Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7SmE4p5fzqTz7Az1xzcBAknLFvQ.roa
File: 7SmE4p5fzqTz7Az1xzcBAknLFvQ.roa (raw, json)
Hash identifier: uZLfvsGhrt5kTMe3IcljGNqWJbjkQ1iETZuIByXlbtk=
Subject key identifier: ED:29:84:E2:9E:5F:CE:A4:F3:EC:0C:F5:C7:37:01:02:49:CB:16:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B09
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7SmE4p5fzqTz7Az1xzcBAknLFvQ.roa
Signing time: Wed 21 May 2025 19:08:19 +0000
ROA not before: Wed 21 May 2025 19:08:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 19:08:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ED2984E29E5FCEA4F3EC0CF5C737010249CB16F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:9d:c4:4f:44:39:6f:6e:1d:27:2d:fb:16:
73:b7:35:a8:73:12:40:dc:06:7e:d6:39:2e:44:23:
e7:7a:3f:8d:6b:d0:23:58:03:9e:5a:df:be:ca:84:
8d:d5:af:a7:f5:56:18:4e:34:ee:a5:05:83:3e:f0:
99:19:aa:db:d6:53:2c:1d:f2:2b:4c:b9:0a:a6:2b:
29:71:98:93:60:f0:34:5f:b3:12:e1:e2:f5:43:fa:
97:f6:39:33:1a:d9:d4:46:cb:64:d1:39:13:26:f1:
ad:d3:41:1e:b2:87:8e:ba:ef:9e:3f:ac:d5:be:74:
e8:69:ef:f5:48:51:be:8f:3f:3f:ba:b6:f2:7d:df:
8d:a7:7f:9b:9b:85:fb:fa:1b:0a:cd:9e:41:ec:e4:
28:5b:19:d6:a9:cc:4f:67:43:f2:6d:cd:84:f2:33:
3f:54:58:f3:45:b1:d3:38:a8:14:99:fc:24:29:e5:
aa:96:f7:e8:6c:c5:12:73:15:7e:2e:ec:75:37:c6:
59:d8:b8:f2:2e:a5:aa:76:16:06:e6:6c:be:87:a0:
31:e6:43:8e:94:33:09:64:f8:a4:de:66:9e:24:d6:
08:6d:13:eb:16:ca:15:dc:59:56:28:f6:a1:7e:b7:
96:6f:a9:1c:fc:05:f8:98:31:ab:15:0f:f5:05:02:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:84:E2:9E:5F:CE:A4:F3:EC:0C:F5:C7:37:01:02:49:CB:16:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7SmE4p5fzqTz7Az1xzcBAknLFvQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:3f:3d:aa:f3:c6:d0:57:82:2e:bb:4a:b8:21:0c:d9:37:fc:
bf:5d:15:52:df:5c:f8:d6:d9:1c:9e:6f:63:f0:bc:65:9e:d3:
41:2d:24:68:49:fa:08:58:b8:6a:37:68:bf:23:3f:58:b3:3a:
7b:98:38:2d:9e:41:b2:20:d2:fd:a9:b0:e9:f5:99:99:3e:2e:
8e:04:fc:2a:19:8a:68:82:69:49:d1:64:5a:a6:64:16:5d:17:
2c:62:0e:d4:b3:cd:5f:fc:d5:dd:cd:b1:b4:92:a6:c6:10:4c:
d3:a5:bd:b9:21:44:20:64:10:27:f2:a7:b6:14:f5:8b:cf:c4:
5b:83:3c:4a:0d:b9:a8:44:fb:d8:ff:5c:aa:6d:83:48:0e:52:
f7:a8:78:de:49:60:d0:bf:19:90:3d:b9:e5:85:d0:43:24:83:
2a:85:d3:bb:38:81:b8:62:f6:17:fe:a1:fe:2a:57:9b:a7:e3:
cd:38:fd:ed:4a:59:18:ec:a8:de:e1:6f:fc:d7:31:ca:f2:7b:
09:ca:6d:83:78:09:2f:fb:dd:52:71:0b:61:27:3e:9f:53:c3:
60:13:d7:51:ff:ab:e7:ca:ab:60:9b:7e:ce:26:3a:bd:9d:fb:
71:a2:3f:8f:ba:be:e4:2b:e9:11:c5:7a:58:30:61:74:2b:80:
cd:b7:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:23:57 2025 by rpki-client