Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/40hO8C_xbXU0Htn26J-gPBRIuvw.roa
File: 40hO8C_xbXU0Htn26J-gPBRIuvw.roa (raw, json)
Hash identifier: z5XuHVnvPUnmKNBxMqPx2r99WuG6dM93dWm9Txv/yeo=
Subject key identifier: E3:48:4E:F0:2F:F1:6D:75:34:1E:D9:F6:E8:9F:A0:3C:14:48:BA:FC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01ED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/40hO8C_xbXU0Htn26J-gPBRIuvw.roa
Signing time: Fri 09 May 2025 15:37:46 +0000
ROA not before: Fri 09 May 2025 15:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 15:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E3484EF02FF16D75341ED9F6E89FA03C1448BAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:de:22:af:a4:21:c2:23:9b:4a:11:f2:f5:
a0:be:48:8d:e7:e1:36:ab:c2:14:cc:c6:a6:68:ca:
41:f5:aa:32:96:b1:c9:d0:b3:90:5e:8e:16:f7:f3:
b1:46:53:b5:7c:ca:8e:16:1f:17:de:75:7b:13:35:
f7:95:b3:6b:8c:0f:c3:ae:f7:76:95:6f:be:63:23:
10:0d:f0:6b:72:d1:85:1b:d5:77:79:04:60:36:60:
f4:cb:5f:bd:99:5f:df:ce:d1:eb:25:0a:52:fd:df:
3d:f3:ef:76:5c:b4:02:4a:03:36:06:b6:fb:90:19:
23:36:36:3f:bd:d3:bc:3b:64:9a:e6:ea:2b:74:74:
33:b1:ef:9e:b9:78:ec:d1:5f:ea:8a:05:55:86:41:
2b:8e:2e:73:63:0e:40:c1:4b:7f:5c:02:97:a1:95:
ce:da:fc:79:4f:3a:23:3a:fb:7d:1d:a8:d0:43:a0:
d0:a8:e2:86:70:6c:7d:b9:87:db:b4:65:58:48:cd:
82:8a:ec:b0:0c:47:d2:6d:4b:30:51:25:ea:97:e9:
07:0d:1e:3b:57:ce:70:5e:28:f3:21:a3:9f:47:a7:
27:34:5d:71:85:8e:96:80:a9:59:c2:d3:5f:95:65:
01:4c:db:75:52:11:9b:a3:c8:bf:dc:8d:b2:51:89:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:48:4E:F0:2F:F1:6D:75:34:1E:D9:F6:E8:9F:A0:3C:14:48:BA:FC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/40hO8C_xbXU0Htn26J-gPBRIuvw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:65:92:27:4e:99:f5:a7:6a:ee:85:80:29:2f:6f:60:04:49:
20:3c:78:1a:cd:04:8f:57:86:d1:17:a3:d8:de:5f:f1:54:26:
ac:f2:9e:1c:87:62:f0:30:f7:0a:d8:73:4f:4d:77:82:d9:94:
4c:7e:92:a1:c1:df:08:06:7a:da:6e:8c:4e:96:68:16:b9:8a:
84:d1:c9:6b:a9:92:84:e5:87:46:47:1e:14:87:fc:eb:f9:b7:
71:d0:75:63:dc:9d:02:c5:36:04:b6:89:6b:55:24:1b:20:e2:
61:d6:09:65:f9:3d:1e:1c:b6:8b:03:0e:e1:d2:0f:66:ad:2b:
5c:fe:6b:fb:a9:1f:ac:17:65:1c:a8:9a:01:37:e1:37:5f:88:
fe:67:ae:68:c4:e4:b0:17:52:96:e5:14:44:46:a7:6a:b5:ce:
7d:66:9a:fa:b3:45:5a:81:36:b6:14:2a:53:bb:65:62:ec:df:
b5:81:7c:89:e8:bc:a2:73:6e:b1:ef:b5:29:93:de:6a:8b:2e:
08:a4:9f:e0:69:0a:08:8d:27:f5:31:f5:de:19:23:f4:f2:e4:
93:8e:12:ee:d2:fa:54:8d:81:c6:fb:aa:6e:cb:f7:6e:11:a3:
a4:42:35:45:78:75:bc:86:0b:39:3f:7d:1b:98:ff:fe:dd:00:
ee:0d:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:46 2025 by rpki-client