Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/M_-aCjMFoIP8ETYf60uhOWOBgrs.roa
File: M_-aCjMFoIP8ETYf60uhOWOBgrs.roa (raw, json)
Hash identifier: TE3z6WxdXof9znCSeL19ujAjyLnIn5u2SvMuknYnLu4=
Subject key identifier: 33:FF:9A:0A:33:05:A0:83:FC:11:36:1F:EB:4B:A1:39:63:81:82:BB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M_-aCjMFoIP8ETYf60uhOWOBgrs.roa
Signing time: Tue 20 May 2025 05:38:26 +0000
ROA not before: Tue 20 May 2025 05:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 05:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=33FF9A0A3305A083FC11361FEB4BA139638182BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:c5:92:e2:61:b5:ab:98:20:fe:c2:3d:51:
f7:96:27:60:30:19:eb:83:66:d4:bd:89:c3:10:8f:
8b:33:f4:03:ae:8d:32:a6:74:f5:19:59:74:fc:a0:
72:17:c0:d0:3a:49:dc:0e:33:b8:f8:46:97:1f:8f:
df:5b:3a:0e:aa:9f:0d:e1:8b:f8:d9:f0:d5:42:73:
40:96:75:25:3c:46:10:ba:5b:3d:ac:8c:4a:5b:13:
0a:42:3f:80:44:e6:53:98:d6:ca:01:19:71:c7:97:
6e:4b:cf:39:7f:f0:9f:f4:b1:61:26:57:2f:08:1f:
2f:93:86:b8:dc:ad:8d:0e:e1:1c:fd:a5:96:cb:ed:
6b:72:da:30:76:c5:f2:d9:a5:ad:29:d0:d5:4d:e2:
03:2e:b6:85:ff:69:93:40:c0:1b:d3:d0:7a:93:dc:
4d:af:3e:1f:9e:f8:ef:c4:f8:ce:25:e8:4f:a1:4f:
02:e8:a2:e3:95:6b:ed:47:c5:c2:b9:e9:16:e9:ca:
98:fa:de:36:d6:c8:47:24:68:56:b3:77:ea:7d:39:
6c:ca:d8:39:eb:92:4e:c2:ad:62:ae:33:e1:83:22:
f3:84:68:c3:3e:aa:58:ba:64:d3:4d:75:14:92:3a:
cc:e7:5e:8c:f0:80:b8:29:8c:c9:f7:0d:75:df:0b:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FF:9A:0A:33:05:A0:83:FC:11:36:1F:EB:4B:A1:39:63:81:82:BB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M_-aCjMFoIP8ETYf60uhOWOBgrs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:c1:2e:45:c3:1c:e7:65:24:95:02:fb:63:b7:ef:5b:a3:73:
57:87:dd:7a:a6:6d:da:6d:c6:83:72:6a:4a:21:7d:34:ee:0a:
de:31:6d:17:bf:49:08:27:6c:64:b9:a6:dc:7e:45:0c:ad:dc:
13:fa:73:28:b8:72:d5:e7:05:2d:90:bc:17:a2:89:31:19:cf:
a5:00:73:ad:3e:7e:a8:bc:80:d5:52:68:da:0d:69:d8:4f:d7:
48:c3:20:9f:95:85:b8:28:26:d8:83:fb:67:69:1a:ae:7a:16:
a0:77:00:f7:44:1d:c8:6f:b8:31:10:88:7d:bb:95:40:e1:ec:
3f:2c:0c:16:f0:88:56:40:9c:f8:e2:19:e4:61:43:0f:08:8b:
2e:54:10:ad:bd:c3:3a:94:1d:f5:fc:76:e2:34:4c:37:7e:43:
c7:db:56:9d:23:b9:b2:57:c0:59:95:e8:ea:c5:02:44:f9:46:
52:2e:45:82:c8:f5:20:79:82:d6:23:18:93:ec:a8:7b:ac:8d:
a4:c1:5f:a3:0d:90:37:72:de:d0:b6:51:ea:7e:76:8d:68:08:
17:1b:69:d5:2a:d4:f9:8a:79:aa:ca:ce:55:a9:5e:db:dd:e8:
bc:a2:7f:d3:46:36:e7:39:00:8d:8e:0f:34:7b:be:22:b0:5c:
ce:5f:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:22:22 2025 by rpki-client