Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DLlL7xOja2THN7WzUI4uJHnTiYM.roa
File: DLlL7xOja2THN7WzUI4uJHnTiYM.roa (raw, json)
Hash identifier: JnfoBK57E6hZKL10MuY5Pf2wm6TBtS/XwH7WukQcz7E=
Subject key identifier: 0C:B9:4B:EF:13:A3:6B:64:C7:37:B5:B3:50:8E:2E:24:79:D3:89:83
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BD9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DLlL7xOja2THN7WzUI4uJHnTiYM.roa
Signing time: Fri 13 Jun 2025 05:21:02 +0000
ROA not before: Fri 13 Jun 2025 05:21:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7129 (0x1bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 05:21:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0CB94BEF13A36B64C737B5B3508E2E2479D38983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:f8:f8:e3:33:b9:71:8d:c8:a5:78:29:3f:
96:d2:6d:64:fd:6a:54:86:22:57:d9:2a:c9:43:2c:
47:4d:36:26:db:75:98:e2:5d:32:b0:89:c3:0d:5d:
4f:26:9f:82:5f:34:b1:81:42:bd:8b:8e:de:77:4f:
f8:a6:bc:4d:d1:b3:2f:6e:a2:65:c8:fc:a1:49:26:
a7:6c:1b:24:04:54:e3:09:8e:43:02:7b:a5:3a:02:
5a:b4:73:f7:eb:b9:86:09:6e:70:f6:23:92:92:2d:
b1:ad:13:d7:ae:7f:1a:73:1f:ec:f6:c3:e8:69:8a:
5c:80:97:ad:37:28:c9:33:90:b3:1e:db:c4:c1:e5:
82:91:a2:b0:e1:6a:2b:4e:08:51:fa:7e:6d:05:e7:
f0:15:ed:6a:3d:e2:11:e5:e3:23:cc:89:62:40:e6:
4b:64:42:7f:5f:87:92:7e:e6:56:36:40:42:09:34:
52:3e:8b:ed:9c:69:d4:28:ed:f4:db:aa:60:d4:38:
48:f9:0a:0f:96:98:12:ee:04:e0:cf:c9:57:18:45:
fc:b6:37:08:2e:92:e3:02:54:da:11:92:a7:6b:df:
8b:c4:7d:a1:89:f2:78:7e:3a:07:83:5a:f0:83:0c:
ae:b6:70:77:b3:71:67:5c:bf:ff:b2:db:8e:75:c0:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:4B:EF:13:A3:6B:64:C7:37:B5:B3:50:8E:2E:24:79:D3:89:83
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DLlL7xOja2THN7WzUI4uJHnTiYM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:c1:0c:eb:b2:36:ce:04:f8:52:55:2c:bb:85:79:55:c8:e9:
1e:eb:c1:1c:59:57:c0:49:98:ae:7d:5e:b3:24:23:c3:c0:c7:
be:44:d0:03:9f:03:03:17:a8:46:ac:41:d2:8e:75:9c:39:45:
a3:69:75:13:e6:16:cc:02:71:5f:f7:d8:10:0b:d7:b5:25:3f:
a0:24:5d:35:4c:eb:99:8c:a0:82:38:78:15:10:30:33:d8:e1:
c1:ee:8a:72:c0:92:bd:3d:5a:5c:75:9e:50:ea:87:5b:43:8a:
cd:1f:91:19:57:09:6b:29:85:c1:9b:15:f8:91:98:35:5f:cf:
92:e6:13:f9:84:14:c4:29:ff:d5:f5:72:96:3c:21:a8:57:b0:
38:ce:a2:97:f0:68:5b:cb:bb:1a:5e:02:ef:14:e0:bc:8a:a7:
69:2f:f2:5e:8b:d7:b3:db:36:c8:d3:f4:2b:8e:44:16:78:1c:
42:54:70:38:b1:70:d5:8e:23:cf:e3:89:ec:c6:cb:3d:04:fc:
a5:b8:4a:df:dc:84:51:0c:47:f9:53:4b:6f:13:41:a6:63:fa:
3b:a4:f3:fb:22:1e:da:77:78:36:e7:44:2b:a0:69:69:8b:07:
3f:d7:2f:d9:92:a2:a1:2e:2f:2b:86:d1:3c:02:00:a3:2b:9d:
dd:b4:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:55 2025 by rpki-client