Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C0LEMEjCNDPuw4cR0jWS6P5f_TE.roa
File: C0LEMEjCNDPuw4cR0jWS6P5f_TE.roa (raw, json)
Hash identifier: YifOIYpfNz2L1enw8azQFfMHrrbe0KvMoCPaqKiWXfY=
Subject key identifier: 0B:42:C4:30:48:C2:34:33:EE:C3:87:11:D2:35:92:E8:FE:5F:FD:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DBD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C0LEMEjCNDPuw4cR0jWS6P5f_TE.roa
Signing time: Sun 25 May 2025 09:39:17 +0000
ROA not before: Sun 25 May 2025 09:39:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 09:39:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0B42C43048C23433EEC38711D23592E8FE5FFD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:8d:e2:a2:3a:b3:54:08:30:4a:87:8f:8b:9e:
45:e5:75:a0:c2:c8:26:91:99:54:24:ac:83:05:e3:
1b:0a:a9:38:3c:a4:b8:1b:75:d0:74:58:46:aa:d4:
6e:4b:48:b1:f9:23:dd:5e:1d:20:7e:40:2d:80:85:
db:24:8d:48:76:f3:b6:09:10:4d:a7:2a:6c:44:0d:
e8:da:3a:55:81:08:62:f5:47:26:09:a2:5b:8e:dd:
5f:85:55:2d:80:67:2e:55:c5:8b:f2:76:0e:fe:fd:
a0:88:8f:24:8f:49:78:a9:19:cc:36:11:ad:75:70:
37:03:93:9f:59:62:bc:3a:1b:78:a8:a0:b8:8f:8b:
c5:a6:96:74:5e:c0:e8:8f:e4:7b:e7:36:ba:f0:8d:
27:d6:50:b2:88:22:0d:b5:4a:30:14:b1:d1:fa:25:
c4:29:39:fe:88:be:18:a3:fb:9c:8f:63:d9:02:e8:
19:2c:da:23:30:4b:ce:9b:f3:1b:e5:c5:05:fd:30:
44:a0:03:0c:a7:e8:7f:9c:af:5f:d9:88:5a:fc:38:
2c:91:37:8d:93:4e:f6:b8:ec:0d:32:74:8b:f9:d2:
4a:8a:79:99:22:3b:c8:19:8a:a8:9d:40:b6:2c:31:
4a:82:17:ab:f7:fb:ce:88:08:1d:94:a1:29:94:6e:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:C4:30:48:C2:34:33:EE:C3:87:11:D2:35:92:E8:FE:5F:FD:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C0LEMEjCNDPuw4cR0jWS6P5f_TE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:b0:3c:31:8e:fb:74:d2:47:ba:5e:61:4f:d9:14:e8:85:c5:
4d:92:37:d7:ef:e4:0f:47:06:7f:21:57:e2:fe:c5:0a:99:3e:
2e:66:14:fd:53:c1:ec:ef:d2:fe:80:34:a5:70:f6:05:b9:09:
b2:dd:b4:ae:1f:50:44:5e:4a:76:7e:c8:91:0b:4d:3f:f6:8a:
07:df:99:68:ae:71:23:10:d3:1a:b8:33:e1:d6:43:cb:10:84:
b0:b1:66:a0:0e:a5:b8:15:4a:c0:d0:3f:1f:62:a3:8f:d2:b6:
0c:d2:37:46:f5:a9:f4:11:d8:77:36:3a:1e:6a:1b:e2:ac:fe:
0f:26:c3:2e:51:9b:d8:3f:67:85:09:b5:3d:1e:ad:4a:49:e6:
ce:1e:a0:9d:84:f9:25:80:78:fb:bd:ef:7f:8a:0b:1b:78:c7:
64:07:f0:36:7e:c6:ba:6c:cd:cd:4e:7d:ce:db:ba:93:35:c0:
30:24:53:e8:08:46:39:27:db:47:23:4b:4d:06:05:a4:91:19:
1c:9d:17:d9:fb:c9:6b:05:6d:1f:db:29:cd:b5:00:37:76:da:
20:ce:3d:25:2d:3e:5b:35:d2:c4:ce:cf:77:22:dc:bc:5b:0d:
8e:75:4f:71:cd:34:3a:56:b7:24:ba:f5:cb:66:79:33:46:ff:
75:e6:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:44:06 2025 by rpki-client