Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5KK5yDvhKMXmHC-We7mdKr6KM8w.roa
File: 5KK5yDvhKMXmHC-We7mdKr6KM8w.roa (raw, json)
Hash identifier: s1+E/ZgB5J8VKqP57fYG0XyLvTvzqpwk9NsdBctvSq4=
Subject key identifier: E4:A2:B9:C8:3B:E1:28:C5:E6:1C:2F:96:7B:B9:9D:2A:BE:8A:33:CC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 242D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5KK5yDvhKMXmHC-We7mdKr6KM8w.roa
Signing time: Tue 24 Jun 2025 19:12:00 +0000
ROA not before: Tue 24 Jun 2025 19:12:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9261 (0x242d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 19:12:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E4A2B9C83BE128C5E61C2F967BB99D2ABE8A33CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:ea:95:7a:64:89:a3:04:68:1a:74:c2:4d:
68:a1:cb:8c:ad:85:e0:a6:ec:8a:15:6c:9e:24:7e:
2c:57:87:12:07:ea:0b:c3:81:cc:8e:a4:a1:44:43:
b2:f4:db:b1:0c:52:87:63:fb:ee:d6:74:ba:b2:93:
99:ca:d3:83:7c:a9:a6:96:c8:9e:09:82:51:2e:db:
20:0d:61:42:0c:d4:36:1c:9e:ba:c7:44:9d:e6:2b:
5f:7c:23:4d:93:2b:61:86:16:38:54:ff:79:81:7e:
28:1d:2d:47:8a:5c:6b:45:fe:37:19:7d:d1:ab:ed:
f9:ba:cb:eb:f5:20:55:cc:97:a8:fe:06:35:9d:21:
df:8d:3d:9d:55:8a:ff:81:4c:87:5a:6c:59:33:a8:
4b:06:c4:7c:c1:55:59:42:88:c2:01:fc:16:7a:ed:
11:e3:59:aa:93:d0:a0:55:2c:8a:27:4b:ca:4e:7f:
a8:df:3c:04:1a:41:eb:6e:c1:a2:dc:ec:d1:c7:40:
dd:0c:a6:d0:fc:a0:21:c1:32:5c:21:38:4a:4b:04:
4b:92:65:ba:53:95:ce:e0:8a:ea:85:fa:e0:a3:e7:
ae:08:89:9f:88:3e:2f:16:92:9a:bf:b4:8d:52:ec:
ad:cf:60:e4:62:0d:52:3a:65:d5:85:a8:64:d0:93:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A2:B9:C8:3B:E1:28:C5:E6:1C:2F:96:7B:B9:9D:2A:BE:8A:33:CC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5KK5yDvhKMXmHC-We7mdKr6KM8w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:8a:7a:97:38:bd:13:20:fd:e0:43:94:b7:48:90:5c:77:6c:
28:bc:0e:64:56:e9:e3:dc:88:6d:64:53:2f:29:3e:21:78:bc:
19:91:1a:fc:23:5b:bb:31:ee:fc:c8:22:55:a7:da:9a:1b:2a:
5c:07:59:3d:06:ce:03:aa:3e:d7:7e:41:b0:4b:14:c7:8b:f5:
8b:4f:41:65:9d:4d:f4:d9:1c:ed:e9:83:c3:f9:d1:8e:11:28:
e1:73:a2:cf:94:84:49:7a:5a:d6:16:db:67:31:17:b3:03:2d:
fb:69:3d:2c:0a:4a:f5:38:8e:3b:13:6f:51:1c:d2:a8:a3:09:
00:11:0f:5c:73:be:73:d7:41:c3:6b:7a:74:6d:9c:25:20:9c:
f0:1c:f2:a7:0f:60:6b:01:4f:ad:f7:d2:af:d5:65:3e:66:f4:
bc:95:d2:20:4e:a5:ab:74:9c:cc:17:e3:4f:04:34:06:1c:08:
44:52:14:fe:d7:f3:ca:2b:4e:54:c5:70:e2:29:3c:31:fd:e7:
81:c2:a4:f5:f9:32:18:79:aa:c7:95:f0:02:91:3e:29:db:62:
64:23:19:e1:b6:a5:e3:2f:ed:6e:3b:29:c9:72:42:70:87:49:
8f:32:ab:7d:10:f6:b1:13:f2:55:15:5a:a7:92:2c:8c:d0:01:
2e:cc:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:54:02 2025 by rpki-client