Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/D8gJ3K6yqC2-LqU0eU8a1Y6XYf8.roa
File: D8gJ3K6yqC2-LqU0eU8a1Y6XYf8.roa (raw, json)
Hash identifier: w0da0yhHtMdgy1Lpwi5/dpvurKdqpZtJSeX0+M5w25k=
Subject key identifier: 0F:C8:09:DC:AE:B2:A8:2D:BE:2E:A5:34:79:4F:1A:D5:8E:97:61:FF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 027D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D8gJ3K6yqC2-LqU0eU8a1Y6XYf8.roa
Signing time: Sat 10 May 2025 09:37:50 +0000
ROA not before: Sat 10 May 2025 09:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 09:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0FC809DCAEB2A82DBE2EA534794F1AD58E9761FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:c1:92:d2:ca:6b:d5:5d:8a:b8:d7:5d:92:
3e:6b:2b:00:5a:80:10:a8:f9:68:c4:ef:10:28:cc:
ae:83:1a:57:6c:03:fa:54:ac:a4:52:c2:e7:66:de:
e3:08:93:01:4c:31:9d:a4:d9:62:20:af:e0:65:d5:
c4:58:c7:58:0b:19:bf:28:0f:b9:c4:8a:87:cc:d6:
54:88:f7:33:c4:e6:26:bf:24:c0:1a:9e:3f:f6:3a:
ce:aa:24:6d:28:11:ad:19:f7:a2:71:9f:94:f2:61:
0c:e4:ad:08:0a:19:d3:b6:46:a8:69:6e:37:2b:44:
96:b0:23:82:56:ca:4a:05:24:26:c9:58:60:4b:c7:
bd:03:3d:6d:67:a2:b4:75:0a:d0:3d:ed:6b:26:7d:
bb:5f:bf:66:ea:94:3c:69:4b:ff:44:5c:9d:c0:21:
f6:aa:ce:52:ac:5e:bf:dc:ac:1a:5a:41:b4:59:d2:
14:ce:3f:00:82:ab:18:00:c4:db:20:ad:1f:97:73:
c0:3a:26:06:f0:4d:89:7f:2c:f3:0d:c9:8e:f0:e8:
9a:b0:2e:37:33:4a:34:ac:5c:61:f7:d0:ef:3d:3f:
1f:41:54:58:0c:c1:e1:f3:d9:90:d8:56:34:d5:b8:
42:b8:35:a5:d1:5e:d5:c0:44:0e:97:2f:e7:b2:68:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:09:DC:AE:B2:A8:2D:BE:2E:A5:34:79:4F:1A:D5:8E:97:61:FF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D8gJ3K6yqC2-LqU0eU8a1Y6XYf8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:68:a8:f7:3d:5e:0c:7c:7a:1e:fa:e8:94:3e:c2:2c:93:57:
f8:ec:85:56:b1:8b:db:78:90:75:df:ed:43:ea:f7:59:10:c2:
81:79:bf:9f:69:b3:17:2b:bf:87:81:50:fd:fa:0a:29:e0:ae:
5d:e5:8f:62:9d:03:4a:9c:03:a4:11:00:36:fc:68:19:95:8c:
11:5c:e4:d7:4b:a1:ec:66:0f:0c:bc:df:4e:ed:bf:de:e3:e2:
7d:4a:eb:f2:f2:d9:6a:54:16:64:e8:25:90:ce:ac:67:c9:de:
93:98:e0:58:c9:bf:e2:e8:98:4f:b2:12:6e:d1:b3:64:ce:c4:
50:ec:ba:66:11:d5:bd:6c:55:ac:ae:c7:b8:ba:c5:66:09:6b:
28:28:19:fd:49:ad:55:e3:7e:65:4c:4f:0d:58:8c:f3:92:5e:
1b:a4:36:0a:6c:d9:df:b3:89:ce:d7:d3:2d:74:6b:ed:dc:9e:
71:5e:a6:1d:16:bc:ba:38:24:04:d2:4b:0b:f0:1a:18:11:90:
c8:7a:75:ea:00:10:6f:52:53:dd:66:c3:4d:c7:11:1f:45:ad:
6a:26:70:b1:a6:15:6f:75:ef:71:ea:e8:d4:a8:b5:51:10:e7:
5b:cc:94:e2:a6:1e:79:11:d7:fc:b4:fb:3a:27:04:83:f4:28:
4b:79:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:07 2025 by rpki-client