Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oVhFo6AHwc0xiyKDV0AaSkTrwi0.roa
File: oVhFo6AHwc0xiyKDV0AaSkTrwi0.roa (raw, json)
Hash identifier: UDsxL3gHVTKv6HHEvM5d+RkEEPHaaXx3YEoWdW2AdZY=
Subject key identifier: A1:58:45:A3:A0:07:C1:CD:31:8B:22:83:57:40:1A:4A:44:EB:C2:2D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0889
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oVhFo6AHwc0xiyKDV0AaSkTrwi0.roa
Signing time: Sun 18 May 2025 11:08:10 +0000
ROA not before: Sun 18 May 2025 11:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 11:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A15845A3A007C1CD318B228357401A4A44EBC22D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:dd:f7:c7:92:8b:44:ce:e8:21:2e:3c:ca:
46:64:7b:e3:3d:51:26:a6:1c:d9:61:8a:76:47:65:
20:49:df:d7:eb:06:ca:b4:f6:9b:1e:2f:8d:74:7a:
16:15:a3:d6:ae:a2:ba:cb:a3:d5:ca:7e:01:73:e0:
96:ba:64:ac:d1:62:3c:29:b5:08:d3:8d:c2:3a:66:
48:a9:32:60:fc:91:df:0e:9c:8c:aa:9e:70:ee:8d:
e9:80:8b:2c:7f:d4:b6:2e:d9:a1:5c:99:b4:88:4a:
40:f8:24:c3:83:c8:6a:90:f1:29:27:7c:ea:9d:e6:
9c:3d:1a:6b:67:04:5c:d9:18:ae:9d:14:2d:0c:98:
ed:d5:9b:f5:ad:25:5d:b4:5b:ea:f6:2f:45:32:bb:
b4:68:88:b4:07:7f:dd:4c:b4:61:77:a1:62:da:bd:
ba:71:d0:29:da:d7:cc:35:7e:de:d1:07:ff:83:8a:
00:4e:80:99:23:c9:8a:98:0a:86:7a:16:47:e2:e9:
16:8b:d8:ce:e3:c0:54:f8:a1:eb:31:65:4e:6f:d7:
9f:79:f9:a3:d9:fd:94:2b:1c:21:07:09:fb:32:5d:
8c:3d:6f:c2:9e:2a:f9:47:48:06:ac:fd:a3:92:53:
0d:8c:1f:07:ed:1b:ea:ef:5a:b9:c2:ab:9a:88:86:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:45:A3:A0:07:C1:CD:31:8B:22:83:57:40:1A:4A:44:EB:C2:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oVhFo6AHwc0xiyKDV0AaSkTrwi0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:48:1f:97:6e:cd:ff:a4:53:9e:be:64:8d:bf:a3:fb:78:6a:
ca:98:5a:71:a9:c5:e8:68:f6:89:5a:85:7b:b5:a4:6f:4f:ff:
2e:66:6a:87:18:2f:47:db:63:48:6a:20:af:7f:83:2f:66:14:
32:99:be:85:28:0c:6d:86:8b:5d:25:ee:2c:e9:10:de:b6:4e:
bb:a1:ed:46:0c:a7:65:f5:93:ff:87:0a:92:ea:28:5a:26:a6:
cf:2b:32:c3:6b:34:40:5b:19:fa:ba:5b:ba:75:fd:b0:ac:8d:
0d:8e:7e:4e:aa:89:a0:78:ed:97:63:b9:68:87:cc:9a:b6:c7:
44:76:18:a3:7f:2e:e3:da:cf:ac:55:d1:17:17:06:d4:15:d0:
7d:ab:19:80:a2:16:2f:f9:6f:b3:65:e1:e4:27:5c:75:6c:7d:
e1:1f:4f:ee:fb:89:a6:bb:8c:f0:86:b9:29:0d:d7:90:c1:65:
78:3a:cf:32:33:c6:1e:65:81:4e:be:5e:92:29:53:a6:4a:09:
66:c8:70:8e:96:9f:19:02:bc:84:b2:9b:7d:f4:a6:b4:d8:07:
15:a5:20:d8:f2:fa:75:80:b2:47:22:7d:e5:7b:77:17:9b:b7:
dd:6b:83:1b:c7:a5:3a:42:39:02:5a:b0:7a:b6:16:31:52:e3:
ab:91:6d:f3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgx
MTA4MTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEExNTg0NUEzQTAwN0Mx
Q0QzMThCMjI4MzU3NDAxQTRBNDRFQkMyMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbW933x5KLRM7oIS48ykZke+M9USamHNlhinZHZSBJ39frBsq0
9pseL410ehYVo9auorrLo9XKfgFz4Ja6ZKzRYjwptQjTjcI6ZkipMmD8kd8OnIyq
nnDujemAiyx/1LYu2aFcmbSISkD4JMODyGqQ8SknfOqd5pw9GmtnBFzZGK6dFC0M
mO3Vm/WtJV20W+r2L0Uyu7RoiLQHf91MtGF3oWLavbpx0Cna18w1ft7RB/+DigBO
gJkjyYqYCoZ6Fkfi6RaL2M7jwFT4oesxZU5v1595+aPZ/ZQrHCEHCfsyXYw9b8Ke
KvlHSAas/aOSUw2MHwftG+rvWrnCq5qIhhpTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoVhFo6AHwc0xiyKDV0AaSkTrwi0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9vVmhGbzZBSHdjMHhpeUtE
VjBBYVNrVHJ3aTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHxIH5duzf+kU56+ZI2/o/t4asqYWnGpxeho
9olahXu1pG9P/y5maocYL0fbY0hqIK9/gy9mFDKZvoUoDG2Gi10l7izpEN62Truh
7UYMp2X1k/+HCpLqKFomps8rMsNrNEBbGfq6W7p1/bCsjQ2Ofk6qiaB47ZdjuWiH
zJq2x0R2GKN/LuPaz6xV0RcXBtQV0H2rGYCiFi/5b7Nl4eQnXHVsfeEfT+77iaa7
jPCGuSkN15DBZXg6zzIzxh5lgU6+XpIpU6ZKCWbIcI6WnxkCvISym330prTYBxWl
INjy+nWAskcifeV7dxebt91rgxvHpTpCOQJasHq2FjFS46uRbfM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:21 2025 by rpki-client