Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-GVQvvjoDEoKicOxaw7Ko0qb6M.roa
File: Y-GVQvvjoDEoKicOxaw7Ko0qb6M.roa (raw, json)
Hash identifier: 7V85P6TVoA+oJqZFhsvvn/bJH8xQ+PE/tz4/fFhckHQ=
Subject key identifier: 63:E1:95:42:FB:E3:A0:31:28:2A:27:0E:C5:AC:3B:2A:8D:2A:6F:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EBD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-GVQvvjoDEoKicOxaw7Ko0qb6M.roa
Signing time: Mon 26 May 2025 17:38:42 +0000
ROA not before: Mon 26 May 2025 17:38:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3773 (0xebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 17:38:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=63E19542FBE3A031282A270EC5AC3B2A8D2A6FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:3e:2f:2b:79:ce:35:a3:91:96:a6:c3:a9:
49:d6:b0:b0:99:e1:62:9c:d8:d1:e5:a0:6e:db:72:
27:bd:51:da:28:2d:ed:b3:e2:7f:32:05:9e:09:f5:
fe:5d:b7:93:c8:d2:01:5b:c0:9a:a6:4e:df:42:90:
1e:3a:8b:e8:c7:6f:a4:a1:c4:7c:87:53:69:29:7c:
2d:17:4d:07:9b:e1:2c:9d:0e:91:9b:94:fd:28:1d:
7d:73:96:a5:35:b3:0e:a4:17:12:68:7a:8e:8b:c8:
85:90:f6:1c:cc:63:44:bc:a4:68:f6:3c:f8:e0:22:
81:9a:3c:33:d9:ad:eb:4b:de:ac:c4:12:0d:11:f9:
69:23:67:d5:41:e8:b8:fa:7b:d7:1a:cb:41:f6:fe:
01:b0:9a:05:3a:ff:55:39:37:9b:7b:d3:01:4a:05:
ff:90:6e:07:19:21:f3:7b:b9:b2:2d:a6:69:ef:e0:
95:bd:30:1e:6e:f8:2b:ff:87:0e:81:4b:f3:fe:07:
c3:61:98:8d:76:7e:67:88:a3:8c:eb:c2:9a:da:9e:
dc:71:7d:2c:2d:0b:01:13:ff:0d:06:f7:f7:e0:b1:
09:38:25:52:54:1b:f6:a0:8a:f1:60:68:a4:54:5d:
15:f4:4b:6a:5f:a0:92:a4:4e:4e:25:4c:bb:aa:33:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:95:42:FB:E3:A0:31:28:2A:27:0E:C5:AC:3B:2A:8D:2A:6F:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-GVQvvjoDEoKicOxaw7Ko0qb6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:3c:af:0a:b9:89:d5:cf:af:d1:6d:98:9e:d9:ca:9b:a6:3a:
97:bb:21:74:f2:5b:fa:4c:ce:e2:96:bd:0a:19:53:50:2a:cb:
e5:a3:92:6d:fb:7b:70:41:dd:af:c2:b3:b5:29:2d:de:e0:d9:
f0:dd:0a:63:7b:12:cd:b9:46:f9:c5:01:26:29:08:4a:05:94:
65:92:b1:39:00:c7:1c:60:46:ec:1d:e0:e7:1d:cf:a7:a9:f2:
d3:ef:bc:b9:97:63:0a:a1:90:31:b1:09:a6:3d:48:ff:0e:97:
bb:d6:13:92:cd:71:68:07:28:93:91:d7:ed:e8:4e:a2:74:96:
ae:b9:63:d1:6a:5f:dd:e3:f1:bf:ac:9b:8d:1a:e1:d7:a4:1a:
16:8d:c0:74:fd:82:94:50:85:6c:b8:59:b9:ac:f3:52:a9:7e:
ec:86:e2:d0:df:3e:2e:54:d3:b3:d3:8b:31:06:3d:7c:3b:f6:
5c:79:49:2f:be:2e:e4:2b:cb:6f:5e:28:d1:bf:91:bd:1a:33:
7f:9e:d5:b8:07:6c:bf:a5:d8:7a:bf:51:57:f3:b7:68:3c:31:
8d:c2:66:b4:c5:a9:6e:b1:ad:4f:32:a3:c8:f0:39:5f:c4:70:
56:28:ef:72:24:1f:7f:50:ff:ec:aa:34:3a:65:64:59:dd:9f:
01:a7:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:12 2025 by rpki-client