Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1vPCiDP6LkkNzzVXifvOrZPL79s.roa
File: 1vPCiDP6LkkNzzVXifvOrZPL79s.roa (raw, json)
Hash identifier: V225s9o2qARDS8ZN05+Bfpp3PyXVf6ZLaVi+3aSev40=
Subject key identifier: D6:F3:C2:88:33:FA:2E:49:0D:CF:35:57:89:FB:CE:AD:93:CB:EF:DB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CAD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1vPCiDP6LkkNzzVXifvOrZPL79s.roa
Signing time: Fri 23 May 2025 23:38:32 +0000
ROA not before: Fri 23 May 2025 23:38:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 23:38:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D6F3C28833FA2E490DCF355789FBCEAD93CBEFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:4b:84:df:28:09:36:0b:62:ef:b9:91:9d:
7f:a6:c3:ce:67:85:81:c2:de:d7:f2:58:16:2b:87:
d5:00:e6:a8:59:5c:29:46:3f:97:83:0c:83:38:1a:
fa:1d:85:30:91:20:98:11:14:0b:7a:3a:3d:fb:74:
cc:73:26:af:09:70:bb:84:12:af:05:03:90:83:38:
db:e6:80:c5:84:be:3e:a8:04:bc:3c:6c:2a:92:d9:
b0:17:e3:16:31:e8:fe:a8:91:f1:4e:ea:c8:89:7e:
dc:9f:44:32:07:cc:b6:8d:92:be:b5:06:c0:c9:78:
74:56:2f:42:4d:5c:c4:f1:eb:83:f6:65:5b:e5:80:
6c:aa:9c:32:84:ee:a0:5d:d4:e9:ae:e9:00:75:3c:
92:5e:99:8c:4b:89:10:23:bc:c9:bd:69:47:10:eb:
ba:22:d4:ac:0d:27:c6:75:8d:36:b1:fb:8a:be:40:
dd:51:83:46:5b:50:84:d0:7b:63:64:7a:fa:a7:58:
18:3d:da:60:58:30:b6:72:4c:39:06:04:55:14:17:
f7:44:49:0e:85:0b:32:9f:df:03:86:00:c2:64:12:
6a:82:96:14:59:00:b2:5e:87:ab:36:44:23:dc:21:
45:e5:90:3f:2c:58:21:e4:c3:14:c4:2b:8b:48:65:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:C2:88:33:FA:2E:49:0D:CF:35:57:89:FB:CE:AD:93:CB:EF:DB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1vPCiDP6LkkNzzVXifvOrZPL79s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:6b:87:bc:36:15:37:dd:c5:a4:ce:2c:4c:31:0b:95:8e:f7:
bf:ae:9b:92:e1:5e:0b:d1:62:32:16:d7:0b:32:4f:f6:df:05:
ad:04:cb:74:44:8d:9a:f6:57:5a:ff:f3:d4:30:d7:2b:3c:6e:
9e:c6:5a:92:ba:81:e5:7d:a7:9b:2f:25:1a:e5:59:9d:5f:9c:
07:11:e4:d5:34:20:2f:74:67:95:80:e5:12:f7:89:4b:50:cc:
d4:44:0e:cd:df:ff:67:09:e3:c4:d8:09:6d:bc:8c:a5:6f:d4:
a8:71:cb:98:72:eb:c3:2d:fb:01:8a:1d:a7:f6:9d:66:1c:59:
5a:97:60:ab:45:ce:bd:14:be:27:bd:d4:cf:b4:9f:49:fd:7a:
0e:a0:50:11:36:a3:72:f4:7b:e9:a2:f1:e8:d0:08:99:5f:fd:
ed:fc:a5:7c:b8:bb:7c:28:98:37:c7:6d:8d:79:ab:18:c7:2e:
6b:be:d1:84:75:33:c1:a6:6b:eb:b6:1a:c8:8e:cb:79:49:7f:
b1:32:16:82:aa:0e:e4:e6:a8:79:46:6c:31:13:0a:58:b1:c6:
97:b3:e6:56:81:e2:2c:65:05:b7:16:ff:62:b9:44:93:67:20:
5e:a3:bd:8d:8b:fd:4a:5a:f2:c0:d0:fa:c3:3d:c8:26:05:8e:
79:30:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:26 2025 by rpki-client