Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3IjsNBprW-YjodbOKIH0sWsBygI.roa
File: 3IjsNBprW-YjodbOKIH0sWsBygI.roa (raw, json)
Hash identifier: O5hz58NwVDrtfWt0DTnzY5hAKi9Oq61QFejKmDA2duc=
Subject key identifier: DC:88:EC:34:1A:6B:5B:E6:23:A1:D6:CE:28:81:F4:B1:6B:01:CA:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EE9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3IjsNBprW-YjodbOKIH0sWsBygI.roa
Signing time: Mon 26 May 2025 23:08:46 +0000
ROA not before: Mon 26 May 2025 23:08:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3817 (0xee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 23:08:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DC88EC341A6B5BE623A1D6CE2881F4B16B01CA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:6f:66:83:12:f8:70:b2:20:8b:80:76:f4:
3d:39:06:ab:81:8a:a8:c4:8b:ae:f7:41:b9:dc:ad:
b0:32:46:4d:4a:cb:c5:50:1d:8e:88:d7:1c:d6:5c:
47:35:03:00:cd:b6:20:f4:f9:51:7b:4a:3e:a9:32:
a1:51:13:9c:1d:af:75:9e:c4:71:37:d6:4d:dc:89:
90:8d:78:a1:ac:f1:20:53:7d:53:ef:16:65:6b:aa:
3a:4c:3d:87:d8:c4:fb:34:3e:78:10:c0:fe:be:0f:
4c:bb:57:42:cc:2f:4f:d2:67:b3:64:5b:1f:e4:09:
d9:0d:48:e3:65:17:0d:80:de:7b:fa:89:f8:0d:3a:
80:ca:39:1c:1a:25:6a:01:9f:a2:7c:67:47:34:a1:
4d:b9:b5:2c:55:8b:30:30:b8:ba:e6:84:0f:74:be:
39:1d:fe:41:ed:a3:8f:27:5a:f4:2c:83:30:6e:d8:
73:db:d4:30:d8:00:7c:70:2b:dd:4c:87:80:72:e2:
8b:75:8a:dc:7c:37:e3:7e:7d:44:f7:cf:8a:f8:f4:
7c:da:df:41:35:43:b6:2f:46:3b:9d:7a:93:36:bf:
a0:fd:56:03:fd:ba:ae:8e:ba:46:33:87:be:87:ba:
52:b7:18:19:19:ec:a3:ff:81:59:37:bf:3f:ae:f9:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:EC:34:1A:6B:5B:E6:23:A1:D6:CE:28:81:F4:B1:6B:01:CA:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3IjsNBprW-YjodbOKIH0sWsBygI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:a4:3d:3f:f7:dd:9e:9a:d3:01:c6:45:51:d2:bc:ac:37:18:
e7:03:8e:5e:1f:d8:56:3f:5e:ad:c2:85:0c:3c:e9:f8:69:6e:
9d:c9:56:ea:77:3d:f8:5f:e6:c7:bd:ba:44:4b:40:e1:6e:b9:
ed:33:e5:c9:9b:bf:97:92:1c:f9:eb:b8:f9:74:0b:56:40:18:
8f:8e:fa:6c:55:06:db:58:02:22:72:af:8c:23:d7:73:97:5e:
e8:a6:8c:9c:e6:c8:dd:f2:b0:47:26:c6:2d:25:a2:b1:c1:93:
56:90:12:23:e0:9c:e8:40:a9:0a:9b:29:ad:2f:67:61:2b:9a:
c8:95:d7:cb:25:03:91:12:f5:8e:e3:f6:c9:50:6d:d9:e9:57:
b4:b7:0c:f9:e5:53:4e:d0:6c:40:02:e0:71:cb:46:68:cc:19:
28:3c:99:9c:93:b4:8d:c8:7e:e1:ee:29:e2:ba:3a:1a:50:0f:
11:6e:bc:e3:4f:b8:8a:71:38:1e:94:24:77:17:31:ce:14:a3:
9e:8d:d3:b6:85:7a:8b:ff:1d:5c:c7:b5:68:ed:ba:97:2a:b5:
28:02:3f:89:f7:72:cb:8a:15:20:c9:71:1c:87:bf:14:c3:26:
9f:19:61:7e:5f:1e:5c:15:d0:77:55:2f:df:86:91:29:57:76:
5e:e9:4e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:46 2025 by rpki-client