Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/H4mO6-rhPHcWVi00W9HyxqdwY5c.roa
File: H4mO6-rhPHcWVi00W9HyxqdwY5c.roa (raw, json)
Hash identifier: I3wj7uuSsJ9o074S0rviKTyGjNYHdjc9jy8NZSuGX6w=
Subject key identifier: 1F:89:8E:EB:EA:E1:3C:77:16:56:2D:34:5B:D1:F2:C6:A7:70:63:97
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F3D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H4mO6-rhPHcWVi00W9HyxqdwY5c.roa
Signing time: Tue 17 Jun 2025 17:40:05 +0000
ROA not before: Tue 17 Jun 2025 17:40:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7997 (0x1f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 17:40:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1F898EEBEAE13C7716562D345BD1F2C6A7706397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:ce:55:9a:7a:75:dc:c6:fd:af:a2:88:44:
8d:ef:53:bc:de:1c:f1:24:d1:f7:af:3d:38:9a:32:
bc:16:58:9a:3b:3e:f4:0e:49:1b:5a:72:55:55:da:
35:17:30:15:d0:94:59:52:3d:5c:e3:da:27:ca:1c:
e4:ce:94:2d:15:94:76:71:bd:70:90:c9:a1:02:e7:
ed:03:c5:2a:c9:35:a2:d1:ac:80:92:64:bf:8d:e1:
24:f1:f7:5e:4e:b8:9b:04:75:e6:9b:80:dd:96:a6:
6c:23:3b:22:24:f0:03:c4:e9:35:18:b4:e3:47:44:
38:52:32:82:04:8e:50:29:01:c1:7e:e5:1f:8a:08:
6f:70:3d:0b:51:ac:7c:6f:bb:af:15:5d:09:f6:64:
fa:01:25:a3:e8:28:f4:be:6c:71:58:fa:a9:57:c2:
75:00:d0:8c:0c:9a:f1:d0:e7:a5:15:51:25:b2:be:
7a:47:6a:cd:0a:bc:ee:b4:ca:8d:1a:9c:d5:5e:88:
4a:5e:4a:8c:f4:2e:6f:7c:cf:c2:c8:f4:3a:31:d1:
e6:9e:1c:82:58:92:c1:11:8a:0d:fb:56:ba:d2:6b:
ac:a4:76:2f:08:d6:bd:46:b9:d1:ca:0a:4a:fa:5d:
3d:5e:ff:49:03:46:61:5d:d2:41:f9:a0:ef:3d:ad:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:89:8E:EB:EA:E1:3C:77:16:56:2D:34:5B:D1:F2:C6:A7:70:63:97
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H4mO6-rhPHcWVi00W9HyxqdwY5c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:c4:15:ae:41:b1:c7:27:3e:58:8c:f5:16:88:00:a2:d9:ac:
92:fd:40:94:13:d5:c5:d1:e5:ec:51:d5:3d:36:e3:1c:c9:27:
05:f1:41:c2:f8:b9:f6:db:c1:6b:9e:73:97:b9:bd:e7:69:08:
85:55:c2:cb:ec:71:ab:43:6c:da:a4:f8:ad:be:6a:cd:74:13:
50:d8:0f:dd:82:43:c9:2b:8a:ed:c4:f5:d2:1c:ec:31:b7:d4:
d1:2f:2a:93:45:37:31:fd:7f:8e:ee:a8:d9:03:42:cf:86:d3:
c8:c2:25:58:b4:40:ec:95:d0:8e:9a:bd:49:ae:85:a7:b6:a1:
07:80:d0:3b:79:f1:96:4f:7f:04:cf:41:72:bd:33:51:09:bc:
ed:76:6e:a3:c2:76:67:74:a5:81:70:63:6c:cd:ac:6b:4b:94:
95:19:ee:62:3b:50:0c:de:37:da:f1:57:79:30:11:ee:e3:3e:
c8:8c:7f:9e:88:a7:c9:8f:c6:3d:8a:40:91:fe:6b:06:f4:bf:
9d:e2:bb:a4:05:87:87:ae:cd:c5:24:3d:c9:d6:e8:2e:8b:52:
f3:34:b0:45:57:0d:ee:a5:41:a9:42:60:fd:0f:1f:8d:2b:7e:
09:91:0d:3b:4e:f8:4f:75:db:03:58:9a:62:91:d3:01:75:10:
71:02:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:11 2025 by rpki-client