Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qDtNY5HxjQMnqYSaPypAOGwEGEs.roa
File: qDtNY5HxjQMnqYSaPypAOGwEGEs.roa (raw, json)
Hash identifier: FO8jV5+C/6w+FwTN/ht2g3MEa8nMp9d+u2XbL+fGY+k=
Subject key identifier: A8:3B:4D:63:91:F1:8D:03:27:A9:84:9A:3F:2A:40:38:6C:04:18:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qDtNY5HxjQMnqYSaPypAOGwEGEs.roa
Signing time: Sat 17 May 2025 15:08:17 +0000
ROA not before: Sat 17 May 2025 15:08:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 15:08:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A83B4D6391F18D0327A9849A3F2A40386C04184B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:0d:23:a8:2d:52:1d:12:72:46:eb:7f:2c:
b4:fb:33:2f:c9:0a:00:9a:0a:72:ed:6e:45:08:96:
27:99:6b:7a:f4:17:ff:75:f3:c3:93:14:71:14:b8:
d1:bb:7a:df:21:f6:91:9d:47:18:e8:d6:d9:b8:6e:
36:fb:f9:36:36:4b:1b:b7:ff:ad:7f:63:72:b9:0a:
1e:b9:ed:c9:b0:e1:f0:a9:b1:f2:ab:03:a6:32:fb:
ba:cf:ce:b6:0b:a7:97:94:68:1e:a8:97:61:1f:56:
ba:6b:cd:f7:d4:a6:b9:b4:36:ea:c5:b2:e8:8d:8c:
17:ce:8b:83:f2:86:cd:a6:b6:b0:6a:4e:7a:6e:08:
8b:67:0b:9f:7b:6b:03:6b:7e:2d:cf:f4:1a:1b:e3:
2e:1f:f3:5c:a8:ab:e2:68:e8:0d:f8:a2:ae:ba:39:
21:af:80:39:dd:09:8e:f2:a1:c0:b7:79:1a:19:71:
1f:54:24:1b:d8:12:70:83:55:86:68:4a:8a:73:c5:
b8:0f:f5:62:90:fc:48:cf:a4:15:5e:93:b6:24:31:
44:be:74:fb:f4:44:ef:82:96:ae:f2:a3:25:81:e2:
38:f2:e8:d2:c1:b0:43:12:51:e4:c2:24:8a:49:f1:
f7:e3:39:8c:f9:ec:fb:ed:07:b0:db:00:05:62:44:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:4D:63:91:F1:8D:03:27:A9:84:9A:3F:2A:40:38:6C:04:18:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qDtNY5HxjQMnqYSaPypAOGwEGEs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:bf:0f:e8:d7:7a:b3:cb:6f:8a:0b:80:ee:e2:f0:61:fa:c1:
f6:87:b1:d9:04:15:2d:78:38:8c:f3:05:27:4a:ca:af:d6:21:
f3:0a:7c:93:45:7d:2c:6f:a9:b5:b1:1d:6e:6e:1c:2f:58:a5:
89:fa:8e:6c:06:ca:58:c7:3f:94:96:a6:83:21:53:8b:7a:ab:
0b:35:2f:49:b6:57:2d:11:e1:65:b9:24:92:f9:8d:14:93:e4:
ba:f8:c0:f9:3a:10:96:b6:85:5b:85:83:a2:e5:61:85:59:4e:
62:3d:b3:ea:47:f7:d6:fa:43:25:c1:47:be:cf:a6:1c:32:c8:
44:b9:87:e4:32:8e:ec:01:4f:45:5a:fa:3b:e4:80:8b:57:66:
45:3e:ee:41:ea:a3:39:5f:7c:29:41:ca:07:85:17:05:aa:9f:
d3:2d:f7:71:bb:a4:3c:f2:3c:ef:2b:72:00:86:08:76:ed:34:
14:47:dd:46:95:0f:86:b9:08:17:15:f5:86:13:32:3a:ec:28:
24:53:db:c1:2c:46:84:42:6d:cd:6b:4a:0e:92:a4:c4:22:f6:
8f:02:96:cf:14:89:eb:f2:22:2a:d3:72:15:5b:15:4e:9e:3e:
c7:8b:43:fb:ce:35:80:5b:1a:59:23:39:78:93:d6:c2:20:11:
80:26:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:18:47 2025 by rpki-client