Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o1OzL6qihEY_wnU3SPph6ls8WWA.roa
File: o1OzL6qihEY_wnU3SPph6ls8WWA.roa (raw, json)
Hash identifier: yExTRqjMveht4rmuZ2ILOPXyQOufzUdw2trjCWcpItE=
Subject key identifier: A3:53:B3:2F:AA:A2:84:46:3F:C2:75:37:48:FA:61:EA:5B:3C:59:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BD9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o1OzL6qihEY_wnU3SPph6ls8WWA.roa
Signing time: Thu 22 May 2025 21:08:29 +0000
ROA not before: Thu 22 May 2025 21:08:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 21:08:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A353B32FAAA284463FC2753748FA61EA5B3C5960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:68:fb:22:1d:6c:95:88:7c:80:1c:9e:d7:
da:59:a1:a2:56:e1:52:00:34:95:25:18:b5:5c:b4:
78:38:1c:91:64:f2:00:8f:58:8b:f5:0e:31:1b:ca:
9b:99:df:30:f6:15:d3:66:ba:e5:a7:53:fa:0d:bd:
05:73:10:28:ef:87:cc:b4:b7:01:58:c4:8d:44:74:
17:b5:71:d2:77:e9:ba:a4:b8:83:2c:2b:2e:e8:b0:
83:c0:21:8d:2c:8f:72:ed:68:49:d5:35:b3:8d:8e:
25:a9:0a:6d:67:3f:09:9c:35:38:fd:bc:32:3b:87:
c2:9e:2f:1f:8a:65:88:30:5b:17:22:16:65:32:a6:
fb:7b:c9:75:de:82:2a:65:3a:ef:6b:a4:d2:69:ee:
e7:a4:c9:9a:d7:12:2e:7a:b0:2a:82:2e:25:18:25:
be:0c:2e:85:b2:0f:f8:a3:cc:6b:fc:9c:05:35:a4:
43:ae:60:07:36:3f:31:ec:82:7f:0e:56:43:2c:9b:
55:7d:14:78:7a:30:c7:a2:45:7f:45:20:92:e5:6e:
86:2f:36:3d:8c:18:45:41:a2:9f:f1:fc:01:df:58:
f4:fc:22:81:94:35:f6:0b:a1:f0:3f:60:05:4d:71:
00:14:5d:2e:15:ca:4f:68:41:47:f8:fb:04:6c:a7:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:B3:2F:AA:A2:84:46:3F:C2:75:37:48:FA:61:EA:5B:3C:59:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o1OzL6qihEY_wnU3SPph6ls8WWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:fb:10:71:fc:9e:64:6d:ef:d3:39:f3:17:74:f8:06:d9:77:
6c:7d:d6:b0:fa:12:6a:10:4f:cc:b5:fe:3f:b3:89:98:d3:bf:
c3:19:d6:fe:b3:64:cb:16:8b:44:2d:9d:c0:ff:f7:33:36:dc:
6b:a1:01:f3:d5:58:a5:57:91:1f:ce:33:e6:15:e4:16:7c:0e:
9e:bd:9b:f3:22:be:6c:ab:68:f4:de:7b:8d:aa:90:3a:02:b0:
ff:3c:cb:c0:f3:21:55:54:cd:f8:c5:82:77:f4:97:90:5a:df:
0b:b5:ff:b0:c7:a7:34:d3:c7:4f:1e:f1:81:58:ad:a8:ab:b1:
1a:55:9d:94:a2:8c:b5:6e:79:eb:95:06:f1:ab:0e:77:4c:79:
2a:1e:92:f5:51:b8:89:3c:7e:7e:a7:f1:80:6a:fa:b5:c7:a9:
02:d4:99:56:c0:50:7f:c2:92:b2:0f:88:61:3f:f9:90:9b:a7:
80:50:ca:41:79:29:87:d9:27:96:d2:9e:f2:7b:71:74:d5:1e:
96:61:4c:f1:df:21:31:99:cd:a3:74:be:db:2e:e9:7f:ac:9b:
c4:d3:8c:fe:fc:18:b2:a5:eb:de:a9:0f:c8:1e:79:6b:3b:57:
3c:55:a6:dc:33:8e:14:3b:83:ca:c8:61:19:9e:7e:7a:02:9b:
9c:29:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:07 2025 by rpki-client