Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oWfBH2ggthFhsGcaC_mKqpYvLr0.roa
File: oWfBH2ggthFhsGcaC_mKqpYvLr0.roa (raw, json)
Hash identifier: KuUl+KjFdD1bavqc+XJh370H1WUyP9LczNutKex7sFM=
Subject key identifier: A1:67:C1:1F:68:20:B6:11:61:B0:67:1A:0B:F9:8A:AA:96:2F:2E:BD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EF1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oWfBH2ggthFhsGcaC_mKqpYvLr0.roa
Signing time: Tue 27 May 2025 00:09:32 +0000
ROA not before: Tue 27 May 2025 00:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3825 (0xef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 00:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A167C11F6820B61161B0671A0BF98AAA962F2EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:f1:68:69:7c:f0:eb:fa:99:1c:27:e1:de:
1d:e6:02:43:ca:f0:43:8d:4a:e9:77:f6:d2:85:47:
1f:06:2f:bc:23:88:7b:0e:36:3e:66:4d:08:b4:6b:
3b:9d:e0:03:2a:92:f2:22:06:32:b5:9c:88:c0:b1:
73:98:2b:e7:fe:81:47:cf:ae:42:d4:95:0d:b1:3a:
0b:c5:b3:63:e6:ee:e5:bb:e9:81:81:cd:a4:61:cb:
93:2c:29:5b:e9:6d:46:10:98:30:c4:37:7e:74:76:
42:6e:2a:b3:f7:be:27:97:b1:b4:77:e2:3d:15:8f:
b4:9d:5a:db:71:6f:38:8e:0a:4e:b3:1f:24:8f:20:
74:58:3d:2d:5a:68:20:e3:bf:f7:42:69:2f:be:98:
b6:f2:1c:e4:cb:ac:69:1c:82:b1:57:e9:95:f7:9f:
c6:3c:0c:25:2a:19:b2:21:a5:9e:7d:05:08:0d:4b:
4e:6b:80:ed:20:32:d2:b1:cd:00:1f:15:7e:74:05:
e0:c1:35:02:99:9f:9b:b3:21:cf:fe:00:39:2b:2a:
a5:42:2b:a2:27:50:ea:16:30:61:cc:6a:15:28:d4:
18:8a:e4:6f:ad:24:82:4c:96:11:34:d9:ae:0a:ba:
f4:48:2a:aa:2c:25:3d:c4:4a:7b:db:e6:0c:4f:47:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:C1:1F:68:20:B6:11:61:B0:67:1A:0B:F9:8A:AA:96:2F:2E:BD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oWfBH2ggthFhsGcaC_mKqpYvLr0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:bf:02:d1:1b:33:49:0a:39:7a:2b:0b:ca:54:bc:d3:a4:f5:
d9:bc:ff:2c:9c:2e:e0:09:2a:be:a4:8d:a6:cc:07:f6:db:98:
a5:b0:5a:04:6f:28:b7:73:b1:76:13:cf:dc:ed:40:3e:59:3c:
1f:4f:f4:bd:59:17:07:fe:f2:67:33:df:8e:4f:51:f2:4f:db:
ca:6d:49:6d:2e:62:ae:93:02:15:4e:56:91:e4:5c:f4:f1:c0:
22:97:df:59:8d:b0:9b:2c:f7:b0:b4:dd:38:1c:21:12:9e:4d:
26:57:6f:3b:54:e0:9f:66:48:de:f2:83:cc:c4:89:d1:24:bd:
99:c9:e2:30:ab:6e:d4:c6:94:5e:50:06:03:6a:ae:81:33:1e:
ca:30:3c:8f:76:7d:ef:16:15:cf:16:8c:56:4b:af:db:bb:02:
56:4b:64:ca:86:05:32:65:49:7f:5a:fb:19:71:1e:f1:d8:95:
b0:e6:45:47:a1:a5:6b:8e:cb:3f:bb:b7:c4:66:b1:ca:98:cd:
c6:66:4d:51:d3:33:dc:dc:34:e4:69:2f:bb:ea:12:d8:2c:c7:
c2:7d:f8:69:4e:b9:60:b5:82:ce:4f:52:70:8b:43:26:70:74:
a8:f2:11:4e:a8:f8:7b:2d:60:02:da:18:ff:df:64:8c:3d:1f:
5c:77:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:43 2025 by rpki-client