Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KkM1CKoardmQ2124S_zEPbaMDdo.roa
File: KkM1CKoardmQ2124S_zEPbaMDdo.roa (raw, json)
Hash identifier: Lorwj3+c/61Iktgwhk8AojD9zmVSwOrSVdWzn77QRfk=
Subject key identifier: 2A:43:35:08:AA:1A:AD:D9:90:DB:5D:B8:4B:FC:C4:3D:B6:8C:0D:DA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02AD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KkM1CKoardmQ2124S_zEPbaMDdo.roa
Signing time: Sat 10 May 2025 15:37:51 +0000
ROA not before: Sat 10 May 2025 15:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 15:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A433508AA1AADD990DB5DB84BFCC43DB68C0DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:2e:97:15:8b:fb:76:9c:d0:72:97:09:e8:
70:c7:04:6e:d5:59:d4:23:0e:4f:15:50:eb:60:b2:
8c:c2:c8:94:f1:c9:54:82:02:a0:70:bf:61:71:40:
74:04:fe:20:92:cc:97:bd:2e:c0:c8:8e:22:95:79:
3e:a5:ec:b6:26:cb:12:1c:d5:6f:4b:68:2b:f0:bc:
03:ea:8c:3a:1f:42:62:f2:df:a2:e9:05:5e:20:bc:
8d:41:a5:25:1c:be:af:b9:e5:67:95:98:b5:49:a8:
c5:b3:eb:20:12:cd:9b:c8:ed:5f:36:d1:de:3d:66:
cc:7d:01:16:cd:68:a1:33:b5:51:df:f5:16:14:6b:
e2:e4:ed:a5:96:e8:87:48:fb:b2:fc:2a:cf:06:d2:
de:39:33:ef:06:bc:fb:ef:70:06:13:3d:ae:fc:9e:
d0:a6:a8:0b:6a:11:c9:cb:60:fa:d5:52:67:07:19:
ed:3a:91:e9:64:96:2c:13:b9:0f:d7:af:be:ae:42:
09:59:29:13:76:31:6b:0c:06:ff:d2:38:7a:7e:c6:
ba:e3:71:58:bb:24:a6:43:b5:4b:17:ba:a4:68:9c:
39:8c:8f:fc:dc:c1:4e:49:c8:88:27:11:ec:9b:52:
21:b1:5a:ca:7a:10:20:90:85:29:4c:51:19:71:3f:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:35:08:AA:1A:AD:D9:90:DB:5D:B8:4B:FC:C4:3D:B6:8C:0D:DA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KkM1CKoardmQ2124S_zEPbaMDdo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:1e:4f:8c:05:6a:52:dd:24:51:e4:91:c8:ff:ca:0a:ee:45:
e6:2f:d6:90:cb:1f:e1:46:83:13:99:6a:90:22:14:fc:61:7d:
1c:25:9a:80:5d:5b:e0:1d:f9:4c:7d:a4:51:a8:f2:32:31:9b:
04:b3:74:61:d1:e7:07:eb:8a:29:d9:a6:15:a0:75:e5:1c:03:
40:8b:f6:75:b8:2f:2a:aa:70:ee:07:28:8a:dd:bc:c3:01:b9:
52:82:f9:28:1c:09:41:13:41:1d:7f:83:03:47:eb:f7:98:89:
ea:dc:78:ac:37:b6:b8:a5:98:3c:3b:76:d4:18:1b:61:8b:d7:
ad:52:ff:89:5c:9d:40:5c:fd:b4:84:b7:5a:6e:45:71:0d:c4:
20:c3:17:37:14:58:4b:f6:25:aa:fd:bf:85:92:a7:bb:a2:32:
f9:fd:cb:c3:35:45:7b:1c:11:3d:88:ce:0d:62:02:99:53:e4:
b1:f9:ac:bf:07:1d:45:1c:3e:ef:79:98:d0:58:a0:62:da:d1:
18:27:d8:d3:70:7b:25:4c:fd:bf:39:71:18:7a:8e:ad:ef:fe:
32:ee:3b:84:5c:76:b1:67:f2:97:50:75:0e:7d:96:04:ea:84:
08:94:d8:28:03:bd:20:9f:8f:f6:aa:ec:1a:cf:76:47:20:fe:
06:6d:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:00:16 2025 by rpki-client