Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F0oGFIMtbXIt1SWCXEpGVAP3iLA.roa
File: F0oGFIMtbXIt1SWCXEpGVAP3iLA.roa (raw, json)
Hash identifier: HfClFnoPL/LJ5d0v6zfK/eS6GNzzSOMzj0TJlnEelIM=
Subject key identifier: 17:4A:06:14:83:2D:6D:72:2D:D5:25:82:5C:4A:46:54:03:F7:88:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1299
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F0oGFIMtbXIt1SWCXEpGVAP3iLA.roa
Signing time: Sat 31 May 2025 21:09:11 +0000
ROA not before: Sat 31 May 2025 21:09:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4761 (0x1299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 21:09:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=174A0614832D6D722DD525825C4A465403F788B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:06:20:16:27:a2:35:bd:e1:cf:a9:fd:58:63:
92:84:69:2c:98:97:13:09:df:82:57:96:f0:20:2c:
f5:9e:26:92:7d:e6:4a:cf:e9:c8:59:69:ca:ca:7b:
fb:67:ef:92:68:26:d4:04:69:41:e5:c1:94:e5:7d:
2a:06:8d:2a:d4:0f:39:65:59:29:a3:2e:37:70:88:
4a:6b:a3:9a:1d:c3:a2:3a:e2:fd:a6:2b:87:93:84:
cd:da:3a:dd:3c:b1:ba:54:4e:4f:95:55:64:46:c5:
20:24:e3:ef:86:a2:88:ad:70:ef:85:5b:84:10:b8:
6d:6b:e5:56:9d:a0:c0:f4:6c:74:fb:80:71:de:1a:
1b:e6:d3:a1:26:2f:46:83:0c:5b:76:9b:cd:38:1e:
ea:30:03:80:a8:a6:d1:54:60:2d:63:2e:56:86:d6:
e4:95:8f:02:b1:2a:c4:5c:c4:7a:4f:47:6f:f2:73:
2e:50:77:3a:60:4d:56:90:5e:d9:49:0b:bf:b4:cc:
76:43:49:20:b3:bf:99:ae:62:70:eb:98:fb:c8:bd:
1b:28:dd:66:0d:96:9f:b0:b3:18:8b:0e:87:15:de:
85:17:99:a8:c8:c5:99:f5:79:85:75:08:3b:d0:ef:
10:00:ac:46:48:fa:88:00:75:e7:24:fe:b4:3a:c5:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:06:14:83:2D:6D:72:2D:D5:25:82:5C:4A:46:54:03:F7:88:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F0oGFIMtbXIt1SWCXEpGVAP3iLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:5d:b9:7d:f6:f5:92:05:3d:54:e5:5b:35:76:2b:98:ef:b4:
f6:63:b3:13:59:ae:27:f1:3b:0c:0f:9b:cf:73:f8:63:b0:4a:
7a:00:12:5a:6a:bc:df:43:75:17:31:78:bd:0b:02:7b:3e:5c:
5c:b1:72:ee:0b:20:42:d8:c9:98:e0:31:ba:c3:e4:b3:4c:50:
57:bc:c1:b6:91:34:ef:eb:f4:bd:98:24:fa:bc:c9:34:e0:dc:
ae:9f:cc:ff:48:55:96:71:d1:24:3f:40:55:6b:70:34:3d:62:
40:9e:8d:ca:45:cb:0d:6b:4f:f9:ab:59:8e:24:22:bd:5c:3e:
80:2d:92:08:3c:df:cf:85:8e:9e:2d:21:97:89:13:61:74:8e:
d8:6e:5b:00:ab:0a:bb:11:24:df:31:2a:d6:d8:0b:01:5d:82:
13:b6:1e:71:35:fc:0a:7f:e4:5a:ee:80:70:c4:27:03:e3:80:
00:20:c3:4f:e5:24:af:19:35:d1:3f:1a:b7:e6:79:e7:be:9a:
72:4a:54:6e:dd:91:ef:c1:4d:0a:65:6e:96:aa:ed:cf:8a:31:
a2:08:a0:55:92:2f:64:bd:00:d4:b9:8d:e7:4d:47:1b:e5:bf:
b5:fd:7c:f5:d8:1d:ca:56:0c:60:b6:75:5e:67:bb:21:9f:cc:
b4:c1:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:21:02 2025 by rpki-client