Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PvnIUbyYZoxY-OgrJp6hkedmg1Y.roa
File: PvnIUbyYZoxY-OgrJp6hkedmg1Y.roa (raw, json)
Hash identifier: k9baRBtONmX3pK7cNbcngBy/Xn3WyhiWTR+q2XQqKfY=
Subject key identifier: 3E:F9:C8:51:BC:98:66:8C:58:F8:E8:2B:26:9E:A1:91:E7:66:83:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0139
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PvnIUbyYZoxY-OgrJp6hkedmg1Y.roa
Signing time: Thu 08 May 2025 17:07:43 +0000
ROA not before: Thu 08 May 2025 17:07:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 17:07:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3EF9C851BC98668C58F8E82B269EA191E7668356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:4a:7d:de:aa:44:f7:8a:fe:29:0e:a7:72:
24:e3:65:82:d2:92:5b:90:0e:6c:84:e3:3b:64:28:
8b:f2:fa:dc:28:c9:0e:0a:28:e3:ac:43:a0:a5:f9:
1b:9d:dd:3e:2c:3f:38:52:8d:d4:9d:c1:88:9a:05:
82:94:f4:b8:6c:0f:cd:06:9a:8d:ae:55:21:7c:67:
1b:f8:fd:48:26:7a:a2:08:be:e7:99:72:6d:22:b4:
f9:41:67:ca:66:b7:b7:36:ec:4f:9a:cd:7f:d0:16:
3f:96:6e:e7:80:87:88:11:51:17:8e:3d:2a:1d:d5:
4d:13:83:02:9b:0b:d5:aa:0d:90:9f:36:6f:db:65:
45:18:e2:85:39:36:8f:18:af:fa:9a:6c:fd:63:89:
29:87:d6:45:ef:8c:61:45:08:a2:63:02:ae:0b:bf:
5f:36:45:9e:21:c3:e3:7f:b7:c6:54:60:a3:74:db:
15:79:af:bd:4b:d1:4c:6b:6b:fc:c1:f6:a3:77:f0:
b3:77:b3:c9:6a:4f:36:36:98:bb:e6:a0:2c:53:b0:
4a:1d:75:19:c9:a3:50:99:61:a0:7e:c5:c6:30:eb:
06:fe:d9:44:d3:6c:20:ef:e2:97:75:e1:e0:92:7f:
1b:71:45:f8:a3:02:2a:92:fe:3d:f1:78:65:95:c5:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:C8:51:BC:98:66:8C:58:F8:E8:2B:26:9E:A1:91:E7:66:83:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PvnIUbyYZoxY-OgrJp6hkedmg1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:a6:42:ac:51:80:18:67:f8:0c:70:00:8f:84:42:0a:9e:c5:
b9:bf:f6:11:10:ee:94:f0:89:ec:7b:e8:72:19:fb:9b:4b:4a:
fe:ab:82:c3:19:28:d2:61:da:15:d8:e9:1e:62:2d:ce:69:57:
43:e8:b0:94:43:c1:3e:75:9e:41:78:19:37:93:ab:8c:78:86:
e8:f5:e1:ca:2f:d3:5b:78:5f:28:8a:1e:25:dc:16:de:31:76:
65:72:e2:fd:7f:44:64:e6:ac:f1:0e:97:07:94:9e:c2:2c:e5:
b7:1d:df:d3:ec:7b:bb:30:1e:a4:9f:79:a6:ef:16:de:c8:31:
8a:7d:66:2d:ff:77:39:a2:1c:3b:b4:c4:70:96:a2:f0:aa:20:
9f:11:98:24:82:6c:a8:08:bc:80:94:8b:ec:8d:4a:b3:29:c0:
e4:13:37:37:ca:ec:4b:25:3a:2c:10:7a:9f:4f:d5:8a:dd:7c:
28:a7:4e:69:6a:cb:ef:f6:34:75:66:ee:bd:ce:59:54:54:b0:
30:66:75:01:81:6c:a0:07:c9:49:b2:f1:24:f1:46:98:22:a3:
5f:0f:91:92:cc:6b:a1:36:55:60:6f:d0:9d:e3:58:7a:a3:85:
70:f4:84:30:2f:60:5c:bd:f0:35:a1:46:40:03:39:f4:d6:91:
b3:60:e7:09
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgx
NzA3NDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNFRjlDODUxQkM5ODY2
OEM1OEY4RTgyQjI2OUVBMTkxRTc2NjgzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5Q0p93qpE94r+KQ6nciTjZYLSkluQDmyE4ztkKIvy+twoyQ4K
KOOsQ6Cl+Rud3T4sPzhSjdSdwYiaBYKU9LhsD80Gmo2uVSF8Zxv4/UgmeqIIvueZ
cm0itPlBZ8pmt7c27E+azX/QFj+WbueAh4gRUReOPSod1U0TgwKbC9WqDZCfNm/b
ZUUY4oU5No8Yr/qabP1jiSmH1kXvjGFFCKJjAq4Lv182RZ4hw+N/t8ZUYKN02xV5
r71L0Uxra/zB9qN38LN3s8lqTzY2mLvmoCxTsEoddRnJo1CZYaB+xcYw6wb+2UTT
bCDv4pd14eCSfxtxRfijAiqS/j3xeGWVxWMxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPvnIUbyYZoxY+OgrJp6hkedmg1YwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Qdm5JVWJ5WVpveFktT2dy
SnA2aGtlZG1nMVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAamQqxRgBhn+AxwAI+EQgqexbm/9hEQ7pTw
iex76HIZ+5tLSv6rgsMZKNJh2hXY6R5iLc5pV0PosJRDwT51nkF4GTeTq4x4huj1
4cov01t4XyiKHiXcFt4xdmVy4v1/RGTmrPEOlweUnsIs5bcd39Pse7swHqSfeabv
Ft7IMYp9Zi3/dzmiHDu0xHCWovCqIJ8RmCSCbKgIvICUi+yNSrMpwOQTNzfK7Esl
OiwQep9P1YrdfCinTmlqy+/2NHVm7r3OWVRUsDBmdQGBbKAHyUmy8STxRpgio18P
kZLMa6E2VWBv0J3jWHqjhXD0hDAvYFy98DWhRkADOfTWkbNg5wk=
-----END CERTIFICATE-----
Generated at Wed Jun 4 03:28:45 2025 by rpki-client