Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/MAkDC6wuSaHCLIi-z7PfaL8d2ek.roa
File: MAkDC6wuSaHCLIi-z7PfaL8d2ek.roa (raw, json)
Hash identifier: ScNkCPbZooQ/jMtsbtqZl8Rd/sfseZyOWxH7uDkmJ28=
Subject key identifier: 30:09:03:0B:AC:2E:49:A1:C2:2C:88:BE:CF:B3:DF:68:BF:1D:D9:E9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23C1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MAkDC6wuSaHCLIi-z7PfaL8d2ek.roa
Signing time: Tue 24 Jun 2025 05:41:57 +0000
ROA not before: Tue 24 Jun 2025 05:41:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9153 (0x23c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 05:41:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3009030BAC2E49A1C22C88BECFB3DF68BF1DD9E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e8:d0:f0:8f:ec:f5:5c:ec:b7:e7:ce:b7:
39:af:a6:2d:e3:c3:51:86:de:c9:a8:12:1a:da:a9:
ae:25:09:75:83:46:4c:b9:be:3b:a2:ea:0c:23:f9:
2a:66:9c:ec:aa:e8:b1:d3:eb:48:1e:ae:42:12:7f:
8d:d5:a8:96:be:c6:3f:0e:c1:d6:ba:43:d1:3d:77:
f2:98:bd:ab:89:c5:07:da:f2:2f:9e:85:53:16:e2:
aa:90:30:eb:99:c0:61:f2:4c:65:98:8e:7d:ee:89:
9b:4e:1d:79:cb:fd:7d:4c:26:dc:14:2f:7c:6e:a6:
2e:d4:40:7b:19:3f:9e:26:1c:56:ac:ee:6c:1d:34:
68:c7:dd:92:ef:f2:26:ec:59:ef:63:a7:c1:2c:44:
5e:49:b9:b5:09:ff:de:88:79:80:fd:2a:1e:2e:ce:
9e:da:2e:c9:0d:5a:f5:45:06:a1:82:06:36:15:9f:
31:64:96:15:e9:a9:44:be:7b:2a:2e:f5:50:0d:95:
8f:15:f8:6d:9f:3d:8d:21:d9:f5:7c:ac:a4:fd:87:
1e:4a:72:b4:8e:a2:a5:0e:11:06:e4:91:a6:49:12:
cb:d9:9f:79:69:c1:c6:c5:1d:51:7b:4a:1e:6d:ac:
a8:41:8f:8b:d2:d8:d7:e3:ca:44:cf:79:86:c9:98:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:03:0B:AC:2E:49:A1:C2:2C:88:BE:CF:B3:DF:68:BF:1D:D9:E9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MAkDC6wuSaHCLIi-z7PfaL8d2ek.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:46:fb:ac:6a:21:22:8c:32:72:40:42:e2:34:95:7a:00:e2:
13:81:ea:04:04:39:2c:76:02:66:ec:5a:87:11:cf:01:43:97:
a8:62:b6:a5:06:77:79:ea:bc:72:72:29:5d:19:06:d3:92:87:
b9:6b:88:33:03:76:85:bc:dd:2f:6e:e0:61:ea:14:31:40:9b:
75:4d:b9:53:35:fe:0f:ba:59:5f:fe:59:49:63:50:83:70:75:
3d:23:de:15:6e:cd:f9:7f:7c:12:f0:d4:90:ba:3e:3a:a6:77:
fc:29:ff:21:a7:31:eb:33:41:5e:c8:b9:1f:04:24:8a:65:d4:
f1:db:71:c0:b7:18:b8:ef:b3:3b:f0:fa:5d:55:81:42:fb:f0:
c9:da:db:98:de:f1:0f:5e:79:6b:0f:9c:d2:80:09:f8:37:a2:
83:f5:58:9b:94:43:eb:db:e4:af:b2:05:63:39:c5:07:78:4f:
4a:63:6b:18:b3:51:f3:5c:97:5b:ef:aa:aa:14:f7:a9:c4:b8:
ee:ff:06:60:bc:8e:cd:c9:a5:c9:27:6f:f2:82:f4:66:e3:05:
a9:22:70:d6:a9:02:db:3c:35:1f:d5:04:6b:25:d5:6a:e0:cb:
1e:91:c4:f9:98:ef:ef:44:77:e0:c1:fa:db:e2:02:b6:3b:0f:
0e:46:e0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:09 2025 by rpki-client