Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HXzQbdj6weWv97Is_mTygOncqiU.roa
File: HXzQbdj6weWv97Is_mTygOncqiU.roa (raw, json)
Hash identifier: f2ktmvQUkemKtpczoOnjofA2wr3taJOSAzkI+nk+lvE=
Subject key identifier: 1D:7C:D0:6D:D8:FA:C1:E5:AF:F7:B2:2C:FE:64:F2:80:E9:DC:AA:25
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D29
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HXzQbdj6weWv97Is_mTygOncqiU.roa
Signing time: Sat 24 May 2025 15:08:32 +0000
ROA not before: Sat 24 May 2025 15:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3369 (0xd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 15:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1D7CD06DD8FAC1E5AFF7B22CFE64F280E9DCAA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:cb:36:18:65:e4:48:8e:0b:f4:e9:42:57:
a4:59:83:d8:88:71:52:61:ea:c5:2c:0c:04:34:70:
85:05:c1:83:4d:b7:83:46:ed:c8:a0:c5:07:6e:ed:
88:0e:16:b2:1c:3f:bd:f1:63:98:56:41:92:93:39:
9f:2c:4c:c6:85:ca:8a:90:fc:be:1e:2a:cc:fc:60:
31:a2:b0:a1:0a:c2:a0:8c:5c:a8:8a:10:f9:39:86:
04:5d:31:ab:1b:42:a1:84:b1:a1:94:e2:12:46:91:
99:c6:cb:19:54:72:fc:0d:fa:79:fe:d0:4c:01:c0:
96:a1:93:28:cb:71:ba:f3:5e:5e:2e:2f:60:4d:10:
53:78:95:3c:8b:0b:c7:a8:61:c3:34:80:41:81:ef:
b6:82:c3:c1:9d:df:32:c6:98:db:0a:d5:35:3f:25:
4a:2c:6a:60:5b:71:52:20:22:63:66:ad:d5:ca:c6:
40:6c:22:cc:24:fa:62:05:6b:50:a1:11:01:5e:23:
60:6f:e8:24:e4:bc:15:24:89:dc:cd:5b:51:55:3c:
7b:11:1b:fc:be:30:3f:0b:fc:2d:fc:23:79:0c:2c:
e5:f5:a3:41:76:5a:f9:e5:16:d4:b8:a5:24:3e:37:
03:dc:8a:0e:e2:71:68:6c:7e:79:60:28:f7:53:74:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7C:D0:6D:D8:FA:C1:E5:AF:F7:B2:2C:FE:64:F2:80:E9:DC:AA:25
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HXzQbdj6weWv97Is_mTygOncqiU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:45:b8:a1:3f:9d:37:d2:30:17:48:73:c5:2f:f4:ea:d3:53:
6f:fe:75:02:7f:4e:17:e5:2f:c1:1d:5d:c2:64:02:ab:04:0a:
fe:ae:9e:e9:b0:08:d8:0f:a5:5a:8a:b9:5c:cb:ad:7b:c6:53:
8a:93:0c:ab:14:fe:9e:51:f7:a4:39:3e:11:4d:27:22:52:50:
1e:5f:ee:b6:33:05:af:e7:92:39:33:77:9f:88:e6:dd:28:9a:
e9:d1:53:8f:36:aa:c7:36:31:73:6a:23:c2:10:41:13:00:28:
91:a9:28:b7:af:f4:58:14:71:30:84:f8:a0:62:28:16:c9:9a:
f5:fd:f7:60:f1:76:8c:6f:66:b2:e8:3a:51:81:0c:52:c4:9d:
29:5a:ce:8f:dd:14:7e:10:03:6b:bf:bb:e4:6e:c1:ba:e1:70:
01:43:01:d8:14:7f:79:4b:26:8a:b2:9d:a5:1d:38:1d:2a:c8:
e8:16:f3:3c:48:16:e2:cc:5e:42:5c:5d:05:92:98:0d:dd:8a:
5b:e5:4c:4e:45:16:59:46:02:0f:0c:b3:47:1e:af:b4:74:15:
e9:f8:f9:13:8e:55:93:02:7b:60:04:a9:a0:8a:b2:88:e8:07:
71:32:a0:9b:94:55:63:b8:4e:b1:33:90:04:e0:3f:5d:bb:e0:
49:85:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:35:17 2025 by rpki-client