Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rCaDaN_Pp_DaXscaMDwUpX6t5QE.roa
File: rCaDaN_Pp_DaXscaMDwUpX6t5QE.roa (raw, json)
Hash identifier: XKL+XquGD3MaTaSqKW2CpwnPh0INVwle8hMCQLnEblE=
Subject key identifier: AC:26:83:68:DF:CF:A7:F0:DA:5E:C7:1A:30:3C:14:A5:7E:AD:E5:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F2D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rCaDaN_Pp_DaXscaMDwUpX6t5QE.roa
Signing time: Tue 27 May 2025 07:38:56 +0000
ROA not before: Tue 27 May 2025 07:38:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3885 (0xf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 07:38:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AC268368DFCFA7F0DA5EC71A303C14A57EADE501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:bb:55:53:a9:e0:ff:1d:ed:23:d3:c1:c6:
0b:fc:46:53:05:f3:75:9e:1f:dd:f7:c6:ca:4c:9e:
9e:c2:75:a1:e8:1d:9d:23:4e:42:23:dd:98:16:ab:
fe:f4:43:9f:6a:e0:7b:2d:db:96:ed:76:b2:ca:75:
99:7f:bf:2a:b8:c9:fc:9c:8b:f5:a1:b8:d8:c5:40:
9c:2c:0d:a9:7e:42:76:82:10:c9:eb:57:54:34:13:
23:7e:cb:8e:24:9a:1d:7f:af:7c:07:8a:77:18:4d:
91:77:5b:04:98:42:ff:7a:9d:f4:39:02:cd:96:21:
7e:45:5b:d7:33:d6:47:70:4c:6a:95:4d:b7:9f:f8:
41:6c:a2:1e:f3:4a:5d:f3:c2:41:0b:e0:93:41:09:
d1:e1:6a:cb:9f:bd:6f:bf:76:91:55:86:54:fb:90:
88:90:cb:b5:1d:2a:60:31:e4:08:4f:f1:01:95:27:
81:0f:75:9d:26:10:c5:90:24:76:1a:13:a0:aa:05:
b4:9f:1a:09:36:fc:bb:08:8c:20:8d:70:17:4a:50:
d7:9d:b8:c3:b8:d9:38:60:2e:3c:22:73:ad:91:ba:
ca:eb:8e:b6:4a:89:3b:0f:b1:9b:9b:3c:45:27:57:
c6:e0:9f:1c:17:2e:d1:c7:8b:04:13:bb:f1:78:48:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:83:68:DF:CF:A7:F0:DA:5E:C7:1A:30:3C:14:A5:7E:AD:E5:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rCaDaN_Pp_DaXscaMDwUpX6t5QE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:8b:34:af:f9:de:c0:85:03:88:9e:96:b0:5c:d3:b6:c1:6b:
cf:af:88:62:20:3d:d8:d3:8b:34:7c:a3:54:cc:b3:06:89:01:
7c:6a:cb:2c:0d:2f:58:00:b5:bc:d1:3b:aa:b1:f8:d0:d2:c8:
e5:78:ec:f7:4a:ac:1b:c8:8a:83:be:e3:7a:82:23:d1:fc:d8:
11:32:3b:f0:27:0c:49:b1:48:90:17:03:5e:4c:84:c7:c1:a6:
79:44:0d:12:cd:75:cd:d3:ec:5f:c0:cd:19:56:ee:cf:c3:81:
01:33:4c:12:ce:69:51:25:7e:1a:82:52:fa:2e:8c:cd:4a:09:
ba:25:53:e1:2f:8a:38:60:65:ec:db:61:cb:f1:c7:02:7a:75:
06:7d:02:10:ee:cc:ec:46:0a:a3:24:5c:26:01:47:8f:25:2b:
26:f8:d3:c8:95:5c:b3:b2:c2:44:d0:d7:db:86:72:24:c4:95:
00:10:e6:07:84:f5:2d:ee:c3:7d:4d:ab:44:1f:f3:47:c9:48:
45:2e:8d:b0:1e:02:2f:ba:59:4f:17:70:f9:03:d4:77:c0:da:
ab:29:91:39:3a:97:f6:79:03:22:3d:cf:d9:95:b0:32:4f:b3:
fd:e5:2f:87:a7:d7:ce:35:cb:bc:a2:3d:52:92:51:fc:84:d4:
ea:13:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:38 2025 by rpki-client