Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Sk0F99MgYTty8r0ybvaL5NUHFXU.roa
File: Sk0F99MgYTty8r0ybvaL5NUHFXU.roa (raw, json)
Hash identifier: JbWrPYNWjU2oyAAs87RFik6NmVar22dGW2mK5EzVfP8=
Subject key identifier: 4A:4D:05:F7:D3:20:61:3B:72:F2:BD:32:6E:F6:8B:E4:D5:07:15:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F01
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sk0F99MgYTty8r0ybvaL5NUHFXU.roa
Signing time: Tue 27 May 2025 02:09:03 +0000
ROA not before: Tue 27 May 2025 02:09:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3841 (0xf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 02:09:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4A4D05F7D320613B72F2BD326EF68BE4D5071575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:f9:d8:a4:fc:c4:7c:74:c0:16:33:f9:94:
26:94:b5:ae:48:98:d1:d6:13:a7:cd:64:57:7d:d7:
34:e9:e8:b2:b8:4b:80:80:de:c1:f7:7c:76:86:a4:
e0:dc:03:15:15:33:9d:01:0f:77:2f:08:01:89:77:
7c:c7:23:25:c0:52:b5:13:68:65:4a:60:03:56:42:
47:a0:aa:32:c8:55:a8:00:4a:78:49:9d:30:22:8c:
11:76:68:3c:4c:3d:ee:c1:d7:57:94:8d:8f:0b:24:
7b:3f:83:6a:16:46:cf:56:f7:d4:6e:0d:15:24:25:
e1:0f:3f:f2:28:5f:7d:50:6c:5c:88:d8:72:c9:e9:
d9:97:79:42:82:b7:8a:d9:36:6f:fe:23:27:5c:27:
87:4d:cd:c9:ef:36:93:52:a7:3c:a4:90:ab:36:3d:
d0:66:d3:8a:29:c1:af:e1:00:66:e4:5b:75:88:31:
84:30:1f:65:60:99:5d:9b:57:cd:c8:0d:36:8a:46:
8f:a3:79:77:db:ca:20:aa:88:e6:cc:d2:dc:d1:b4:
63:4c:b2:a8:54:d3:8e:2b:24:e6:56:ba:5f:6e:72:
93:1f:e4:28:1f:a3:8e:47:95:8f:25:b4:3a:45:45:
c0:7e:12:ad:42:70:21:d4:e4:ec:06:64:e4:d9:1c:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:05:F7:D3:20:61:3B:72:F2:BD:32:6E:F6:8B:E4:D5:07:15:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sk0F99MgYTty8r0ybvaL5NUHFXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:e3:07:df:4c:7f:20:a8:61:41:c7:0d:ff:17:58:a0:9b:ef:
47:1d:e7:bd:64:dc:50:da:d4:56:f9:3b:55:6c:bd:04:52:56:
09:cd:c8:0d:1c:23:23:93:16:f2:bd:1f:14:df:6d:df:6d:e3:
49:39:a2:c7:72:b2:33:aa:8d:d2:db:47:20:ca:fe:12:8f:6f:
0c:72:d6:74:57:1f:f4:ad:cb:f3:d7:32:27:4c:b0:38:2a:af:
bb:2f:8d:98:6a:46:f4:bb:20:6e:42:56:77:14:22:c6:36:7c:
8e:bf:3d:dd:f9:c8:01:9d:11:44:fb:5f:95:df:b1:df:5d:87:
d5:e7:7c:ad:c2:3b:4f:08:9d:24:e9:2a:88:ac:e0:e5:e3:35:
d6:5b:04:bb:66:e1:b2:ef:60:b3:96:4a:a6:5d:88:6e:f4:9b:
a7:11:b7:6a:ae:32:8e:f2:18:c3:fb:cb:a9:e5:60:d0:3f:fd:
86:99:b8:d9:1a:97:a9:4c:17:97:55:33:59:21:0e:53:11:04:
99:9b:3b:9e:a9:e9:b2:f1:cc:5d:84:d8:78:40:f7:e8:f3:d3:
16:98:f6:f7:ac:00:a6:16:4f:ff:78:e9:43:b0:c3:21:e8:91:
cb:2b:04:ff:4b:d7:16:1e:25:7f:cc:a0:2a:f1:2d:1b:c5:c5:
0b:3b:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:28 2025 by rpki-client