Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/opVHr78evvsXv4xSMU79JLDKHvM.roa
File: opVHr78evvsXv4xSMU79JLDKHvM.roa (raw, json)
Hash identifier: znKX5DXtGOMNE+/VNEkL+YIJet6fHRkRKLMPpzA/Hn8=
Subject key identifier: A2:95:47:AF:BF:1E:BE:FB:17:BF:8C:52:31:4E:FD:24:B0:CA:1E:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DB1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/opVHr78evvsXv4xSMU79JLDKHvM.roa
Signing time: Sun 25 May 2025 08:08:35 +0000
ROA not before: Sun 25 May 2025 08:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3505 (0xdb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 08:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A29547AFBF1EBEFB17BF8C52314EFD24B0CA1EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:30:bb:c6:81:fc:19:1a:f9:a1:b0:f2:28:
97:95:b3:cd:7e:44:eb:9d:fa:ba:a4:18:c3:0b:b4:
8e:5c:28:ff:0e:6f:f5:25:7b:50:60:e1:88:a4:0c:
65:e5:66:2c:93:25:7f:f8:64:36:7a:68:7e:d3:85:
f7:8d:1b:ff:e8:7d:03:9b:f0:4a:a3:72:37:be:fa:
00:5b:aa:77:b7:13:a3:7c:cb:b4:30:ef:dd:f0:a6:
0b:32:5f:55:ab:0c:68:fc:ba:50:c4:30:73:5b:6f:
01:81:9e:66:d3:d1:d8:b2:12:f9:f1:b7:2a:1f:bc:
a4:c0:cb:de:35:f3:a0:b8:b9:2d:a5:f3:12:19:de:
dd:93:63:ad:e2:71:ba:74:48:6f:b6:01:c9:b0:09:
4f:ea:dc:ea:91:72:fa:1e:1b:f3:d8:ee:73:31:a1:
ae:b7:de:71:1e:c2:e4:93:e2:b9:6b:09:ab:f9:44:
e9:4d:04:3e:e8:c1:fe:ca:d9:3d:8b:ce:92:fa:fa:
f1:c6:7a:34:b9:7f:bd:ad:32:d2:72:f7:4e:cc:a6:
7b:57:f3:4d:f3:eb:09:79:b7:07:ca:55:10:f2:92:
ab:0b:11:03:1b:89:2e:0b:1c:86:6a:29:2a:bc:95:
45:87:f2:25:ba:71:e3:c4:18:bc:e3:55:47:9c:f7:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:47:AF:BF:1E:BE:FB:17:BF:8C:52:31:4E:FD:24:B0:CA:1E:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/opVHr78evvsXv4xSMU79JLDKHvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:d0:06:fd:1d:55:57:d1:08:06:43:9e:b5:c9:ff:d0:2b:b4:
0c:0a:4a:f5:50:6c:50:ff:14:fb:c6:03:50:b1:70:56:b1:02:
5f:b9:c7:ff:ee:7d:d3:2b:1f:fc:0b:4e:47:68:79:0b:de:be:
db:c3:9f:1f:2f:5d:47:5e:a9:de:b6:98:ca:ce:ae:cd:78:9e:
56:54:26:fa:1f:e0:04:44:71:6a:8c:b8:52:1c:97:ea:07:db:
7d:a0:1c:9c:00:b5:28:a2:c9:9c:ae:d8:ca:e8:86:d1:fe:98:
58:b6:e9:32:ec:30:de:11:8f:41:51:85:db:6e:b7:00:df:fd:
3b:e1:0d:56:0d:5c:fd:8c:bd:8f:98:f6:3d:41:ed:17:07:33:
8f:74:23:77:ab:61:a7:b7:d5:58:13:f0:fc:1d:c2:a8:b7:f0:
8c:1f:b6:5b:4f:9a:85:aa:b5:18:ba:0b:38:99:31:68:2d:cf:
65:b4:22:68:90:83:32:d9:dd:ca:28:f2:c5:45:cd:63:44:26:
61:19:83:03:46:05:2b:ac:e4:2f:aa:8d:cb:34:4a:1e:0c:27:
9e:68:00:4b:7d:c3:a6:8b:18:11:8e:7a:2c:1f:3a:3b:6b:b7:
68:8f:bb:e7:59:82:52:c3:8d:7c:ae:5c:18:98:28:7a:d8:10:
4e:8e:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:58:06 2025 by rpki-client