Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/623/vBvjb60I6fD_P9X6KwlC8Vo1rGc.roa
File: vBvjb60I6fD_P9X6KwlC8Vo1rGc.roa (raw, json)
Hash identifier: VLMBK5GpSi0bmOU07hIUgsJ0aIP/FWi1FVBbSFsVooI=
Subject key identifier: BC:1B:E3:6F:AD:08:E9:F0:FF:3F:D5:FA:2B:09:42:F1:5A:35:AC:67
Certificate issuer: /CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Certificate serial: 0B05
Authority key identifier: DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/vBvjb60I6fD_P9X6KwlC8Vo1rGc.roa
Signing time: Mon 27 Oct 2025 02:31:40 +0000
ROA not before: Mon 27 Oct 2025 02:31:40 +0000
ROA not after: Fri 23 Oct 2026 03:01:03 +0000
asID: 58834
IP address blocks: 103.27.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2821 (0xb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEBFC900EDC34F81DA4827F1F9F63D04E0E2F756
Validity
Not Before: Oct 27 02:31:40 2025 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=BC1BE36FAD08E9F0FF3FD5FA2B0942F15A35AC67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:81:a2:17:61:e7:57:1f:2c:d8:81:18:ae:
7c:90:7e:bd:86:0d:b1:47:b4:53:ef:c4:e7:41:ac:
24:24:94:31:ec:10:52:27:a8:c6:44:d3:dd:be:22:
6a:10:fd:89:00:6a:87:7d:b0:b6:f0:7a:78:59:36:
34:7e:1e:ca:84:0b:11:b0:92:49:56:59:f2:69:9a:
69:a9:2f:b0:69:4a:ec:51:b8:d1:df:ab:8a:02:42:
38:e9:64:b1:8b:f3:ec:8f:2d:04:9f:28:be:3d:31:
34:f5:ca:9b:ba:86:5c:f2:ed:1d:c9:1b:a9:17:a8:
1a:8f:67:df:23:56:bc:0e:88:ff:ac:f2:11:5a:a0:
0a:a4:6f:c3:0e:9a:83:74:6a:37:a0:70:f7:19:f4:
b6:bf:0b:2f:db:49:bc:fd:6f:78:a6:d1:42:bc:c6:
b4:a7:96:23:73:38:02:79:a0:d2:8f:32:86:41:80:
9d:c6:49:a1:6a:b7:1d:29:ed:41:5e:54:e5:b1:a6:
00:41:40:59:2f:9a:bd:0d:cb:64:d0:68:5e:5c:4f:
3f:e3:a6:b1:63:b4:bf:3b:5a:a1:b0:70:7e:6c:d6:
5a:5a:3d:be:2e:99:97:13:c6:3c:8c:f7:8b:81:6f:
c5:dd:6b:0c:b0:ed:5e:3d:d6:04:ca:fe:88:49:30:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:E3:6F:AD:08:E9:F0:FF:3F:D5:FA:2B:09:42:F1:5A:35:AC:67
X509v3 Authority Key Identifier:
keyid:DE:BF:C9:00:ED:C3:4F:81:DA:48:27:F1:F9:F6:3D:04:E0:E2:F7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/3r_JAO3DT4HaSCfx-fY9BODi91Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3r_JAO3DT4HaSCfx-fY9BODi91Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/623/vBvjb60I6fD_P9X6KwlC8Vo1rGc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.26.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c9:8c:18:9f:06:53:9b:30:ed:b5:4d:ae:74:a6:31:ff:1d:
dd:31:4c:d8:87:19:56:4c:75:f8:f1:2e:a8:0f:37:4b:cc:ba:
9a:d8:5e:e4:5b:aa:66:56:a8:e6:02:0b:52:92:0a:0c:c9:b6:
7b:c0:e2:80:5c:0a:f1:d3:3e:bc:d8:19:f8:61:4e:cd:e8:f0:
4c:92:c7:ed:ec:57:da:4b:75:09:74:bb:0d:86:bf:80:64:99:
a8:55:89:06:9f:31:0f:87:fa:c2:d6:37:01:3d:cf:9b:2c:80:
4e:8b:6c:ea:a1:65:ee:a1:c7:01:ea:7d:0f:07:a6:fb:77:2e:
5b:c6:cf:e7:44:83:43:63:21:ad:ab:04:ea:40:e0:7f:78:d6:
68:ec:91:7a:4f:64:44:dc:4f:83:e8:94:a6:e7:1c:94:39:d9:
82:b3:26:fa:2b:da:63:b9:d8:3d:ba:00:a0:d8:6d:fb:75:04:
15:3a:d4:df:a3:23:8a:76:a8:83:45:1d:06:9b:29:20:b1:e4:
b2:8a:f5:75:ea:83:90:0e:43:50:d8:e0:1c:84:43:b3:ed:11:
e7:7c:8a:2b:f4:76:7f:0a:03:88:83:02:91:40:76:25:de:3b:
be:c1:78:70:0f:45:88:19:f4:ef:2e:d3:66:22:30:5c:77:94:
76:77:05:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:57:39 2025 by rpki-client