Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jw6kNuhguFcL9_3wlatMvtyt2QU.roa
File: jw6kNuhguFcL9_3wlatMvtyt2QU.roa (raw, json)
Hash identifier: PMBhYnz4Xt1xy/H8Yt4n15QUm4r//cPvdT0vBp/oDCg=
Subject key identifier: 8F:0E:A4:36:E8:60:B8:57:0B:F7:FD:F0:95:AB:4C:BE:DC:AD:D9:05
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E3D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jw6kNuhguFcL9_3wlatMvtyt2QU.roa
Signing time: Mon 26 May 2025 01:38:38 +0000
ROA not before: Mon 26 May 2025 01:38:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3645 (0xe3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 01:38:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8F0EA436E860B8570BF7FDF095AB4CBEDCADD905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:2a:bf:a4:24:ff:56:58:23:6e:74:96:be:
e1:cc:9e:9d:75:1c:99:03:34:ed:c6:0b:25:f0:f3:
08:8c:c8:9b:a0:16:8e:a3:7c:90:04:f0:b4:0a:ac:
ab:4c:34:4e:e2:ee:80:d3:a2:f2:a8:47:59:ac:23:
0e:d5:e4:60:77:f1:2b:d5:56:9e:1a:98:de:17:b9:
d8:d7:da:56:76:e6:3d:b5:11:d8:3e:57:ab:36:c9:
a1:2e:9a:45:7a:02:13:23:45:d0:30:6b:50:01:8c:
ac:08:fe:fe:aa:21:47:3e:50:7d:b7:5a:fa:7a:90:
34:6b:f5:c3:b2:58:ce:0d:fc:1a:73:22:39:d0:86:
bb:44:21:36:e2:06:0f:da:f7:50:73:83:a3:d8:74:
26:2f:86:11:00:79:28:3a:e8:41:a4:5a:3d:b9:71:
e8:eb:27:89:6e:71:83:cb:a4:39:8b:72:ba:24:7e:
07:09:a6:c1:94:69:fa:6b:32:68:eb:29:e3:ab:0d:
3a:30:39:dd:2d:67:f6:b7:c6:da:ba:67:6d:3a:b9:
2d:04:5d:37:8e:ac:0f:62:ee:21:dd:89:19:15:7a:
b3:99:95:45:46:0d:8f:ad:9e:cb:b8:b2:fe:c0:64:
98:e2:4f:1b:bb:43:20:fe:65:93:2b:cc:02:39:cc:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0E:A4:36:E8:60:B8:57:0B:F7:FD:F0:95:AB:4C:BE:DC:AD:D9:05
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jw6kNuhguFcL9_3wlatMvtyt2QU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:49:9f:fc:1b:08:79:2e:5d:87:7e:a0:6e:07:4c:1c:a4:17:
60:f7:1c:b4:59:06:dc:74:12:74:fd:c2:23:2a:e7:f7:c9:db:
1c:b9:7b:54:cb:18:f0:b7:67:12:df:47:20:67:f1:64:7b:d3:
e4:ab:fa:25:21:41:d1:ad:7b:36:03:83:8c:c0:9f:34:9f:56:
7a:26:ce:31:ba:87:f5:80:83:7b:9c:d4:21:97:15:2a:3b:b2:
39:1b:ce:9e:27:3c:74:2e:4c:f5:02:d8:5f:74:d2:d3:94:9e:
4c:1b:7a:88:3c:69:44:e1:57:d8:80:5e:13:20:65:34:4d:bd:
0c:23:21:d4:44:a1:c8:67:1e:58:89:64:91:fe:cd:ad:38:4b:
56:ce:d0:ce:ec:39:ea:43:8c:24:4d:a1:a8:95:75:65:1a:e9:
04:05:c1:25:2a:41:2e:8b:f2:1a:e6:9f:6f:89:15:bc:df:f7:
87:ee:f8:13:21:b1:f8:ec:86:ef:78:f8:23:17:e8:7d:35:6d:
38:6b:df:86:74:f1:5d:dc:80:5a:e6:41:ee:25:ad:1c:cb:f9:
a8:0e:c4:e2:46:b2:8a:cd:6b:6f:71:20:40:e3:b2:c1:20:3d:
87:1c:54:0c:a7:b0:60:38:36:04:81:4c:48:36:a6:db:0f:22:
78:f1:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:33:42 2025 by rpki-client