Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2BrQhSP9zu58R44oiucroNMO9NM.roa
File: 2BrQhSP9zu58R44oiucroNMO9NM.roa (raw, json)
Hash identifier: Ktvom/rF3Z+J8gOu/8UQ2ABWK8/dUq1iYYRt6jwpRjA=
Subject key identifier: D8:1A:D0:85:23:FD:CE:EE:7C:47:8E:28:8A:E7:2B:A0:D3:0E:F4:D3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2BrQhSP9zu58R44oiucroNMO9NM.roa
Signing time: Sun 01 Jun 2025 06:39:14 +0000
ROA not before: Sun 01 Jun 2025 06:39:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4837 (0x12e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 06:39:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D81AD08523FDCEEE7C478E288AE72BA0D30EF4D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:25:88:0a:41:52:16:5f:95:a7:9e:24:86:
fd:47:94:1e:04:93:b6:86:90:57:c1:2e:65:f4:25:
ce:e4:ca:7c:21:c7:75:8b:49:68:58:2d:b1:01:9e:
2a:44:d7:36:d0:90:d0:a5:a4:2c:56:a4:ed:7b:06:
41:7f:a3:97:cc:31:90:de:b2:b3:a9:f9:e9:9e:67:
2f:78:16:56:d8:dd:40:7a:44:eb:6a:01:46:91:1b:
d4:23:56:d8:24:b3:e8:2d:52:18:96:28:d0:24:8c:
d3:2f:9c:3a:3b:a0:db:69:47:42:61:88:d6:4c:e2:
aa:fe:74:46:35:9d:5b:bf:94:0f:e4:9c:0a:8a:fe:
66:15:1c:08:ab:8f:19:b5:06:a6:d0:22:45:bc:ae:
65:32:dd:7f:7e:17:8b:25:fd:79:c4:8e:58:bb:9f:
a4:4c:72:94:48:1c:9e:db:9d:8f:6e:2f:dc:69:d6:
bc:3a:6b:7e:e9:35:05:83:46:3a:1b:af:a3:39:10:
2b:40:37:aa:1d:12:4e:cf:6e:b8:e0:61:bd:09:1c:
65:0f:00:91:9f:73:62:d1:4c:6f:5f:32:86:ca:82:
42:3b:f6:11:0b:1b:fa:d2:0b:72:d6:64:f6:23:d9:
49:03:4c:51:bc:b9:a1:92:6a:40:5a:86:02:28:2d:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:D0:85:23:FD:CE:EE:7C:47:8E:28:8A:E7:2B:A0:D3:0E:F4:D3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2BrQhSP9zu58R44oiucroNMO9NM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:cc:27:22:52:75:03:06:3d:47:1c:b4:60:3d:49:55:82:1b:
b6:09:39:0c:92:3a:9a:16:16:f7:a5:e8:a6:e2:c6:2b:57:d7:
be:6a:96:1e:9b:65:fc:46:36:e7:15:41:ef:0d:9b:ae:58:57:
cb:bb:2b:11:4d:76:32:63:1e:91:8c:05:cf:66:4b:1a:36:40:
58:99:c8:f1:5d:e1:db:a3:8b:e9:cf:27:88:de:a0:bd:2d:1b:
e8:29:bb:71:3e:cc:31:a1:5d:09:35:ee:12:a2:c0:3f:9a:94:
a3:8a:1a:8d:c7:00:6e:6f:68:a2:20:de:c4:d6:bf:aa:c2:05:
d8:25:c5:b0:c9:22:b6:84:80:e3:a5:a7:27:8c:96:c0:98:b0:
fc:8e:d5:b4:f5:56:b9:70:6d:0c:8e:24:e4:ee:50:48:ef:1c:
e8:eb:ed:fd:f1:90:0b:21:a9:42:7d:e3:f3:e6:0a:58:16:ce:
27:74:2d:5a:c2:e4:b6:a2:e3:ae:0b:f3:c3:e7:84:b6:97:44:
12:94:24:99:a8:4b:cc:26:5e:f1:9d:2e:be:a4:44:09:b3:37:
df:6e:e4:ad:e2:d7:4d:a4:8f:51:1e:7d:c5:ac:a8:d5:a5:e8:
27:5e:c1:97:97:e1:29:ce:63:0f:01:e7:19:ac:28:a1:10:87:
ce:f2:96:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:20:05 2025 by rpki-client