Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_F-OqZbCWq3wwgU-kINRfueuE.roa
File: 2f_F-OqZbCWq3wwgU-kINRfueuE.roa (raw, json)
Hash identifier: yEiRRpK8rvlgB89t8vrqY8IsFWCuo8PMPgBWFkmv6N8=
Subject key identifier: D9:FF:C5:F8:EA:99:6C:25:AA:DF:0C:20:53:E9:08:35:17:EE:7A:E1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0871
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_F-OqZbCWq3wwgU-kINRfueuE.roa
Signing time: Sun 18 May 2025 08:08:35 +0000
ROA not before: Sun 18 May 2025 08:08:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 08:08:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D9FFC5F8EA996C25AADF0C2053E9083517EE7AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:37:aa:97:fc:83:0c:ea:a6:bc:38:5f:3e:
ab:2a:7f:02:aa:ba:5d:9c:3c:13:56:f0:2f:c7:86:
ff:73:4f:82:10:30:16:b2:bb:62:28:67:2a:7a:fc:
5f:a3:92:5b:45:b1:16:28:e5:59:b5:f1:72:08:6b:
22:34:4e:f1:d1:b5:26:46:79:65:52:24:e6:0b:f3:
b2:5e:7b:c9:c0:fc:71:3a:cd:8f:33:83:5a:7c:d5:
21:1e:3b:52:fd:61:8a:38:2e:62:37:90:dd:45:af:
e5:9d:44:ba:51:71:71:af:0c:6b:d6:0c:e1:1a:48:
92:38:f8:de:ba:b7:39:b4:15:9d:7e:1a:e5:aa:25:
a7:d4:0f:c8:dd:f6:23:33:67:2c:fa:48:60:6a:d0:
ee:86:1b:01:6a:ff:9e:86:bc:68:68:bf:58:0a:73:
18:29:f0:e4:dc:0b:d9:4e:f7:e2:90:56:28:ef:da:
2c:f3:d0:55:26:6f:65:fb:8b:86:6a:1f:29:f9:51:
54:29:62:e4:e7:63:10:97:25:bb:8d:bf:c9:f9:d0:
39:d8:2e:a5:b6:f3:80:96:0e:00:0a:d0:18:ea:64:
f0:04:2e:04:f2:aa:41:00:1f:59:02:df:6a:c2:13:
2a:fb:95:7c:dc:6a:a0:07:69:e1:16:a9:94:c2:78:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:C5:F8:EA:99:6C:25:AA:DF:0C:20:53:E9:08:35:17:EE:7A:E1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2f_F-OqZbCWq3wwgU-kINRfueuE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:4a:8a:06:ab:1f:b6:47:84:c9:38:bd:3d:88:92:6e:1d:4a:
6b:41:d5:e5:12:fb:9a:ff:4f:d1:04:8b:fa:eb:d9:55:bd:84:
59:b6:05:8c:fa:0d:bf:67:0f:71:e7:b2:f9:5a:8b:58:c7:b2:
f9:eb:66:a9:89:9f:b5:ec:31:dd:a5:86:a6:ef:6d:26:9f:7f:
e0:26:df:b4:95:1e:89:06:2b:35:2a:01:11:6c:75:02:0c:7d:
3e:ed:17:fc:7a:e5:fa:29:9f:55:61:4e:61:86:b7:4f:12:e3:
c5:61:d8:48:73:ee:65:20:cd:0e:59:63:ec:85:c1:bd:a8:4f:
a6:05:1d:cb:f5:f6:b4:48:06:96:4c:b3:a9:33:22:db:4c:72:
b3:e3:03:5c:aa:de:81:66:fa:da:df:d6:ce:a0:75:04:c8:88:
92:42:68:f0:12:40:11:84:8f:69:17:b3:26:f6:18:d9:72:93:
07:7a:bf:80:40:eb:53:f7:0d:a5:83:d9:74:9b:e4:9c:7b:ce:
71:40:1b:a4:d4:cf:f4:2f:6d:b5:eb:7e:56:a9:b8:93:df:74:
a5:82:1b:c3:b6:45:53:5b:ef:7d:2e:2e:99:47:62:06:b1:97:
e7:85:6c:9f:bb:5d:ed:67:d4:7b:01:ed:57:3f:44:14:e7:9d:
e3:8d:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:35 2025 by rpki-client