Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DjIzDlVRKDnCLZ8cZZCdv2xVP0E.roa
File: DjIzDlVRKDnCLZ8cZZCdv2xVP0E.roa (raw, json)
Hash identifier: ztBhkiwjY+BbndDrYXozMitxk+CyA+wc+psKtXNx4tk=
Subject key identifier: 0E:32:33:0E:55:51:28:39:C2:2D:9F:1C:65:90:9D:BF:6C:55:3F:41
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1505
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DjIzDlVRKDnCLZ8cZZCdv2xVP0E.roa
Signing time: Wed 04 Jun 2025 02:39:19 +0000
ROA not before: Wed 04 Jun 2025 02:39:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5381 (0x1505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 02:39:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0E32330E55512839C22D9F1C65909DBF6C553F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:6a:3e:b3:c5:80:df:db:c2:38:18:13:cb:
16:bb:f6:f4:68:d0:55:1b:44:59:b6:96:b7:20:17:
67:27:f5:b9:27:7c:9e:f6:1c:23:62:c6:2c:3a:28:
7d:c1:16:88:b0:0f:88:cb:b6:ec:5d:be:f6:5c:e0:
0c:fd:dc:d9:0b:58:7a:4c:9b:12:4d:1c:74:3a:e4:
54:3b:9f:2f:e3:b6:09:c8:74:80:94:d7:6b:22:b3:
df:46:1f:82:f6:65:01:09:94:43:cb:46:8c:d2:5f:
c1:f1:9b:6e:52:fd:88:1e:3f:58:a1:f3:8c:76:7c:
b0:ad:ea:5e:67:e8:ed:7b:cd:35:e6:e3:5b:c6:19:
12:59:38:de:bf:a2:be:c5:f0:c9:76:cb:1a:f1:8c:
7b:fd:7f:a8:d7:44:b1:14:f4:3a:ac:34:30:8e:5b:
26:9b:75:27:ee:f8:02:f1:5c:ff:65:4e:b2:87:70:
be:a5:49:b4:90:fc:85:38:83:7f:1d:ef:e2:a9:db:
5c:cf:be:2d:66:50:eb:cf:a8:21:e9:f5:42:36:8a:
f6:8e:26:7f:c2:f5:d9:36:a4:6c:57:75:8a:7a:0a:
81:ca:2c:c9:ff:d4:08:d2:40:da:f8:4e:5a:11:6d:
6b:25:ce:89:c9:11:47:e8:9e:c1:bd:46:43:c9:f4:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:33:0E:55:51:28:39:C2:2D:9F:1C:65:90:9D:BF:6C:55:3F:41
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DjIzDlVRKDnCLZ8cZZCdv2xVP0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:d8:57:2b:0b:a2:4d:b1:cf:56:bd:09:56:b5:95:52:66:4a:
9a:8b:a0:54:4e:c5:8b:35:e6:3c:59:26:24:9a:a3:7e:5d:87:
a8:55:a6:77:26:80:07:c6:6f:10:59:e0:b6:52:71:ac:90:a7:
42:aa:e9:78:cc:3c:dc:d4:14:d8:5c:76:df:d0:b0:ef:ad:33:
ea:4c:61:5e:e5:d9:a3:a2:68:00:9a:1a:cd:b1:4a:45:a4:c7:
6e:21:88:be:47:a2:64:6d:69:de:b8:32:29:44:71:cd:a6:d4:
d8:13:20:95:8c:90:29:e6:3e:d2:80:d3:2a:13:6b:89:ba:d6:
6d:0e:48:64:d8:c2:ee:ae:54:f4:64:d4:80:cd:29:a4:b6:a8:
60:8a:11:65:53:72:f8:6e:43:fb:05:95:1e:92:52:57:94:8e:
f2:03:34:e3:33:f3:69:15:4e:64:5f:92:eb:f5:7e:fe:62:fc:
6a:40:03:24:fc:47:a0:dc:97:cf:0c:6b:22:5b:ba:b4:2c:b7:
a3:2b:37:6c:fe:33:cb:c0:0f:e7:4d:91:85:15:b6:ad:18:67:
eb:6d:bc:d4:54:34:b8:30:57:5d:62:35:e6:63:c2:e6:aa:61:
69:07:9b:bc:50:75:3d:9b:ca:5d:62:c8:6d:f4:b3:76:c4:7a:
37:30:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:33:17 2025 by rpki-client