Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l22FGZ-6ZOBjwdvmP9WDVX1qqBs.roa
File: l22FGZ-6ZOBjwdvmP9WDVX1qqBs.roa (raw, json)
Hash identifier: i8md742G9F0ZFdwczy6MSDPQ0OJFvhvMZkU4htEsyXM=
Subject key identifier: 97:6D:85:19:9F:BA:64:E0:63:C1:DB:E6:3F:D5:83:55:7D:6A:A8:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l22FGZ-6ZOBjwdvmP9WDVX1qqBs.roa
Signing time: Tue 03 Jun 2025 23:09:15 +0000
ROA not before: Tue 03 Jun 2025 23:09:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5353 (0x14e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 23:09:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=976D85199FBA64E063C1DBE63FD583557D6AA81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:72:70:6d:73:e6:15:d8:a5:63:5c:a1:fe:
d5:63:06:25:0d:f6:86:51:e0:2e:68:0d:fc:c8:1d:
81:86:dd:6c:9c:e3:d9:6f:3f:b3:c4:b4:3f:59:89:
4d:5f:93:16:44:a2:b8:63:ba:a5:bd:09:f5:35:8f:
5f:ac:07:e9:54:bb:77:58:f2:3a:6f:59:4b:4c:52:
11:41:42:63:c5:13:32:14:f1:c4:07:40:8b:2d:f7:
21:b4:dc:7f:12:0e:ac:ee:2f:33:4a:54:bf:2c:46:
ce:67:c6:87:ca:8f:61:93:ad:8f:46:31:3c:f7:54:
87:a7:c4:97:98:db:75:2a:f2:23:8d:3a:12:07:94:
4e:ee:ce:d8:c6:f8:5c:78:6e:5a:b9:4e:09:e8:bb:
ce:ec:63:60:7b:46:a1:fd:5d:d4:ed:79:e6:8a:fd:
b8:bc:9b:d3:fb:c2:06:0f:dd:48:48:ed:98:89:55:
60:da:15:53:87:9e:a3:d4:ad:45:c3:98:d7:27:e4:
51:65:82:87:ba:66:6a:b7:36:9e:c1:5e:5b:e6:88:
42:b1:36:c3:d0:29:7c:ec:83:32:de:e9:98:b3:65:
81:de:22:11:ec:4f:17:36:15:fe:b3:25:3d:53:54:
5a:6f:61:b8:7d:fc:be:0f:e3:43:fb:9f:69:0f:48:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:85:19:9F:BA:64:E0:63:C1:DB:E6:3F:D5:83:55:7D:6A:A8:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l22FGZ-6ZOBjwdvmP9WDVX1qqBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:e4:47:73:a6:9e:42:d8:6d:e7:09:43:24:96:ca:a1:b7:34:
b3:f7:3b:83:92:e0:88:fb:e0:94:bb:92:ed:6e:a7:fb:be:8d:
f6:c4:14:bc:5b:cc:a9:30:8a:0d:cd:ef:f2:9f:6b:b1:b8:e1:
22:72:e3:83:6d:6e:e9:76:f4:af:1e:0e:1c:e8:78:fd:db:cc:
d5:b6:69:a7:04:24:f4:1f:9d:01:47:d3:0b:33:75:cd:a3:7a:
3b:97:97:c1:89:60:2f:26:77:c0:41:a7:ac:53:37:31:1b:cb:
42:fc:d6:0b:d0:fc:8c:95:5e:d9:23:00:bf:9a:df:52:03:80:
25:15:30:33:44:e6:95:d5:cf:3d:66:a5:fe:72:9d:cc:f2:4b:
99:45:36:02:d8:bc:83:e0:c2:77:9a:b9:b8:46:38:2e:8e:51:
46:fe:7e:3f:f6:d0:75:c8:ec:1c:69:43:42:86:61:77:57:cc:
f9:1c:34:61:c8:ff:1b:94:94:92:b3:aa:65:bb:b6:e3:40:31:
ef:3c:49:74:9b:c3:66:fd:ad:8a:c9:b2:bf:2e:e2:7f:6f:b2:
56:0a:4b:5b:13:6e:59:15:82:ab:d2:3d:03:db:18:f0:bd:de:
a1:b1:3f:2e:19:2e:94:b4:92:2a:1e:67:4c:7d:6d:37:f9:67:
72:25:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:08:06 2025 by rpki-client