Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_c1ktQzbWCq35N897RvOJ3fk4.roa
File: 2f_c1ktQzbWCq35N897RvOJ3fk4.roa (raw, json)
Hash identifier: ytlidwVuZYTpOLBNIZFETPE93tn8jpxWbVTblQiud1A=
Subject key identifier: D9:FF:DC:D6:4B:50:CD:B5:82:AB:7E:4D:F3:DE:D1:BC:E2:77:7E:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D8D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_c1ktQzbWCq35N897RvOJ3fk4.roa
Signing time: Sun 25 May 2025 03:38:32 +0000
ROA not before: Sun 25 May 2025 03:38:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3469 (0xd8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 03:38:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D9FFDCD64B50CDB582AB7E4DF3DED1BCE2777E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:d9:91:ee:31:0e:f4:f7:27:37:61:ed:b0:
3a:41:c6:63:b3:e3:27:0f:a1:36:0d:e7:f9:ba:ee:
4f:46:94:77:6d:b8:bc:25:27:2e:a2:27:b5:6b:98:
92:90:03:78:3a:bc:6d:55:ae:37:89:1d:58:fd:ff:
e9:a3:35:fa:3a:a6:b9:43:38:8b:1a:93:f5:80:c2:
b3:d8:63:26:b7:d1:87:6c:c8:fa:83:ab:94:b1:59:
a2:66:37:43:5a:2d:d0:6e:1f:0e:77:05:b5:f8:05:
60:82:8d:93:39:ec:88:9b:31:2b:00:ac:e8:03:96:
32:a2:b5:e2:7e:73:c2:b4:8c:de:bc:5c:42:44:89:
16:26:f4:00:53:70:28:70:56:a2:9f:6c:e5:e8:c0:
88:4f:a9:ad:e5:af:5a:65:f6:7e:75:5a:26:58:2a:
8a:d7:2c:ea:45:5d:ce:5e:7b:df:6a:30:13:cf:ee:
09:3c:df:ed:3c:d4:8e:15:d3:f3:b1:43:85:39:42:
36:2d:56:8e:ff:f6:a1:ba:74:5d:d1:3c:19:c1:a9:
b8:dc:46:b2:e8:18:44:03:1f:8a:eb:37:c8:0d:bd:
12:66:77:00:fc:0d:ee:3a:a9:4f:78:5c:d4:e6:08:
57:62:9f:d5:08:38:2a:ed:03:3d:35:98:44:f2:0b:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:DC:D6:4B:50:CD:B5:82:AB:7E:4D:F3:DE:D1:BC:E2:77:7E:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_c1ktQzbWCq35N897RvOJ3fk4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:3a:70:75:b6:24:1c:ea:5b:8f:5f:91:9b:7f:fd:92:cd:c7:
17:02:51:3f:07:46:be:42:b4:39:6d:6d:a3:84:49:e4:69:7c:
21:16:2d:11:61:d8:9b:f9:72:4c:2d:ef:c8:6d:6e:95:63:3a:
65:2e:fe:32:f5:26:08:7b:d1:42:1d:ef:67:88:46:e5:af:96:
43:3b:44:f3:37:d0:f0:be:15:eb:37:b2:b3:89:4f:fb:1b:4b:
15:f1:11:a8:ec:37:5b:97:6a:1d:12:03:2a:f6:55:1d:42:37:
2e:e5:7a:6b:68:cc:e1:2c:03:31:7d:bc:53:bb:57:8d:35:31:
7a:14:ec:1e:0a:a7:ef:b7:c3:93:34:1d:03:1e:fc:1a:b9:bf:
19:28:ce:89:da:12:17:ce:cd:90:93:a3:e2:5f:48:2c:a0:65:
ba:fc:28:af:7f:b7:6a:ec:8c:9e:17:69:d2:ec:f4:6a:04:1b:
15:06:b5:f3:fe:be:c4:de:ec:88:03:f4:32:c2:bf:7c:3e:31:
2e:02:90:72:0e:72:ad:6e:0d:24:01:a7:27:4e:8f:15:1c:b1:
51:38:b7:a3:7a:95:21:b6:54:03:63:ed:26:b5:15:88:3b:07:
0c:59:d9:20:a7:ac:65:b8:d1:50:2d:71:19:b0:d1:05:ee:eb:
27:64:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:15 2025 by rpki-client