Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/s-89U_7ge2Rjo7I7GONvYg0fjG4.roa
File: s-89U_7ge2Rjo7I7GONvYg0fjG4.roa (raw, json)
Hash identifier: n739qdxrtwxRyDNk3Dr33jobQvDSTLLNoNp6yvrArkA=
Subject key identifier: B3:EF:3D:53:FE:E0:7B:64:63:A3:B2:3B:18:E3:6F:62:0D:1F:8C:6E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D69
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s-89U_7ge2Rjo7I7GONvYg0fjG4.roa
Signing time: Sat 24 May 2025 23:08:31 +0000
ROA not before: Sat 24 May 2025 23:08:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 23:08:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B3EF3D53FEE07B6463A3B23B18E36F620D1F8C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:2d:ce:ce:a8:d4:91:db:76:ef:c9:2f:ec:
74:f9:62:5c:f7:5b:cc:af:db:1e:d2:c0:25:f3:0b:
2b:2c:a5:cb:08:bd:4e:97:2c:72:14:9b:55:47:ed:
cf:99:a3:f4:a1:82:10:75:ff:98:51:00:1e:48:bf:
ac:44:84:96:8e:d5:7b:f7:77:68:26:b7:71:05:64:
aa:02:45:56:30:24:be:b8:56:89:65:e1:e8:3a:53:
b4:d8:f9:20:a5:ed:92:ff:fa:05:43:5d:f3:8d:fc:
0d:cd:c2:14:f0:33:40:5a:d3:2f:85:90:65:6e:0c:
76:8f:57:10:78:3e:14:c3:78:10:4b:12:c6:62:f3:
86:14:83:bb:4c:41:3c:5c:a1:a6:64:98:cc:2d:17:
78:8c:71:9b:56:2c:4e:93:6b:92:e8:a9:1d:3c:fb:
64:a5:4e:60:7f:90:93:34:23:0d:1b:83:dd:ea:64:
0d:58:06:c7:7a:53:08:7a:ae:8d:40:42:2e:ee:72:
8d:20:90:af:7d:68:44:54:67:bc:ca:2d:ce:cb:59:
32:34:a9:6d:ed:87:5f:14:0e:da:23:2f:bb:6c:a5:
58:27:93:86:89:a9:1f:20:aa:60:ef:ac:62:c2:cd:
e1:f5:b1:fe:17:1a:e4:16:0a:9c:12:fa:05:ee:0b:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:3D:53:FE:E0:7B:64:63:A3:B2:3B:18:E3:6F:62:0D:1F:8C:6E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s-89U_7ge2Rjo7I7GONvYg0fjG4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:e9:7d:51:c2:e4:a6:f3:3b:6c:cf:9d:02:14:78:f6:ff:09:
1e:3a:db:d2:d0:d1:12:11:e9:5a:70:1a:bb:50:aa:68:b6:da:
b1:b6:62:8f:73:cf:7f:1c:d8:6a:e9:e3:6e:95:2a:b5:54:3b:
0c:11:b6:20:a9:4c:fa:6b:17:96:7d:3e:49:3e:a4:2b:6e:e6:
98:ca:33:0f:94:f4:2b:64:c1:33:33:7e:12:71:81:0e:bd:e1:
8d:3c:cb:bf:50:07:12:04:b6:d4:d1:1e:7e:49:36:33:f8:92:
9c:cb:8a:77:05:89:f6:59:98:0a:6e:f5:58:d2:2e:9f:98:d0:
d8:2a:d8:e2:b1:60:f7:dc:b8:62:c7:fa:30:f2:ac:5f:9a:52:
d5:6a:e9:ab:53:1f:10:f3:87:e6:d4:b8:67:9b:48:ff:1f:32:
4c:d5:f2:b2:e9:2a:85:99:e2:07:ee:3a:18:b8:e5:20:5a:0e:
e6:a9:c1:e6:6b:11:f4:26:15:ca:2b:99:f5:16:fd:7c:63:03:
c7:c0:19:9d:64:ab:bf:1b:55:80:8e:32:dc:aa:f1:2e:4c:b0:
90:21:3b:c1:52:8b:2f:37:bb:c1:01:4f:61:12:c8:91:06:f1:
8f:11:e8:77:a4:83:03:1e:df:48:9f:46:41:bb:b0:76:84:c8:
bd:34:9a:14
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQy
MzA4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEIzRUYzRDUzRkVFMDdC
NjQ2M0EzQjIzQjE4RTM2RjYyMEQxRjhDNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr3C3OzqjUkdt278kv7HT5Ylz3W8yv2x7SwCXzCysspcsIvU6X
LHIUm1VH7c+Zo/ShghB1/5hRAB5Iv6xEhJaO1Xv3d2gmt3EFZKoCRVYwJL64Voll
4eg6U7TY+SCl7ZL/+gVDXfON/A3NwhTwM0Ba0y+FkGVuDHaPVxB4PhTDeBBLEsZi
84YUg7tMQTxcoaZkmMwtF3iMcZtWLE6Ta5LoqR08+2SlTmB/kJM0Iw0bg93qZA1Y
Bsd6Uwh6ro1AQi7uco0gkK99aERUZ7zKLc7LWTI0qW3th18UDtojL7tspVgnk4aJ
qR8gqmDvrGLCzeH1sf4XGuQWCpwS+gXuC/1rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUs+89U/7ge2Rjo7I7GONvYg0fjG4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9zLTg5VV83Z2UyUmpvN0k3
R09OdllnMGZqRzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKvpfVHC5KbzO2zPnQIUePb/CR4629LQ0RIR
6VpwGrtQqmi22rG2Yo9zz38c2Grp426VKrVUOwwRtiCpTPprF5Z9Pkk+pCtu5pjK
Mw+U9CtkwTMzfhJxgQ694Y08y79QBxIEttTRHn5JNjP4kpzLincFifZZmApu9VjS
Lp+Y0Ngq2OKxYPfcuGLH+jDyrF+aUtVq6atTHxDzh+bUuGebSP8fMkzV8rLpKoWZ
4gfuOhi45SBaDuapweZrEfQmFcormfUW/XxjA8fAGZ1kq78bVYCOMtyq8S5MsJAh
O8FSiy83u8EBT2ESyJEG8Y8R6HekgwMe30ifRkG7sHaEyL00mhQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:41 2025 by rpki-client