Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I3o7pu1S2kKGtPH9Uc-l6P2ovIs.roa
File: I3o7pu1S2kKGtPH9Uc-l6P2ovIs.roa (raw, json)
Hash identifier: 4jtadE33Gk9qQ/AYjuF7LI5rvnfYp019InXoqVVcNAM=
Subject key identifier: 23:7A:3B:A6:ED:52:DA:42:86:B4:F1:FD:51:CF:A5:E8:FD:A8:BC:8B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B99
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I3o7pu1S2kKGtPH9Uc-l6P2ovIs.roa
Signing time: Thu 12 Jun 2025 21:10:04 +0000
ROA not before: Thu 12 Jun 2025 21:10:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7065 (0x1b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 21:10:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=237A3BA6ED52DA4286B4F1FD51CFA5E8FDA8BC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:92:7d:c6:f8:51:43:f7:48:a0:46:15:f7:b7:
aa:00:7d:1d:1e:28:1f:fb:3e:e0:da:a0:76:54:16:
42:9b:5c:43:e8:bd:24:f5:e7:e3:8c:d4:04:71:91:
f5:23:aa:1c:ec:18:3a:a6:dd:6a:e2:83:59:6c:ab:
06:fd:05:de:f5:99:b5:31:1d:36:37:9d:03:3c:53:
c7:49:c5:d5:08:75:d4:3e:bd:55:43:67:6f:63:19:
a2:1b:c7:81:4c:b1:d9:86:db:67:a2:e1:18:96:51:
c9:37:05:e7:fb:95:fd:a8:5e:84:fe:9f:e7:06:fa:
d5:ef:c1:bf:52:3a:80:6d:54:8a:c6:3f:e8:58:54:
80:6d:fc:0a:0b:e6:c2:53:39:bd:6b:c6:af:ab:6a:
f0:76:c9:be:25:02:18:6d:5e:10:63:09:54:3a:4d:
ab:87:65:0c:37:6c:21:42:74:42:ea:33:23:0d:bf:
1c:ba:d7:75:47:7d:34:12:68:7c:77:64:dc:ca:cb:
c1:31:bf:4e:38:72:e4:6d:62:9b:8f:b3:ba:5f:30:
a1:91:6b:fe:7a:cd:dd:d4:c0:f0:47:c8:55:00:01:
59:fb:c3:a9:e0:0d:ae:da:fa:41:c8:1e:5e:31:2a:
cf:ef:41:05:2d:1d:a8:9f:22:27:85:6a:ef:13:7b:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:3B:A6:ED:52:DA:42:86:B4:F1:FD:51:CF:A5:E8:FD:A8:BC:8B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I3o7pu1S2kKGtPH9Uc-l6P2ovIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:81:ec:b1:49:27:cc:4d:ec:76:33:66:31:a5:0e:c8:2f:db:
10:21:e3:db:81:02:09:0f:de:88:49:11:66:7f:1f:96:0b:6f:
05:77:c8:2a:4f:75:a4:09:34:d4:56:f8:a8:44:3e:41:c5:bc:
4c:3d:c9:88:5a:43:57:52:eb:2f:08:4a:c3:27:4e:b4:86:52:
51:e2:bb:7b:e5:32:24:3f:57:8d:eb:b1:7c:db:28:cf:f5:54:
bd:ef:f1:ef:5e:be:57:13:1c:f7:0f:2f:30:dc:8c:20:1d:28:
9f:68:4b:9d:80:dc:39:6c:3d:43:ec:8a:1c:bb:3f:c9:56:f1:
fb:c8:58:ed:2d:33:5b:6b:fc:52:85:62:90:aa:6d:78:25:8b:
2d:2b:2f:78:9d:ed:e2:03:31:82:e6:4a:fc:ca:3d:7c:dd:d5:
3a:c4:fd:1c:f7:96:11:cb:1d:25:ba:16:19:8f:c9:0e:4c:78:
a3:71:cf:22:5e:3b:8c:44:1e:6a:9f:04:79:19:23:7a:fb:2f:
ee:ee:84:b6:ad:e9:90:2a:3d:76:b7:d7:24:32:b2:a9:4a:6e:
cc:58:68:55:79:61:75:51:34:02:50:ad:d3:ab:9a:dd:4d:92:
d0:62:55:4a:85:86:de:1e:15:22:51:a9:96:56:4e:b9:78:25:
0b:97:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:06:18 2025 by rpki-client