Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Se6F0KYB3n4m_2cTfwoA9pTXnj0.roa
File: Se6F0KYB3n4m_2cTfwoA9pTXnj0.roa (raw, json)
Hash identifier: EsrJ0SJc1ojouz8jgMq+7MoM8FgaNBMeaaQXf9uJK4o=
Subject key identifier: 49:EE:85:D0:A6:01:DE:7E:26:FF:67:13:7F:0A:00:F6:94:D7:9E:3D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C31
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Se6F0KYB3n4m_2cTfwoA9pTXnj0.roa
Signing time: Fri 23 May 2025 08:08:26 +0000
ROA not before: Fri 23 May 2025 08:08:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3121 (0xc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 08:08:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49EE85D0A601DE7E26FF67137F0A00F694D79E3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:e7:cb:a2:ad:3b:05:7e:d5:e9:93:89:82:
c6:68:36:69:21:3e:16:10:89:5c:96:36:2c:0c:e6:
1b:8b:00:43:6d:31:65:68:63:4f:12:75:bf:19:e0:
7b:44:d5:53:1c:7c:28:86:47:9b:1e:0d:3b:7f:95:
40:47:bc:f5:33:19:6b:8d:ed:e2:a2:e1:24:47:4e:
c1:6d:7a:56:9f:cd:08:9e:d9:d9:b9:78:b8:9e:5e:
0b:5f:4f:e3:32:83:a4:8b:88:2c:25:d1:6f:0b:8b:
92:22:9a:ac:f9:2c:a0:1f:74:d2:c5:29:08:e9:2e:
c1:30:da:3c:63:ac:40:a0:c1:fe:71:96:01:8e:64:
98:5b:32:95:41:98:81:19:0f:26:aa:61:3f:c4:d7:
a1:40:47:bd:a0:21:76:a2:3b:6f:9a:80:50:81:00:
a1:b2:a4:36:24:58:77:15:dc:8e:f8:e3:63:7d:37:
4d:f9:87:cb:2c:8e:2c:2c:60:d6:0b:82:4b:0d:3f:
c2:b9:a6:16:92:3b:3b:39:95:53:af:35:00:c9:e5:
bc:3b:e7:35:54:d4:aa:99:cc:cc:14:c9:17:12:18:
67:b9:94:b2:63:38:cb:22:46:f5:03:4c:24:7f:fe:
c6:25:16:6d:5f:90:a7:8a:74:2d:ce:fe:5e:cf:f7:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:85:D0:A6:01:DE:7E:26:FF:67:13:7F:0A:00:F6:94:D7:9E:3D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Se6F0KYB3n4m_2cTfwoA9pTXnj0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:38:d1:b3:a6:ec:4e:39:b8:86:eb:bc:6e:b3:65:d0:6c:12:
01:40:71:34:0c:1f:1c:96:74:79:1c:e1:2e:08:38:38:94:e2:
5e:15:ff:6e:e1:32:a1:20:70:c4:32:af:5b:ca:d1:7b:63:25:
09:1d:97:93:ab:55:ca:17:6d:69:0e:2c:29:57:15:6b:a0:f0:
6e:c9:67:a2:57:09:7f:15:c4:b7:42:9a:5d:6c:7b:e5:cc:13:
80:6e:0d:03:e3:5c:25:41:e6:e7:a7:4d:03:63:22:b0:fb:ac:
5a:43:2d:44:86:0e:68:8f:3b:18:d8:c3:a8:3d:83:bd:60:1d:
ea:1c:b1:25:ac:eb:fa:10:a7:a3:db:b2:61:2e:62:9e:d9:fa:
53:0d:de:14:68:d3:39:3d:cf:e0:d9:01:e3:87:70:15:c5:2a:
d9:29:76:2c:4c:99:36:05:30:a4:07:40:e9:8c:2b:c5:d4:30:
e5:0e:79:08:5b:98:bd:57:40:8e:fa:41:94:d1:fb:ea:b5:b0:
b3:85:90:68:01:fa:c8:42:95:7c:e1:e2:5b:25:6d:15:84:9d:
b7:db:b6:e6:34:dc:b9:d6:ec:b2:71:74:a9:6a:ab:f5:5b:d6:
f2:fe:be:06:32:ed:cf:22:9e:0d:fe:cb:11:d3:02:82:99:31:
c2:f4:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:29 2025 by rpki-client