Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7Ua275PaXxbuaRr0Glh9upXTZeg.roa
File: 7Ua275PaXxbuaRr0Glh9upXTZeg.roa (raw, json)
Hash identifier: G+reWa6BnG0Pv21XVdrSqpdi/nXPLDG8gq0cf+Koxm8=
Subject key identifier: ED:46:B6:EF:93:DA:5F:16:EE:69:1A:F4:1A:58:7D:BA:95:D3:65:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7Ua275PaXxbuaRr0Glh9upXTZeg.roa
Signing time: Mon 12 May 2025 04:08:06 +0000
ROA not before: Mon 12 May 2025 04:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 04:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ED46B6EF93DA5F16EE691AF41A587DBA95D365E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:04:b6:4a:21:e3:45:fe:e9:8c:ce:43:46:
45:eb:84:41:a7:c9:a6:3a:b0:b5:a8:34:6a:dc:06:
df:dd:d3:cb:2f:5a:04:0e:00:14:18:d1:8e:be:f0:
17:0a:0f:fd:b4:74:9e:9c:1a:1c:2d:b6:09:f1:d2:
bb:5d:92:19:24:77:f3:91:c2:87:53:4a:5a:4f:33:
ea:a3:0a:6f:da:49:11:00:51:26:a3:8d:61:fb:d5:
07:da:08:a3:3c:55:87:e2:3f:dc:f3:e2:1b:0c:ce:
22:41:9b:4a:90:d1:cc:b1:10:21:2f:01:5b:56:5a:
6d:e1:27:60:94:f5:b0:0a:6c:e6:82:cd:db:ae:9c:
88:80:d6:f5:cf:84:48:0d:a1:0d:b1:e0:7a:ff:16:
22:02:e9:12:18:0b:d2:90:47:03:f3:df:37:b0:6b:
07:7c:8a:09:16:dc:61:1b:41:e5:c8:76:7d:60:ee:
d6:37:d3:39:28:85:39:39:35:3b:fb:4d:d6:b4:56:
40:a3:90:84:e2:ae:c0:d4:b2:bd:2f:e0:aa:df:78:
c6:35:99:a9:70:8c:2f:5b:4c:70:82:f8:cb:e6:bd:
8b:84:30:1d:69:cf:17:53:c3:3f:6e:9e:dd:d0:59:
80:c5:83:b4:a9:f3:76:71:65:ae:94:e0:8b:76:e9:
2e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:B6:EF:93:DA:5F:16:EE:69:1A:F4:1A:58:7D:BA:95:D3:65:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7Ua275PaXxbuaRr0Glh9upXTZeg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:11:b9:70:0b:48:6f:ce:c8:19:d5:ae:82:a5:ed:05:58:86:
d8:78:b7:de:b1:5d:4f:92:da:e8:4f:7a:23:10:5e:d0:d9:00:
3d:a2:db:ca:9c:8d:5b:db:05:b0:da:c1:a4:3c:85:5d:44:69:
32:dc:15:9c:a3:d0:52:0e:4e:62:16:8d:9b:b7:73:2d:04:14:
20:35:47:44:62:24:0a:ff:6c:b3:57:a2:77:8a:19:58:d2:74:
4f:24:39:2f:b0:a3:34:c2:99:de:a3:d3:83:1a:67:6f:62:1b:
b5:8e:52:70:b8:b2:9a:1d:11:ae:f2:6e:a7:33:6e:ed:5a:c7:
fd:4f:db:75:0a:b9:56:92:41:f5:79:31:a1:36:f7:9b:c7:dd:
70:69:c6:c3:89:ea:56:a3:c2:80:94:6b:96:28:74:89:63:89:
3d:b6:f9:f6:6e:e0:f3:5a:0d:25:74:bf:97:7d:a0:7a:d8:90:
0e:ec:cd:27:b5:64:02:f0:47:79:93:f6:a3:52:07:3a:f2:d8:
f6:4c:43:c2:7e:e6:09:23:7e:82:7c:e3:f1:e0:7a:b7:42:2f:
7f:5c:dc:a5:18:6e:a6:53:6c:9c:fa:8e:57:6a:ca:53:a7:9c:
13:4d:88:c5:02:2a:ed:94:ad:52:e5:e1:de:17:94:cc:48:6e:
3e:06:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:56:45 2025 by rpki-client