Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LobaL18ohJ6VKFauNDyUTVNJkms.roa
File: LobaL18ohJ6VKFauNDyUTVNJkms.roa (raw, json)
Hash identifier: o60tBgJLigyUMv5C8oIh7LIrfXARJwfARLunQfx/HRM=
Subject key identifier: 2E:86:DA:2F:5F:28:84:9E:95:28:56:AE:34:3C:94:4D:53:49:92:6B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1355
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LobaL18ohJ6VKFauNDyUTVNJkms.roa
Signing time: Sun 01 Jun 2025 20:39:12 +0000
ROA not before: Sun 01 Jun 2025 20:39:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4949 (0x1355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 20:39:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2E86DA2F5F28849E952856AE343C944D5349926B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:1b:58:f5:a4:fa:76:d2:7d:09:da:f0:aa:
31:c6:f0:aa:16:ed:f7:a4:12:93:71:c6:dc:d0:f1:
ce:f5:8e:40:eb:1a:b7:7a:75:c9:95:ff:5e:f5:63:
9b:13:a8:18:77:bb:f4:be:f1:df:e6:f7:c3:9e:3b:
33:16:8b:b5:e7:af:60:ea:bc:f4:6a:ff:15:31:7e:
1a:a2:ac:95:9f:1b:de:cf:ea:df:0d:76:d8:57:3a:
24:5b:a9:db:b2:3a:4e:43:cc:af:0e:60:e1:41:1f:
21:e3:75:be:fb:c6:69:cd:cc:8e:58:7f:cf:63:42:
d9:6d:5b:d0:9d:a7:a6:96:98:85:8b:03:bb:78:29:
b9:1f:f9:25:1d:a6:a4:83:d2:63:44:98:04:15:a2:
eb:3a:34:bb:35:79:7c:ac:90:a5:20:3a:19:8c:e8:
85:3e:12:1f:10:5c:00:5e:a3:03:0f:d6:8b:d5:1c:
90:54:f9:23:31:16:c8:f0:af:bf:07:85:3d:c9:02:
ab:44:4e:f7:22:82:36:a3:48:3b:7b:b2:53:82:5f:
33:5d:c7:c0:0e:9c:1e:78:e2:90:be:66:b5:a1:3e:
61:d6:21:40:6e:c2:b5:70:67:b6:d8:fa:b8:fb:77:
c6:d2:2e:a3:37:42:5b:ec:dd:6e:24:ec:0b:cb:2f:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:DA:2F:5F:28:84:9E:95:28:56:AE:34:3C:94:4D:53:49:92:6B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LobaL18ohJ6VKFauNDyUTVNJkms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:9f:aa:f3:b8:5a:e9:d3:b3:18:91:8a:48:e6:81:59:75:4e:
88:d8:9a:3f:9f:e7:40:81:12:45:8a:93:39:25:4a:55:f3:ff:
a4:c1:e5:9f:11:9d:f1:f9:d6:c6:32:07:21:52:fb:81:ea:98:
fe:05:b1:f6:f2:b2:cf:00:a7:17:44:b2:d1:d8:7e:51:e0:d3:
00:7e:0a:50:51:b9:e5:57:9a:3d:6e:27:f0:5a:7b:f5:47:dd:
4c:26:0c:9e:7a:d9:d8:71:36:1e:52:28:14:67:dc:9b:3a:9d:
2a:bf:ff:87:f1:52:06:99:0c:6b:46:97:9b:af:e2:94:b8:3c:
1b:0e:11:49:93:66:dd:95:03:45:d7:d4:5b:0f:d6:05:c9:ed:
80:d9:1b:19:91:3f:80:d6:72:95:7c:27:c5:57:96:4c:fc:71:
95:1c:51:72:a5:5e:4f:ce:a9:59:c0:27:3e:2a:56:77:a4:d0:
f5:ca:95:5f:e1:dd:0b:ed:3c:61:cb:8a:42:f8:7f:80:58:e6:
87:04:fa:2d:fa:b4:3f:fa:0f:93:1f:9f:64:e3:71:e2:dc:04:
74:59:eb:69:d1:cb:d4:2f:c4:f1:cc:47:c7:b7:52:f2:a2:f1:
03:e5:1f:32:7b:e0:5f:53:2e:8f:5a:59:ec:78:f7:a7:51:01:
f7:31:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:28:51 2025 by rpki-client