:4e:e8:ec:
f7:d4:6b:28:f6:f3:c1:30:3e:48:46:79:21:01:8b:
34:1b:b0:f0:ba:9a:1b:b5:9c:5c:3b:9f:3b:f5:f6:
f3:38:01:7d:d8:e1:57:95:af:88:d1:4a:7e:c5:cd:
1f:68:4c:c1:d4:20:41:e4:49:05:a7:39:88:e3:19:
31:96:31:41:01:d1:ac:7f:0c:be:41:dd:a0:4a:d1:
2f:d2:96:1e:4f:4f:90:94:7b:ac:98:b7:84:e4:b8:
01:ab:02:69:70:ac:c2:99:80:ae:53:8f:c0:26:8c:
29:a9:b8:01:ab:7b:73:d7:e5:2e:e0:be:a7:06:72:
51:80:ad:fd:52:be:7b:57:3b:4a:06:38:3b:e7:51:
cb:9f:b5:63:7a:61:a6:c8:45:dc:ad:95:51:5f:af:
a9:43:5e:7f:3b:4b:55:3c:12:d1:d6:0b:f4:d8:ee:
d0:d1:19:e9:b0:57:35:76:65:46:66:21:10:ec:9e:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:6C:34:37:35:27:E8:CB:0D:62:64:2B:1D:76:E0:75:CC:2F:72
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0NBsNDc1J-jLDWJkKx124HXML3I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:3c:b8:4f:e0:cb:54:f3:3e:38:ce:19:e9:e5:94:07:0b:cd:
47:0a:c7:60:27:a4:e2:2a:8f:4b:1a:9f:1e:cc:e3:41:29:a4:
f4:c8:ea:14:1c:28:44:19:63:19:c2:38:8a:f8:21:b0:98:65:
d6:ab:53:92:e5:52:fc:5b:7e:cc:de:88:aa:f2:8a:b9:35:99:
87:48:f2:e8:92:f7:49:b0:37:6d:7e:31:ee:99:96:30:61:54:
3c:bd:c3:78:ce:4a:70:34:f9:58:fe:4d:4e:d1:46:5f:a0:ed:
7f:4f:0b:0c:fb:e4:a6:15:aa:40:87:cb:f2:96:c5:87:e5:5e:
3e:48:17:b5:12:7b:0d:cd:be:32:e8:8c:54:48:84:b1:b0:b6:
f4:46:93:d7:77:f3:dd:e3:42:5b:7e:4f:c2:6d:46:dc:25:68:
19:29:ae:f8:07:b8:c0:00:22:e0:6f:99:b8:77:66:c2:ab:e3:
14:fa:18:68:cc:38:2a:aa:87:fa:a7:a6:a2:aa:fb:16:6f:36:
06:c8:c6:d8:57:2c:fd:3e:c2:48:71:5e:61:55:4d:ba:55:d8:
48:0e:97:2f:bb:e5:e6:25:54:b1:15:7f:88:a2:05:5e:26:c6:
29:10:d9:1e:99:77:08:b1:85:4d:7d:1a:94:2a:e8:3f:c7:51:
94:b7:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:31 2025 by rpki-client