Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uQwvTdR4iswzZbRKCjtAtgPHKCs.roa
File: uQwvTdR4iswzZbRKCjtAtgPHKCs.roa (raw, json)
Hash identifier: qSORcRlpPcZKmc+lc9MJz8bAlWom0GVeCzDWmbcHiyg=
Subject key identifier: B9:0C:2F:4D:D4:78:8A:CC:33:65:B4:4A:0A:3B:40:B6:03:C7:28:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05A5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uQwvTdR4iswzZbRKCjtAtgPHKCs.roa
Signing time: Wed 14 May 2025 14:38:08 +0000
ROA not before: Wed 14 May 2025 14:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 14:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B90C2F4DD4788ACC3365B44A0A3B40B603C7282B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:83:b9:9a:bc:c4:f6:83:cb:40:6d:e2:5d:
a8:c3:00:86:a6:e0:30:f6:af:19:fd:09:6b:ce:eb:
82:10:7a:5c:34:b5:1a:79:82:7a:60:28:f5:30:c2:
65:3b:70:41:63:ac:f3:5c:9b:d9:9d:60:a4:54:50:
e7:5f:19:a6:5f:78:16:4e:47:4d:2a:bb:fc:ef:88:
d7:7e:ee:80:31:d2:37:e3:d5:24:8e:77:d8:12:df:
24:db:0a:63:d8:ef:b9:94:f4:2d:b9:af:11:f2:12:
79:7c:d9:6f:49:ca:e3:6a:61:0c:5f:1e:2b:05:8d:
33:cf:40:aa:63:ff:fe:f4:3a:e2:0e:07:c4:e5:cf:
08:f8:17:4f:23:9f:de:60:74:bc:10:c8:c5:f8:ac:
a0:7c:62:34:06:8e:bd:f7:4e:32:d8:30:fd:c4:9b:
70:8b:3b:d5:b6:d3:48:24:7f:a5:14:4c:e2:43:3d:
74:be:81:16:f9:6f:44:f0:ef:8c:bb:fc:38:37:99:
68:88:64:09:fe:ef:fb:8d:8c:e1:1b:74:3a:53:1f:
ff:17:e5:41:fa:d7:1e:ce:73:d3:68:49:c0:73:74:
35:2b:17:50:51:c0:35:84:71:f3:bd:4c:b5:62:37:
4f:17:ac:9e:a7:76:a7:10:34:7b:5e:f6:ea:ac:b0:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:2F:4D:D4:78:8A:CC:33:65:B4:4A:0A:3B:40:B6:03:C7:28:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uQwvTdR4iswzZbRKCjtAtgPHKCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:87:02:63:fd:99:12:29:d7:38:fc:d6:d7:68:a4:ce:e2:98:
0b:63:8b:a0:50:1b:35:a8:e3:e5:cc:cb:c6:af:7b:69:ae:14:
1a:f0:1e:96:d0:76:f6:43:74:08:85:83:45:b2:fc:3a:a4:fa:
e5:f6:d6:13:8e:27:23:e9:0a:09:7c:3c:e9:d9:a1:37:06:15:
bf:2c:c5:79:2f:10:64:55:ce:e8:e4:45:9c:45:fb:e2:1f:90:
5c:7f:6d:cd:54:24:24:38:b4:eb:d6:97:2e:f3:66:82:df:95:
e3:91:e5:94:88:6d:9d:5a:c8:fc:09:80:60:07:66:f9:7c:6e:
01:ce:3e:82:ad:eb:fa:57:7d:79:84:5c:09:0d:d5:41:69:d8:
ac:16:96:4a:51:72:40:4a:24:03:5f:80:5a:b2:5f:d2:9b:0a:
59:63:25:4a:37:48:24:0a:b7:15:61:0b:df:cd:4c:76:19:f3:
12:95:38:7e:e4:fa:21:f3:23:00:61:6f:d4:3f:11:52:55:bb:
cd:be:1e:a2:3b:5d:ac:cb:aa:19:5e:e1:7f:23:54:ae:bc:28:
17:4b:a1:c4:51:e6:d3:1d:54:14:3e:53:ff:55:6e:6f:72:38:
15:70:de:52:b4:07:72:6d:0d:77:04:cb:68:f7:b5:37:76:f8:
d6:be:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:35 2025 by rpki-client