Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QXW_T74Xkt1l3sbawAKoeqfU9wg.roa
File: QXW_T74Xkt1l3sbawAKoeqfU9wg.roa (raw, json)
Hash identifier: sA5OUJ16l6xcyrcd7vF2jzlxOZWk7lwRqlmyh+mWs7s=
Subject key identifier: 41:75:BF:4F:BE:17:92:DD:65:DE:C6:DA:C0:02:A8:7A:A7:D4:F7:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E8D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QXW_T74Xkt1l3sbawAKoeqfU9wg.roa
Signing time: Mon 26 May 2025 11:39:02 +0000
ROA not before: Mon 26 May 2025 11:39:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3725 (0xe8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 11:39:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4175BF4FBE1792DD65DEC6DAC002A87AA7D4F708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:81:fc:92:53:c0:f5:93:07:56:2c:81:ce:a0:
8f:fd:09:fb:89:b8:99:f1:80:78:1c:d3:32:ed:4b:
d8:3e:73:25:c2:6a:39:24:c8:f8:0e:fc:70:41:06:
50:7b:f3:4a:28:3c:50:76:f8:d5:8a:1d:b9:71:db:
14:54:2e:b0:2d:0d:35:d3:69:d2:6c:95:2a:98:64:
f0:64:27:4d:14:61:2e:ed:5f:12:20:41:42:cb:d7:
4f:d1:58:92:0c:31:d0:5f:70:8c:c7:4a:00:23:84:
a2:36:df:28:15:fc:f1:3c:52:e6:af:d8:91:7c:4e:
fe:20:af:81:83:69:d6:2d:04:c7:39:e4:bb:d0:2d:
1a:5b:ee:cd:91:c8:b9:9b:f6:dc:e6:ea:35:07:e1:
62:9d:9e:af:73:34:75:21:86:09:57:88:ab:a6:27:
0f:e7:62:98:cc:30:43:4c:48:0c:3d:6e:6f:63:65:
93:4d:1f:5a:1a:55:91:a5:f7:12:3e:28:8a:0a:63:
75:99:43:b7:e1:55:fd:c9:25:ac:f8:b4:f8:a7:53:
88:0f:45:ff:42:a5:db:26:23:a6:2f:6a:02:65:23:
8c:94:d0:b7:78:f2:e3:3a:a8:29:8a:ae:a2:26:23:
82:68:3f:cb:78:ef:17:a7:16:d9:ba:b3:8f:46:4a:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:75:BF:4F:BE:17:92:DD:65:DE:C6:DA:C0:02:A8:7A:A7:D4:F7:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QXW_T74Xkt1l3sbawAKoeqfU9wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:ad:c7:1c:6c:c2:ff:9d:e0:ac:8e:5f:3a:46:98:3b:a4:39:
b5:1b:b0:bd:ec:81:eb:2f:45:27:16:a8:e7:a3:26:11:32:bf:
2e:f9:4e:1a:8e:43:54:21:17:a8:71:02:61:cb:15:be:be:ca:
e0:68:3f:3c:92:10:2c:45:90:0d:4b:4d:27:06:2a:5d:30:cb:
86:e5:b8:11:98:31:e7:1b:2a:12:a1:1a:dc:69:1b:4d:f5:96:
9b:4d:88:60:14:b0:4e:c5:86:29:4c:53:40:db:39:8f:58:36:
39:44:dd:2d:25:3b:7e:53:60:e0:2a:80:c9:91:fc:49:24:74:
16:04:1b:3e:1e:2e:d4:a3:0c:0b:7d:79:d8:83:31:61:e3:55:
ef:33:bb:3a:f8:d8:b6:cc:4a:ac:a0:24:ef:35:b4:c4:ef:88:
4d:02:fb:7f:2a:eb:37:5e:01:0b:42:62:a9:de:9e:7b:7e:88:
1d:6b:ba:dd:a4:5d:3f:69:e2:f7:c7:d8:0a:22:9c:d1:46:aa:
28:1b:d3:a8:28:b7:ad:13:e5:e4:c9:f6:f2:8d:45:a3:3a:b6:
dd:16:5f:5b:b7:50:19:c1:58:74:6b:dd:18:47:07:1f:78:2f:
dd:3f:de:18:b6:71:a7:65:a5:e0:f5:9b:34:47:f6:a6:06:f8:
00:49:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:56:44 2025 by rpki-client