Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/64URtRiIWoMeFpuko4uJeIOfFVk.roa
File: 64URtRiIWoMeFpuko4uJeIOfFVk.roa (raw, json)
Hash identifier: 1XFpOMl9i14aBFWj4l4TkPRk4S05nDbg11RJMd3m67k=
Subject key identifier: EB:85:11:B5:18:88:5A:83:1E:16:9B:A4:A3:8B:89:78:83:9F:15:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A21
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/64URtRiIWoMeFpuko4uJeIOfFVk.roa
Signing time: Tue 10 Jun 2025 22:09:45 +0000
ROA not before: Tue 10 Jun 2025 22:09:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6689 (0x1a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 22:09:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EB8511B518885A831E169BA4A38B8978839F1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:4c:28:68:35:68:29:e6:ab:29:3d:45:18:
41:63:e6:3b:2b:7a:94:e8:a9:87:b2:57:32:96:4a:
f5:fc:51:f1:bd:be:63:57:e5:f6:c8:f8:55:b5:6b:
e9:05:d4:6e:72:e3:b7:d4:fa:a0:16:f5:ef:6d:57:
26:3f:6a:5c:b5:09:d3:ca:e2:47:1c:ea:3a:81:8f:
6a:7f:00:db:48:e5:fa:f4:24:f6:d6:bd:b4:c5:63:
f5:43:3f:1d:ca:8b:46:03:ef:20:c3:71:84:08:0c:
46:41:58:78:45:d6:90:19:d4:49:2b:55:c3:47:0a:
6c:fd:26:ea:38:15:e2:15:b9:4b:e1:9b:15:0a:8f:
58:11:3e:d7:cb:6b:06:e1:04:9c:da:e4:85:55:84:
b9:97:b2:76:87:fb:7f:56:9d:20:87:63:6f:aa:16:
ff:07:85:5e:9b:e9:b6:e9:76:b6:80:98:02:10:b6:
40:18:53:d8:12:33:a4:45:03:53:a0:e2:2d:dd:05:
8d:b3:17:59:6a:ff:bc:cd:95:20:02:cf:5d:a8:ed:
50:fe:3d:3e:a7:58:30:b4:ce:15:73:ad:10:72:0b:
2f:e3:c6:74:69:b2:fc:55:7a:7d:be:e4:41:55:50:
92:ee:5e:5e:e6:07:f8:58:34:da:a4:c2:3e:72:37:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:11:B5:18:88:5A:83:1E:16:9B:A4:A3:8B:89:78:83:9F:15:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/64URtRiIWoMeFpuko4uJeIOfFVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:94:f6:a9:a1:0a:86:02:a8:f9:6a:c0:ba:f5:d0:2b:b0:d7:
b5:16:33:e8:d4:b5:be:b9:ec:dc:ef:b7:1f:af:80:db:93:f1:
0e:91:78:be:8f:8d:b5:e0:48:7b:97:9e:ed:eb:25:c4:2d:cc:
3d:be:db:72:88:b3:b5:cb:bd:13:ce:7e:09:fc:7e:eb:cb:08:
e6:2b:e5:8e:84:dc:90:83:f2:fb:55:7b:fd:a7:16:9b:0a:12:
d4:e2:2e:02:43:d5:96:a5:a7:a3:a7:b2:00:1c:8a:70:a3:d1:
a1:20:0c:09:1c:c2:af:28:1d:59:f2:90:9a:36:47:f3:07:01:
a3:ad:a3:67:52:77:cf:8c:0d:f9:fe:18:0f:26:29:19:03:15:
56:19:6c:7a:19:17:07:42:38:04:a3:a3:b5:e9:00:2d:d4:5f:
b5:5a:ab:af:be:f9:60:64:d3:7c:02:c1:ff:39:66:fe:00:e9:
dc:9f:81:3e:f0:46:c0:31:7c:bb:f7:7a:c5:b0:80:2e:e6:03:
2e:61:9e:c9:ee:16:05:4a:85:41:a0:1a:fd:9a:ff:a4:59:b7:
c6:8c:36:f2:91:63:03:61:2c:79:a9:6e:23:90:17:c5:0b:7a:
58:ee:72:1e:0e:46:79:c1:10:d2:60:ac:98:50:b5:b4:26:8e:
3d:df:e6:81
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAy
MjA5NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVCODUxMUI1MTg4ODVB
ODMxRTE2OUJBNEEzOEI4OTc4ODM5RjE1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwq0woaDVoKearKT1FGEFj5jsrepToqYeyVzKWSvX8UfG9vmNX
5fbI+FW1a+kF1G5y47fU+qAW9e9tVyY/aly1CdPK4kcc6jqBj2p/ANtI5fr0JPbW
vbTFY/VDPx3Ki0YD7yDDcYQIDEZBWHhF1pAZ1EkrVcNHCmz9Juo4FeIVuUvhmxUK
j1gRPtfLawbhBJza5IVVhLmXsnaH+39WnSCHY2+qFv8HhV6b6bbpdraAmAIQtkAY
U9gSM6RFA1Og4i3dBY2zF1lq/7zNlSACz12o7VD+PT6nWDC0zhVzrRByCy/jxnRp
svxVen2+5EFVUJLuXl7mB/hYNNqkwj5yN75HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU64URtRiIWoMeFpuko4uJeIOfFVkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82NFVSdFJpSVdvTWVGcHVr
bzR1SmVJT2ZGVmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJiU9qmhCoYCqPlqwLr10Cuw17UWM+jUtb65
7Nzvtx+vgNuT8Q6ReL6PjbXgSHuXnu3rJcQtzD2+23KIs7XLvRPOfgn8fuvLCOYr
5Y6E3JCD8vtVe/2nFpsKEtTiLgJD1Zalp6OnsgAcinCj0aEgDAkcwq8oHVnykJo2
R/MHAaOto2dSd8+MDfn+GA8mKRkDFVYZbHoZFwdCOASjo7XpAC3UX7Vaq6+++WBk
03wCwf85Zv4A6dyfgT7wRsAxfLv3esWwgC7mAy5hnsnuFgVKhUGgGv2a/6RZt8aM
NvKRYwNhLHmpbiOQF8ULeljuch4ORnnBENJgrJhQtbQmjj3f5oE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:09:56 2025 by rpki-client