Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ElxiFre7xOm0W94DogsHIGE5FU8.roa
File: ElxiFre7xOm0W94DogsHIGE5FU8.roa (raw, json)
Hash identifier: Y5+u/u6tfmM2Wb9o8W69RuJgcQ8lbN7Ml4Wm/Fhtebk=
Subject key identifier: 12:5C:62:16:B7:BB:C4:E9:B4:5B:DE:03:A2:0B:07:20:61:39:15:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A09
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ElxiFre7xOm0W94DogsHIGE5FU8.roa
Signing time: Tue 10 Jun 2025 19:09:46 +0000
ROA not before: Tue 10 Jun 2025 19:09:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6665 (0x1a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 19:09:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=125C6216B7BBC4E9B45BDE03A20B07206139154F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:2e:02:db:d1:98:d8:b5:f4:17:3f:80:8e:
00:06:6b:6d:5b:3c:25:2c:d2:6f:80:75:e7:16:03:
b7:41:69:0c:a2:21:f7:f5:41:da:39:ba:10:07:e6:
71:5f:96:79:67:c0:20:a1:b3:c2:72:4b:bd:79:78:
a4:fa:d6:ea:b8:46:43:03:83:1c:42:94:dc:97:00:
08:c4:76:65:2c:4f:5d:7d:eb:80:53:ce:29:8f:52:
23:2a:7e:50:c1:67:68:b0:d2:7b:f3:bb:09:f1:95:
78:49:8d:e4:70:4b:80:3a:c3:fd:7a:ea:53:4e:81:
c1:43:fe:74:bc:59:2b:fe:67:55:0a:e2:97:8c:d0:
20:6f:79:13:eb:96:62:cc:12:4b:01:05:98:24:38:
a9:fa:bc:dd:f3:8d:84:af:04:45:8f:8b:50:7f:c7:
eb:7d:22:1a:93:70:3c:80:43:7e:39:c7:f1:ab:06:
2b:9e:28:be:62:99:49:5e:cd:cd:57:ce:5c:f9:6f:
cf:e8:a8:46:ca:29:f5:1a:ce:96:9a:98:8b:c5:12:
6b:6f:c0:b5:98:ea:49:17:c1:4a:9c:6f:cd:1d:64:
81:a1:61:b4:5b:bf:c3:77:51:0d:5a:21:d9:6f:39:
a9:bf:93:8c:c2:32:3d:2e:e4:93:9b:8e:87:b5:5d:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:62:16:B7:BB:C4:E9:B4:5B:DE:03:A2:0B:07:20:61:39:15:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ElxiFre7xOm0W94DogsHIGE5FU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:85:69:7f:dc:b6:db:30:59:53:7a:dd:81:ba:44:b8:0a:64:
d1:71:a4:76:41:70:82:a4:40:98:dc:ee:d4:d1:2f:20:63:79:
51:0d:64:3b:db:60:f4:91:69:f5:7f:65:4f:c6:ed:dd:ed:83:
f1:a9:6b:bd:b4:6c:e9:be:5f:9e:8b:de:28:84:b1:8f:5e:71:
cd:ff:e4:20:e4:54:89:fa:0a:49:8f:e1:13:a8:55:26:d7:ee:
d3:f8:76:cf:0f:d3:66:bd:be:84:8e:eb:cf:66:b9:00:02:a4:
ed:43:63:99:0f:dd:d1:fe:5c:e2:26:78:39:8e:24:82:28:cd:
53:ef:83:85:d4:d8:29:e3:2b:73:73:d7:63:b2:0b:c6:fe:40:
46:d4:4a:03:9e:3f:af:a7:7e:4e:ae:cc:1b:e8:54:98:4c:e3:
48:9b:48:fd:91:43:9c:b6:94:79:af:a8:e2:c2:04:f0:dc:60:
8a:d6:99:70:5b:ec:da:9e:d3:d6:12:0b:74:ee:69:09:35:d8:
50:11:69:f7:19:29:a2:ea:a8:a8:71:fb:51:cd:f6:da:88:3d:
09:e6:ce:a3:3c:60:50:de:15:c5:7c:62:0c:a8:cb:61:ad:02:
2d:c2:ab:d8:af:69:11:87:c4:2c:0f:d2:fc:37:72:f2:7d:2d:
c3:8e:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:28 2025 by rpki-client