Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4SGbwjGvlL-opn4VFw6aGFhcV1M.roa
File: 4SGbwjGvlL-opn4VFw6aGFhcV1M.roa (raw, json)
Hash identifier: AGVtz7gHoOuj8UEK49HXlw5Qj7tHkZHUsn03ERGOH4A=
Subject key identifier: E1:21:9B:C2:31:AF:94:BF:A8:A6:7E:15:17:0E:9A:18:58:5C:57:53
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0A21
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4SGbwjGvlL-opn4VFw6aGFhcV1M.roa
Signing time: Tue 20 May 2025 14:08:16 +0000
ROA not before: Tue 20 May 2025 14:08:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 14:08:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1219BC231AF94BFA8A67E15170E9A18585C5753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:df:df:24:68:e9:95:cd:77:fa:4b:81:8b:
f6:c0:6a:f3:f6:d3:53:d3:25:52:73:54:3e:40:c8:
d7:7e:52:70:ba:00:0d:a5:23:65:07:74:82:a4:1e:
24:f4:bc:a4:db:af:48:dd:3d:df:b9:4d:cc:6b:48:
9c:37:6e:d1:33:0e:08:37:c2:3d:f0:69:b1:33:de:
6d:50:74:36:ba:79:e0:53:94:a1:91:74:36:fe:51:
66:b3:e4:53:3c:0b:ef:6f:ff:26:dd:05:23:9a:1c:
7d:1f:86:a9:01:af:8a:d2:0c:ae:87:d1:4c:12:e1:
16:f2:b4:e1:96:ba:0f:49:09:c8:d8:54:c5:fd:b0:
d4:1d:32:20:b7:1f:6c:a9:ba:7a:d3:d5:a8:9f:08:
3c:a7:78:12:35:04:c2:02:27:36:85:d8:78:db:c1:
d3:c3:a4:06:17:9e:6e:1a:c7:3d:74:e6:3b:b8:d0:
06:af:87:8d:97:d9:7c:9f:10:d5:96:cd:17:9d:e1:
74:ff:d2:4e:8d:e8:41:7b:35:d9:ed:db:de:7f:75:
ff:42:c6:21:5d:5b:a7:e4:e7:a8:1d:ad:9e:02:80:
5e:89:a8:fa:fe:88:42:cf:29:47:df:fd:09:8a:07:
b8:a3:70:be:7b:25:26:bd:c1:58:74:27:af:09:ca:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:9B:C2:31:AF:94:BF:A8:A6:7E:15:17:0E:9A:18:58:5C:57:53
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4SGbwjGvlL-opn4VFw6aGFhcV1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:d3:87:57:8e:29:db:e7:4c:5e:b7:74:30:31:e3:1d:9a:58:
30:3c:a3:83:0c:5c:ae:23:17:a1:ea:9c:f0:16:cb:af:d6:ec:
89:32:a2:f1:55:5e:0e:82:00:5d:08:62:4b:6d:8b:11:f1:ae:
d8:eb:2e:cf:26:8b:18:48:8e:07:e5:d6:ed:70:65:82:d2:5f:
98:71:3d:53:f9:52:ef:15:b5:8a:73:40:1d:d4:86:5e:77:79:
1c:55:9d:f3:1b:58:f3:0b:8f:06:b9:4b:da:10:a4:ff:87:8e:
03:a9:fb:4e:2d:07:49:50:d5:5d:bb:ea:12:43:ae:b7:cf:7f:
9a:52:58:f6:16:18:bc:4d:a6:a2:df:e0:e8:a9:e5:e5:ef:d3:
38:fe:73:66:ac:0d:33:15:57:24:f0:1f:cd:1a:42:db:7e:a8:
06:c1:c1:ac:41:f6:bc:4c:2a:e5:6f:27:c3:b3:ba:c7:6c:e9:
e0:88:89:38:1d:3e:9d:9a:1f:4f:c2:b0:c4:77:a0:2c:f9:8a:
9c:fa:19:a4:79:53:53:87:c3:9c:91:68:d8:8d:2a:02:03:1a:
99:b3:e8:c0:ee:71:b8:07:9e:eb:ff:83:82:f3:0b:ef:c6:ab:
86:f3:df:b1:fa:6a:71:01:9a:7f:2d:e2:90:8a:75:8a:1d:fe:
d8:70:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:11 2025 by rpki-client