Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4A0ZF3EHw6n4aHbWOB_zzR6ylDQ.roa
File: 4A0ZF3EHw6n4aHbWOB_zzR6ylDQ.roa (raw, json)
Hash identifier: kvsPPLB2hZ82REhWUoFTMrowc6M5OEZegKcxxRv8nbU=
Subject key identifier: E0:0D:19:17:71:07:C3:A9:F8:68:76:D6:38:1F:F3:CD:1E:B2:94:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0609
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4A0ZF3EHw6n4aHbWOB_zzR6ylDQ.roa
Signing time: Thu 15 May 2025 03:08:01 +0000
ROA not before: Thu 15 May 2025 03:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 03:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E00D19177107C3A9F86876D6381FF3CD1EB29434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:5f:aa:be:1b:78:85:99:1d:dc:6d:b8:40:
b9:56:31:c8:0d:50:76:4a:50:7c:d9:66:32:3e:b4:
b2:66:15:d1:ea:7c:22:98:b4:97:84:1d:37:b6:46:
e1:f8:e0:31:22:20:c9:28:ad:59:d3:f9:82:f7:80:
ae:6a:13:13:eb:63:a0:ef:b9:22:04:57:37:b1:07:
98:dc:fd:15:37:0c:90:0c:35:7e:82:e9:34:e0:43:
63:64:1e:15:9d:31:44:0a:9d:96:4a:4d:3a:7a:b0:
11:23:60:74:16:d6:c1:02:a9:b7:28:0f:97:f0:3d:
70:f6:d0:6a:ec:65:d3:37:8f:66:5f:28:58:10:87:
67:ee:71:21:01:40:22:69:39:ef:27:e0:2f:ec:f4:
20:bd:e2:5a:1a:90:2d:93:42:9b:c6:91:bb:0d:f1:
65:9f:8f:67:90:33:24:d7:05:7f:0f:d8:15:66:1e:
27:b5:02:df:50:1b:1a:44:1c:39:06:92:88:73:f7:
cd:25:a8:9e:92:8d:8f:57:08:a0:59:6e:32:15:e1:
ed:54:71:f6:9c:5a:bc:9d:5b:37:c1:81:3f:7e:1c:
af:76:26:5c:ae:10:73:47:91:a2:b6:9f:06:62:48:
f2:89:1c:f5:0f:28:09:b2:65:1c:0b:c9:fd:67:e9:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:19:17:71:07:C3:A9:F8:68:76:D6:38:1F:F3:CD:1E:B2:94:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4A0ZF3EHw6n4aHbWOB_zzR6ylDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:0e:9f:9a:08:94:3c:fd:7f:8d:c7:78:b0:5c:fc:bf:34:bb:
5b:dc:98:3d:a7:13:f2:2e:e1:b3:bc:dc:ae:e6:be:b3:3c:81:
16:42:db:59:6c:28:92:ec:38:c6:f0:aa:0d:bc:52:8e:71:aa:
5d:cc:17:04:e5:a0:aa:14:06:25:be:a9:1b:b7:71:4e:76:4f:
17:54:2d:9a:9e:7d:23:09:41:25:20:38:f5:68:cc:b1:bc:83:
a3:71:52:39:7c:fa:d0:27:6b:39:0e:f2:f7:3e:ac:22:d4:51:
f8:2a:b9:4c:89:fa:7c:8e:d1:80:84:ef:79:8b:9e:20:38:c4:
23:28:cd:8d:d7:36:b0:33:ac:87:0a:e5:40:38:86:53:65:7d:
ab:f4:46:4a:41:b6:af:23:11:d3:30:2e:ab:ae:c6:c2:8d:6c:
fb:d8:8f:3e:cf:e9:1f:b2:2c:b7:3c:ec:ff:ea:c4:ec:ff:4f:
dc:b5:31:68:d3:09:31:e6:98:d2:81:48:e1:74:18:66:9e:82:
38:9d:f0:5b:57:aa:40:26:2e:7f:57:33:d7:4b:44:05:d8:eb:
97:97:d7:f3:11:e2:0c:f5:db:4d:e3:55:40:b1:00:48:1a:2a:
cc:54:70:3a:c9:6c:4e:ba:b8:8c:4e:92:13:65:83:31:42:25:
0e:35:ec:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUw
MzA4MDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEUwMEQxOTE3NzEwN0Mz
QTlGODY4NzZENjM4MUZGM0NEMUVCMjk0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDISV+qvht4hZkd3G24QLlWMcgNUHZKUHzZZjI+tLJmFdHqfCKY
tJeEHTe2RuH44DEiIMkorVnT+YL3gK5qExPrY6DvuSIEVzexB5jc/RU3DJAMNX6C
6TTgQ2NkHhWdMUQKnZZKTTp6sBEjYHQW1sECqbcoD5fwPXD20GrsZdM3j2ZfKFgQ
h2fucSEBQCJpOe8n4C/s9CC94loakC2TQpvGkbsN8WWfj2eQMyTXBX8P2BVmHie1
At9QGxpEHDkGkohz980lqJ6SjY9XCKBZbjIV4e1UcfacWrydWzfBgT9+HK92Jlyu
EHNHkaK2nwZiSPKJHPUPKAmyZRwLyf1n6UrPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4A0ZF3EHw6n4aHbWOB/zzR6ylDQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni80QTBaRjNFSHc2bjRhSGJX
T0JfenpSNnlsRFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAD8On5oIlDz9f43HeLBc/L80u1vcmD2nE/Iu
4bO83K7mvrM8gRZC21lsKJLsOMbwqg28Uo5xql3MFwTloKoUBiW+qRu3cU52TxdU
LZqefSMJQSUgOPVozLG8g6NxUjl8+tAnazkO8vc+rCLUUfgquUyJ+nyO0YCE73mL
niA4xCMozY3XNrAzrIcK5UA4hlNlfav0RkpBtq8jEdMwLquuxsKNbPvYjz7P6R+y
LLc87P/qxOz/T9y1MWjTCTHmmNKBSOF0GGaegjid8FtXqkAmLn9XM9dLRAXY65eX
1/MR4gz1203jVUCxAEgaKsxUcDrJbE66uIxOkhNlgzFCJQ417A0=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:21 2025 by rpki-client