Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2tRmhH0XTrSU3rnxkPph6aseMv8.roa
File: 2tRmhH0XTrSU3rnxkPph6aseMv8.roa (raw, json)
Hash identifier: oMuyc3U2+2Ejl3gOWsCOOWB3nMfgheavNFMBxlmABQ8=
Subject key identifier: DA:D4:66:84:7D:17:4E:B4:94:DE:B9:F1:90:FA:61:E9:AB:1E:32:FF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03D9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2tRmhH0XTrSU3rnxkPph6aseMv8.roa
Signing time: Mon 12 May 2025 05:08:15 +0000
ROA not before: Mon 12 May 2025 05:08:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 05:08:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DAD466847D174EB494DEB9F190FA61E9AB1E32FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:4e:d6:96:46:37:4d:3e:a3:2b:80:b6:ac:
db:be:dc:0d:2c:28:4c:99:5a:65:f1:82:88:db:28:
fc:ba:f9:48:dd:fc:b5:7f:a6:9b:3a:49:48:5f:6c:
53:9b:c1:c3:9f:b7:d2:08:34:cc:66:5e:50:1d:e6:
20:60:47:c9:d5:2a:35:c1:60:f6:36:3d:84:ab:ca:
c1:13:7d:71:17:84:3d:11:86:26:33:48:c2:34:c7:
27:5c:5c:51:06:94:64:bc:d4:39:e1:b0:ee:48:94:
97:5e:f1:15:2b:fb:81:d4:5d:c0:82:fe:b0:90:d5:
c1:b2:e1:a5:35:05:3e:6a:90:46:69:9b:54:b7:11:
0e:3d:d6:0b:45:f9:db:57:e2:5a:ef:ee:99:60:33:
42:e3:29:6a:5c:b6:f2:69:1f:0f:58:02:31:30:9f:
43:c7:1e:6e:fb:80:2d:01:c5:01:ab:76:cf:a1:90:
ae:e9:f9:98:9a:37:ea:f4:0d:7b:42:ae:0a:5d:bf:
c7:68:16:ee:59:21:88:96:af:fe:4a:65:0e:c6:c5:
56:9c:ec:59:64:66:db:a9:73:8e:df:9c:f1:6f:8b:
da:71:3d:de:5e:6d:c6:42:71:71:74:d6:65:f5:22:
0e:f7:ab:18:21:5c:ff:f9:8f:17:ba:60:a8:b9:03:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D4:66:84:7D:17:4E:B4:94:DE:B9:F1:90:FA:61:E9:AB:1E:32:FF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2tRmhH0XTrSU3rnxkPph6aseMv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:2f:55:ff:0f:4b:d1:da:1f:10:6d:ca:87:08:e8:b8:cc:a4:
50:19:61:4f:3e:71:aa:76:04:9c:60:66:0e:5b:e0:af:e6:95:
b2:fe:a0:9d:11:90:e6:f4:5e:6d:34:74:a8:44:3a:49:d9:10:
48:a7:3e:5d:1d:06:ee:56:47:89:68:3d:e1:85:23:a6:da:e3:
c5:88:bf:c7:81:06:d7:07:dd:94:f6:ed:33:5e:7d:9d:fd:06:
6c:f3:bd:07:71:1a:4c:fd:f7:b2:a2:79:82:8e:02:80:dc:f1:
ac:8a:f8:22:fd:4d:4e:9e:26:c3:b6:44:4e:59:19:dc:c7:57:
99:96:ef:9c:02:8a:0f:bf:c3:b1:b5:18:ef:cd:58:7d:5e:30:
3f:c3:50:7b:c6:eb:69:9a:0c:13:bf:4c:d6:15:ae:17:99:48:
00:8b:08:a3:0a:53:62:73:62:16:29:03:f0:59:f1:d5:3c:76:
30:e3:b2:fe:c4:e0:94:69:7e:a4:eb:3e:34:7d:e8:e5:d6:a4:
22:5e:57:d6:17:f3:15:8b:f7:bb:4d:e5:2d:73:03:1c:2b:f1:
32:21:f2:8b:9a:bd:61:fb:03:b3:40:63:9b:f5:54:46:f5:19:
6c:c8:15:c9:b6:21:f8:7f:0a:d6:30:31:8d:72:8d:b1:18:df:
09:7e:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:56:10 2025 by rpki-client