Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8XZyi_apU196-iNYlvwiWRzH4Os.roa
File: 8XZyi_apU196-iNYlvwiWRzH4Os.roa (raw, json)
Hash identifier: imZu2KyQGnYU4OU09VDlGrzJMnOjPgSM5lsj46exxYE=
Subject key identifier: F1:76:72:8B:F6:A9:53:5F:7A:FA:23:58:96:FC:22:59:1C:C7:E0:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DE1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8XZyi_apU196-iNYlvwiWRzH4Os.roa
Signing time: Sun 25 May 2025 14:08:36 +0000
ROA not before: Sun 25 May 2025 14:08:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3553 (0xde1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 14:08:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F176728BF6A9535F7AFA235896FC22591CC7E0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:6a:43:87:aa:87:c1:d6:e0:5c:32:ac:76:
5c:15:41:cf:26:ce:1d:93:16:a9:99:a3:08:b0:e8:
7b:02:34:8f:20:f0:5a:c2:d7:58:2d:c1:51:e0:5f:
ef:dc:e6:d7:73:98:fa:3a:49:a3:f2:9b:43:b2:41:
40:ee:a5:c5:84:5b:06:6a:90:bd:d1:19:94:f2:31:
e8:bd:e2:b1:a5:1e:f5:e1:67:2c:38:d8:c0:e6:c9:
a8:97:01:2b:44:f0:a0:7d:f8:0d:33:81:ed:fc:75:
72:1e:d1:0d:d7:90:2d:74:48:26:75:bf:e3:6d:cb:
84:15:b8:e0:5b:26:5a:a4:3f:0b:5e:1c:55:0f:2e:
19:2f:04:ed:cb:56:7e:b0:27:e5:cb:eb:d7:00:37:
a4:02:80:47:ae:8b:d4:ab:48:83:59:f3:0e:f9:df:
df:10:fa:64:10:d8:15:4d:45:af:0e:40:d0:64:11:
80:ae:7f:81:96:d5:73:48:f3:27:84:cc:df:8e:4d:
bd:da:1d:eb:ae:44:9d:9e:91:e1:7d:f9:12:d1:1d:
0f:35:e9:b1:c5:26:72:15:a4:5e:b1:4c:ca:12:49:
62:d9:9a:f3:74:ea:41:fe:0d:67:0c:03:59:cf:64:
69:4b:52:40:d4:81:87:cc:6e:8a:2b:e5:30:6f:72:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:76:72:8B:F6:A9:53:5F:7A:FA:23:58:96:FC:22:59:1C:C7:E0:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8XZyi_apU196-iNYlvwiWRzH4Os.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:26:7d:fa:a7:a9:70:7d:5c:67:7c:92:b3:02:00:a9:1c:94:
43:2a:27:c9:c5:51:e6:67:38:cc:1f:2d:57:75:e3:14:aa:24:
82:2e:dd:5b:f4:91:b1:21:8f:1d:d2:6d:04:31:6e:a8:0e:01:
3e:04:12:57:39:37:f3:aa:67:3b:3e:20:da:29:b6:49:f8:b5:
24:63:6a:13:e4:9a:47:e1:72:a1:73:d0:62:ff:bb:d9:97:6e:
77:c8:57:ec:17:39:c4:53:2a:c8:fe:6e:6c:1c:f8:85:5f:cc:
bb:6d:4f:12:fd:43:f1:52:0b:95:33:6f:17:4a:ae:dc:99:ab:
c5:e3:5d:79:62:a2:f4:1b:06:94:d6:41:06:0e:7b:3d:3a:ac:
c5:51:ed:b7:0d:29:ef:7c:41:68:62:3e:1d:a8:df:d3:51:61:
8e:6e:a2:4a:5a:dd:bd:52:32:0b:fb:08:fd:af:92:ef:e9:03:
24:20:c7:3a:6b:c6:17:d3:e4:e4:43:6e:ca:26:12:19:23:b1:
87:06:92:d9:7f:44:3c:bf:95:76:b6:84:30:1a:0f:2a:48:1a:
34:af:22:75:38:aa:23:23:5b:e7:da:cb:d7:1a:05:1e:f1:2e:
fa:ae:6f:3a:72:00:f5:f3:2f:b6:59:b2:5f:85:58:fe:eb:12:
bc:1c:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:26 2025 by rpki-client