Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W7KwRYI-XUbIGkvVz2cs2Uu7aVQ.roa
File: W7KwRYI-XUbIGkvVz2cs2Uu7aVQ.roa (raw, json)
Hash identifier: D077eS8KXAfdpEIy6Ld1TE6sbTbtjfBKZojqmGBuPHI=
Subject key identifier: 5B:B2:B0:45:82:3E:5D:46:C8:1A:4B:D5:CF:67:2C:D9:4B:BB:69:54
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A9D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W7KwRYI-XUbIGkvVz2cs2Uu7aVQ.roa
Signing time: Wed 11 Jun 2025 13:39:57 +0000
ROA not before: Wed 11 Jun 2025 13:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6813 (0x1a9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 13:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5BB2B045823E5D46C81A4BD5CF672CD94BBB6954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:f6:19:e2:0a:57:ee:29:54:e7:a8:77:4b:
31:f8:54:21:5e:6b:62:7c:c6:ae:16:10:27:55:d5:
07:5e:46:d7:2a:07:6d:80:e4:db:b4:50:2c:ed:03:
ac:d0:b4:02:77:4d:56:af:a6:e0:f7:28:4c:46:25:
b9:cf:09:54:4c:a8:27:09:44:fd:de:73:a9:dd:56:
fe:e6:43:e1:3b:63:21:a9:95:16:f0:d0:33:1b:99:
54:49:a8:ba:0c:41:97:31:c5:b2:e5:05:77:62:2d:
ab:c0:d0:96:6f:3e:30:4e:73:44:a3:4a:57:47:49:
93:92:37:51:b1:e3:13:64:22:8a:a4:90:4d:01:b6:
aa:1c:08:ff:83:40:3c:5f:44:5d:0b:c8:96:4b:9f:
ec:71:66:74:08:2d:2f:85:2a:89:60:1d:29:65:60:
54:9e:13:2e:48:ad:ad:d6:64:97:85:a1:ba:d6:8b:
c1:2c:7e:1a:a3:7e:bc:28:6c:68:8c:94:68:24:1f:
2c:fc:85:9c:15:f5:06:ef:d7:db:4b:fe:c1:ae:de:
4c:2f:67:a0:00:9a:94:6a:bf:54:9b:15:08:51:74:
6e:50:99:b0:33:9d:be:8d:4e:03:76:f9:eb:4b:33:
67:81:94:a4:0c:0d:3a:28:af:4d:2e:c6:d7:9c:0c:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:B0:45:82:3E:5D:46:C8:1A:4B:D5:CF:67:2C:D9:4B:BB:69:54
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W7KwRYI-XUbIGkvVz2cs2Uu7aVQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:6a:e5:81:93:2e:a7:ec:ad:7d:61:9d:40:8d:fb:7a:b7:0f:
6c:f9:ab:52:6c:33:dd:0f:3f:d8:c7:ec:80:25:cb:3a:11:78:
e5:7a:05:dc:55:6a:01:8d:84:f9:28:b3:55:dd:73:1f:bb:81:
c1:20:86:b2:3c:1e:03:4e:6e:0a:c2:ed:22:7c:e6:c6:23:49:
b4:84:e8:77:2c:80:c6:46:34:88:d1:2f:9b:3e:29:11:61:9d:
11:85:12:b8:16:8c:28:15:8a:74:d1:91:3e:a7:61:3d:b6:30:
0b:03:63:da:68:8c:e0:64:d8:57:30:6d:f1:fc:f8:b8:1c:e0:
ed:19:47:ec:41:46:4a:d4:93:b2:df:fb:fc:01:8b:df:19:5c:
07:c0:67:05:ab:84:c3:fc:b3:84:2f:ac:be:32:3a:a1:96:ca:
6f:f2:bc:41:9f:87:37:c5:e5:6f:f6:25:c9:80:c6:ae:24:03:
9a:dd:a3:1a:fd:ea:a9:e5:a7:38:78:55:49:3d:8e:ea:41:00:
dc:10:8c:32:21:79:5b:06:60:0e:10:e8:d4:92:03:9d:b9:5a:
bc:9f:a0:65:ab:ba:0e:39:ca:fb:9a:09:4c:14:b7:94:ef:5e:
80:6a:fb:95:76:27:d9:27:ad:bf:00:6f:ea:36:37:ba:34:a6:
9b:4a:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:34 2025 by rpki-client