Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CzJxCZtvAcdaIhH6cmSvE1CTVHc.roa
File: CzJxCZtvAcdaIhH6cmSvE1CTVHc.roa (raw, json)
Hash identifier: v4bLzGn/bLw39vXsOxH0MgmM1GBl53THctJiq7+Ae1U=
Subject key identifier: 0B:32:71:09:9B:6F:01:C7:5A:22:11:FA:72:64:AF:13:50:93:54:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1ADD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CzJxCZtvAcdaIhH6cmSvE1CTVHc.roa
Signing time: Wed 11 Jun 2025 21:40:42 +0000
ROA not before: Wed 11 Jun 2025 21:40:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6877 (0x1add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 21:40:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0B3271099B6F01C75A2211FA7264AF1350935477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:2c:c6:97:c5:62:1b:99:b6:ed:74:e0:47:
9e:68:e9:af:ff:cc:da:b2:3b:1d:95:8d:e8:11:69:
af:15:4e:02:ae:80:c4:3e:9a:ca:17:c8:86:aa:c7:
4d:88:3e:30:22:f5:fd:3c:78:22:c3:7b:e6:55:d9:
f8:dd:c8:d0:a5:17:27:9d:da:2d:a4:46:14:9d:73:
1e:fc:27:90:fd:b0:15:a9:42:7d:ce:9c:ff:25:91:
4e:79:30:4c:9e:b4:de:dc:9c:62:16:fe:03:ca:63:
78:f0:24:ee:48:68:0c:c8:2d:7d:2d:e7:0f:3c:c6:
f7:3f:66:09:94:15:58:1a:91:49:34:27:b3:74:5c:
ab:7b:76:e0:95:64:2b:0b:2a:6f:fa:70:02:73:5e:
e5:80:e5:18:f9:fd:37:ae:93:c3:88:ed:56:93:8c:
6c:5a:7e:64:af:fc:f5:22:af:e2:21:bc:8e:77:32:
cc:b0:25:7c:67:e9:62:89:57:8a:83:b7:15:d9:5e:
22:29:4a:01:9d:39:54:3e:0a:b1:c2:b2:b1:33:06:
70:59:f7:c2:97:08:1f:cc:1c:07:e8:7d:bb:c5:d9:
45:b9:6d:f8:6c:fa:03:3b:2d:4d:f1:39:1d:6c:c0:
8e:19:3f:3d:50:b6:51:02:4a:0a:e7:a0:b5:17:b6:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:71:09:9B:6F:01:C7:5A:22:11:FA:72:64:AF:13:50:93:54:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CzJxCZtvAcdaIhH6cmSvE1CTVHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:e3:28:1a:54:12:e3:5b:61:cc:6b:f4:de:ad:3e:6c:8b:20:
f8:71:58:06:36:b4:8a:d6:f4:84:8f:cd:ea:67:ca:4f:36:89:
58:19:37:81:a9:69:7d:c3:67:d4:75:82:00:17:8d:3f:b8:84:
65:4d:32:39:9d:31:90:7f:4a:29:05:43:95:6d:02:a0:07:2d:
7b:f1:54:3b:73:ef:ef:e7:91:7a:0f:ba:2c:b9:65:50:9b:92:
62:ad:15:c5:d3:4e:02:80:1b:e3:f0:a8:4f:c5:60:06:b2:fd:
3c:dd:91:79:54:9b:6f:45:c6:77:0b:2c:87:b8:bd:a7:23:85:
75:58:f8:78:ae:c3:c2:dd:c6:9d:9d:10:7a:cd:9c:2e:89:bc:
45:ea:5f:84:4f:25:f5:97:23:6f:9a:e9:a3:f9:e6:63:8e:1b:
2b:a1:d8:2d:a3:5c:d3:ac:dc:e6:63:80:2d:61:5d:d1:18:1e:
fc:a7:03:d4:fd:50:df:56:ea:65:f7:3b:11:74:1a:37:a3:1b:
88:1d:48:58:e8:43:51:35:2f:95:f5:76:bf:a3:ed:54:29:42:
78:5c:fe:b4:2e:ba:f0:a2:35:fc:63:60:ae:ad:c5:7a:31:01:
5c:d7:78:1e:97:1e:dd:a7:5d:88:80:c4:ca:c5:15:32:20:41:
59:f7:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:24 2025 by rpki-client