Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5_Xi11dskZCz0nm5NTpyNe5jRDI.roa
File: 5_Xi11dskZCz0nm5NTpyNe5jRDI.roa (raw, json)
Hash identifier: eXBs3hr/NjTbKaV5X02onLFL/0T6Xzp7hiJehBk0IDQ=
Subject key identifier: E7:F5:E2:D7:57:6C:91:90:B3:D2:79:B9:35:3A:72:35:EE:63:44:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0579
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5_Xi11dskZCz0nm5NTpyNe5jRDI.roa
Signing time: Wed 14 May 2025 09:08:02 +0000
ROA not before: Wed 14 May 2025 09:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 09:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E7F5E2D7576C9190B3D279B9353A7235EE634432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:83:d6:11:f6:78:8e:62:a1:2a:9b:d1:67:
02:2f:d3:e0:36:bb:40:50:79:71:ed:d5:0a:0f:78:
0a:52:1d:c7:18:50:7b:d2:2c:13:22:f4:2b:a0:08:
75:3d:c6:99:83:b6:cf:83:40:0d:31:1d:3d:e4:6f:
95:b6:d1:29:de:4a:ae:21:d4:b2:fc:ad:91:07:89:
8b:e3:0f:86:aa:6a:1f:4b:57:c2:ca:df:5b:10:00:
2c:7c:3e:fc:ef:f9:7a:67:c6:87:0e:48:27:04:47:
b9:6f:6e:a0:1d:ee:f6:e7:f9:4b:4f:76:1b:79:33:
ab:bf:61:ec:d1:58:82:5c:0b:9a:30:4a:e9:31:ce:
8c:27:e5:07:df:4c:43:99:7a:aa:d3:11:3a:98:03:
61:c5:0e:c9:f2:28:85:65:46:f4:a8:a6:25:ed:1c:
f4:e0:15:36:38:6b:19:24:04:6f:2b:7e:45:ae:e4:
c4:fe:cd:06:fc:88:69:e7:6a:f9:39:b4:63:d3:23:
30:e1:63:c0:cb:a5:b6:4d:83:53:a8:48:7d:ee:30:
08:33:6b:93:fa:4c:d8:49:41:a2:c9:ba:d9:82:08:
c6:bc:79:69:de:00:5a:a1:41:70:fe:35:8c:88:ac:
0c:b6:34:37:fc:d7:6e:0d:ef:ab:23:3e:b4:11:13:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:E2:D7:57:6C:91:90:B3:D2:79:B9:35:3A:72:35:EE:63:44:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5_Xi11dskZCz0nm5NTpyNe5jRDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:df:63:bf:1b:5d:3b:8d:4a:e6:fa:33:cb:0d:41:8c:7b:f1:
87:f3:04:82:c1:32:a9:ce:6c:1c:c9:62:bc:b7:82:45:b9:75:
01:ad:6a:78:b2:5e:50:f6:13:6c:38:e2:55:0a:36:eb:6a:82:
d1:4e:50:fa:3f:02:69:fb:d1:3f:4b:39:18:7c:2d:81:3d:9e:
50:73:fb:8a:67:ec:95:9b:12:30:a0:27:59:d3:f8:1a:2b:d9:
f9:e2:c1:1c:19:26:cc:93:03:63:f9:63:b9:39:90:a0:d5:18:
5b:bb:75:79:19:19:dc:04:04:3a:1a:7d:58:be:42:6b:e7:93:
e1:aa:39:10:c6:cf:68:8b:43:cd:64:dd:0b:16:75:3a:10:eb:
63:4f:0e:31:53:28:31:78:55:fe:8f:76:2e:36:ee:bf:25:3b:
06:39:a7:30:99:89:83:66:0b:6b:4d:9e:ad:87:80:4e:a7:d7:
d4:ac:a8:1e:6d:5a:0c:61:65:33:8e:a8:21:4a:07:7a:83:05:
a0:9d:03:97:98:a4:48:2d:a0:ec:4f:3c:1a:27:d8:0e:ea:bf:
35:05:04:2b:d9:58:c5:e1:5e:9a:63:ce:f3:64:c7:cb:90:70:
de:ef:f4:41:03:2a:99:1c:5c:00:2a:c5:d1:89:3a:f5:bb:cb:
95:5a:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:37 2025 by rpki-client