Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/D31KwzgMhmPnJcS4DhTRSIkLdRc.roa
File: D31KwzgMhmPnJcS4DhTRSIkLdRc.roa (raw, json)
Hash identifier: RdCRxI00vvbBah9KhRfExjTAAlcHc2+B5U4V+i2flG8=
Subject key identifier: 0F:7D:4A:C3:38:0C:86:63:E7:25:C4:B8:0E:14:D1:48:89:0B:75:17
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D31KwzgMhmPnJcS4DhTRSIkLdRc.roa
Signing time: Fri 23 May 2025 04:38:26 +0000
ROA not before: Fri 23 May 2025 04:38:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 04:38:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0F7D4AC3380C8663E725C4B80E14D148890B7517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:25:1f:2b:a4:cf:32:f5:f0:03:f5:25:b7:
9c:9f:d6:04:cd:3a:1e:e9:31:ff:40:27:c4:79:8b:
9f:5b:c4:92:59:9b:4d:07:88:d6:77:82:ce:51:aa:
8b:28:50:c9:c0:4d:0c:d4:27:05:24:36:c5:8e:13:
22:95:b5:dc:2e:23:15:31:2b:00:38:c2:a8:49:1c:
37:15:ec:81:51:7d:9b:5d:75:2d:7c:ab:82:d0:c7:
b5:7a:06:ab:d7:a4:23:e8:23:68:fd:a5:4b:bc:dc:
d3:66:93:b3:dd:84:0c:0f:81:b7:b6:86:79:95:c2:
0d:ed:4f:2c:b4:30:a7:25:52:92:ea:85:c4:35:98:
c3:25:db:fa:6b:49:5a:85:14:23:61:a2:a5:35:84:
85:af:8f:c9:f4:ea:b9:6a:55:8a:f9:5e:fe:76:86:
08:db:84:22:91:9b:40:74:30:a9:79:93:1b:2b:ec:
12:f5:16:e9:90:f9:09:0f:57:49:da:c2:37:5e:2a:
86:a9:c0:dd:3e:f4:14:c3:13:d6:8a:ee:59:73:20:
02:a1:6f:05:27:85:99:c8:b8:eb:db:d9:b3:e9:13:
a0:50:10:1b:81:de:9b:df:5c:eb:f3:78:cd:4c:31:
98:77:d7:2d:ce:8d:7e:e5:f0:c2:af:64:a7:1e:0f:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:4A:C3:38:0C:86:63:E7:25:C4:B8:0E:14:D1:48:89:0B:75:17
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D31KwzgMhmPnJcS4DhTRSIkLdRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:4b:31:ff:b0:99:00:53:c1:1d:1f:cc:ce:2f:b2:a2:3b:4b:
12:6b:7f:17:20:da:dd:e2:84:81:af:b1:c7:24:6f:30:93:d9:
44:fa:2d:e7:d0:2e:b7:15:4e:d6:3a:fe:96:2a:d0:e9:1a:8f:
dc:ae:73:a7:a7:43:89:c2:68:b5:95:2f:65:46:4e:7d:34:94:
87:aa:cc:2c:ce:be:2b:f4:ae:ba:24:0f:db:7c:ae:f2:fa:f5:
f0:ed:12:2d:a8:5b:07:09:da:1c:82:df:65:2a:6c:f0:f9:a3:
56:4e:1d:f3:33:c4:8c:1b:8b:a8:c1:ec:cd:3b:94:2a:33:60:
94:15:75:3c:0f:dd:f5:90:64:a3:67:af:73:81:06:82:bd:f3:
02:71:36:14:77:a1:1a:d3:06:1a:28:f4:0c:1c:e0:fd:bd:fd:
52:0a:26:ba:a6:23:5a:4d:0d:c2:82:bf:6d:32:57:64:95:4d:
06:f9:0f:3f:4f:a4:02:29:fd:41:d7:2e:9e:69:3b:0a:8e:2b:
b5:0e:14:8e:6d:f8:ef:7c:dc:8c:b2:33:08:99:77:9e:fc:70:
d6:db:4e:39:ff:69:85:b1:3c:65:cc:57:98:6d:1d:fe:8e:5d:
a3:3e:f2:96:78:91:2d:94:79:e4:27:df:e7:db:fc:cc:73:ca:
31:f3:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:26 2025 by rpki-client