Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8qWOrecCQTbSL8DkXhngJzyu-98.roa
File: 8qWOrecCQTbSL8DkXhngJzyu-98.roa (raw, json)
Hash identifier: JbmhXQquwKvutykn7UMhh3hzqVwTicKKYaQKIu2KsNQ=
Subject key identifier: F2:A5:8E:AD:E7:02:41:36:D2:2F:C0:E4:5E:19:E0:27:3C:AE:FB:DF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0335
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8qWOrecCQTbSL8DkXhngJzyu-98.roa
Signing time: Sun 11 May 2025 08:37:52 +0000
ROA not before: Sun 11 May 2025 08:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 821 (0x335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 08:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F2A58EADE7024136D22FC0E45E19E0273CAEFBDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:53:d8:af:45:d8:95:29:ec:44:50:44:e0:
25:1a:07:b3:8d:e2:56:95:ab:e2:e4:b3:38:76:92:
25:43:fd:89:d4:7b:be:3a:cd:17:31:5d:53:47:c9:
cf:33:ce:d8:be:08:31:f2:8b:f1:c0:26:ca:03:5c:
7e:76:f1:10:f6:c2:03:6b:42:46:39:04:72:94:c5:
af:9a:76:0c:f4:b8:b9:00:19:b3:68:13:5b:8b:a1:
24:73:42:75:6e:59:ce:df:2f:b4:16:d3:ac:a7:0a:
27:2b:d4:c3:7a:fa:65:df:cc:c8:de:7f:8d:92:5a:
b1:15:4a:e8:df:86:b7:0c:64:bd:64:75:0b:84:8d:
02:fb:eb:b1:ae:da:fb:3d:5f:d4:11:e1:c5:56:b4:
75:c5:f7:c1:06:38:c4:33:7c:1c:68:8d:c3:0b:17:
5d:06:56:9f:f4:1c:c1:b5:f9:d4:91:69:fc:04:7d:
48:4b:5e:65:e2:3e:82:e0:fe:96:7c:bd:47:7e:0e:
32:79:e2:bd:82:b0:53:f9:db:20:93:bc:ac:13:1c:
85:08:15:0c:09:fe:28:23:5e:31:01:c1:7e:be:ba:
49:61:de:b3:2a:dc:a1:54:ce:7a:15:a2:79:5b:25:
2c:04:17:e4:6e:08:31:87:3f:48:88:5e:ee:f3:3e:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:8E:AD:E7:02:41:36:D2:2F:C0:E4:5E:19:E0:27:3C:AE:FB:DF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8qWOrecCQTbSL8DkXhngJzyu-98.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:24:56:38:fb:a5:25:3b:79:dd:95:6f:f7:31:9a:7a:ee:37:
41:11:f1:a6:8e:08:54:e3:54:33:43:8e:04:a2:54:74:82:61:
a8:68:b5:de:7d:1b:83:3b:96:d1:e7:53:80:88:36:24:3d:ff:
37:af:31:70:1e:7e:2e:27:10:bd:c1:15:9d:7d:f1:ce:78:4a:
b9:f3:e8:56:9e:c1:bb:37:2f:5f:63:e5:ab:01:2d:0f:4a:ca:
16:e3:4a:38:52:1a:b2:ac:38:d1:4b:90:79:47:11:e9:45:b0:
5f:f4:8d:35:25:68:83:3e:a3:3a:11:35:18:04:dc:44:e2:a6:
b5:80:47:bc:c1:7e:18:57:b2:9f:fb:61:3f:f6:45:55:de:5a:
86:c9:8f:c4:9c:f5:95:fa:85:21:82:fa:1f:10:78:7d:d5:7a:
92:ac:66:2b:a0:63:a1:a9:66:1d:60:1c:5f:ff:cf:be:a0:65:
ca:25:89:5e:21:65:d2:db:c9:55:9d:60:e6:ce:02:e9:40:ae:
ee:5c:b2:4e:0e:ca:d9:c8:54:87:90:4c:38:ba:ea:26:86:37:
6d:09:e9:cb:7c:e7:00:ba:28:46:bc:9f:4a:8f:ce:1a:67:19:
a5:9f:c0:6a:b5:e6:9a:22:97:e3:22:76:ed:0d:04:14:a4:e4:
0b:b0:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:47 2025 by rpki-client