Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QLB-kjnsYOzpNlCSS34b7YEWBOc.roa
File: QLB-kjnsYOzpNlCSS34b7YEWBOc.roa (raw, json)
Hash identifier: /+2gw7qBgcfMhVpXWkyliq9+N5xzmWwRYBG7iIP/Upg=
Subject key identifier: 40:B0:7E:92:39:EC:60:EC:E9:36:50:92:4B:7E:1B:ED:81:16:04:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0715
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QLB-kjnsYOzpNlCSS34b7YEWBOc.roa
Signing time: Fri 16 May 2025 12:38:42 +0000
ROA not before: Fri 16 May 2025 12:38:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 12:38:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=40B07E9239EC60ECE93650924B7E1BED811604E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:33:5a:a6:fe:f4:19:5c:82:f8:82:5f:44:
c2:22:b0:d3:c1:b5:25:11:49:3c:ad:ce:ce:33:27:
e0:4e:64:da:57:d9:bd:55:73:d1:06:fb:3b:92:f8:
2c:89:60:e3:38:df:37:c8:e5:6f:6d:0b:09:87:26:
76:3d:d5:23:6f:c3:43:e2:bb:0b:33:ed:63:11:55:
42:d2:2d:fc:14:52:b0:9f:0d:16:50:17:33:99:a2:
d0:15:aa:ef:db:63:7c:a0:e7:23:63:f0:fa:0d:46:
01:06:f1:85:58:8d:6f:34:f1:75:13:36:7b:4b:28:
26:44:f6:aa:d0:1c:8e:7a:92:a9:c6:47:d3:f6:2c:
65:b8:52:99:69:41:31:95:6f:3f:3b:b1:99:d0:70:
30:a1:29:c9:d6:81:32:63:b8:f3:d4:f9:50:3e:9a:
2c:d0:8f:88:80:f9:5f:9e:d2:f1:94:0d:02:81:90:
a6:9d:3e:d7:25:d0:de:d1:7e:df:60:2a:f6:56:6c:
70:f4:e8:ee:e2:95:09:4c:1d:e6:50:03:d7:30:3a:
23:ab:e8:66:34:f9:67:3f:d1:cb:ea:f3:7b:42:d7:
3d:9e:b6:7e:1b:8b:82:57:8b:c6:b7:ac:1c:01:01:
70:c2:ed:ba:f4:fb:b1:47:c4:03:51:5b:fc:aa:05:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:7E:92:39:EC:60:EC:E9:36:50:92:4B:7E:1B:ED:81:16:04:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QLB-kjnsYOzpNlCSS34b7YEWBOc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:02:49:29:b3:70:7a:87:5b:ba:bd:d1:84:8d:ed:33:cf:13:
c7:b8:7c:c0:99:42:d3:20:89:17:48:06:70:e0:ba:85:24:de:
96:8c:a4:08:df:71:83:7a:5f:70:54:7a:06:bc:70:ba:28:14:
bb:3a:19:5c:9a:a6:6c:8f:c3:95:70:47:ba:39:5f:66:47:4f:
2e:41:57:46:2e:9e:cc:47:32:99:5b:95:46:5d:9b:d5:32:ab:
af:5c:60:d3:b9:3b:f4:a3:b6:65:60:9c:3d:3f:6e:ed:64:3b:
39:41:e7:64:92:b9:a4:db:90:0a:69:33:90:7b:0e:e6:1e:b6:
a7:f2:58:df:30:84:d0:ea:47:1f:f9:62:45:2f:98:a1:cb:b1:
21:c3:1d:d0:8a:36:9e:fc:84:0b:10:8d:0b:49:0c:c5:d7:f7:
ef:cb:e2:7f:dc:11:b8:94:38:3e:1f:46:08:3a:de:0f:64:9c:
1e:f0:fa:71:33:b4:a7:3d:68:84:32:c8:fe:41:46:00:b7:e3:
a8:77:4a:7b:d5:e0:ba:c5:57:da:7e:51:71:94:5a:86:40:bb:
d5:d5:6f:a5:c6:68:f2:e1:3e:56:fb:20:f1:af:2f:d4:c8:6e:
21:d1:38:e9:e1:05:78:96:e7:34:77:02:e0:78:ae:73:09:76:
a9:47:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:14 2025 by rpki-client