Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JNQ1SGbkd1lQc80FQkmxOIc3SW0.roa
File: JNQ1SGbkd1lQc80FQkmxOIc3SW0.roa (raw, json)
Hash identifier: stkKi/mhKNZ9xxoUaze5F/dTM04aJl12Y9kUw55xu/w=
Subject key identifier: 24:D4:35:48:66:E4:77:59:50:73:CD:05:42:49:B1:38:87:37:49:6D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C65
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JNQ1SGbkd1lQc80FQkmxOIc3SW0.roa
Signing time: Fri 23 May 2025 14:38:27 +0000
ROA not before: Fri 23 May 2025 14:38:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 14:38:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=24D4354866E477595073CD054249B1388737496D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:fe:af:c9:ac:2c:47:e6:91:38:7c:21:eb:
e8:73:e1:e0:e9:49:24:04:24:80:34:4f:1f:61:f8:
93:84:ca:c9:7c:ea:16:10:83:f3:63:34:2f:1b:08:
e9:3e:a8:76:80:56:f4:f3:a5:ec:88:9a:09:f1:46:
66:6e:c7:f2:af:fc:c6:62:a2:35:b3:0e:2b:14:99:
dd:ea:ec:67:56:48:94:3a:be:26:2f:71:c1:12:21:
74:5c:80:46:88:9a:48:ab:f6:f2:2a:74:ed:f2:4c:
cd:7e:a0:dd:62:41:55:c8:8c:91:d0:89:19:bb:83:
c8:b2:cc:9a:42:c9:c3:d9:38:c3:4e:2e:9b:7d:45:
16:34:76:ef:9c:e4:02:31:5a:10:2c:ea:36:de:3d:
c1:93:77:51:0e:02:f1:84:34:69:1f:14:5d:c6:3a:
f9:5a:ad:72:df:e6:ea:ba:86:59:f0:0e:9f:2a:cf:
55:53:b0:82:0d:e6:1a:1d:6b:bd:e1:4a:32:fe:6c:
d1:55:d3:47:f8:72:13:3c:f0:10:91:b0:7b:f2:9b:
18:71:94:7b:fa:19:86:63:cb:c2:ce:b2:1d:7a:67:
73:10:13:45:6c:c5:9a:0d:3c:95:01:90:ce:1a:f7:
65:fb:de:3c:03:a1:54:19:be:f0:c1:4f:f1:48:e2:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D4:35:48:66:E4:77:59:50:73:CD:05:42:49:B1:38:87:37:49:6D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JNQ1SGbkd1lQc80FQkmxOIc3SW0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:fb:a2:3e:46:3b:6b:27:04:39:6c:1d:bb:12:51:21:84:c5:
f4:d4:81:f9:35:df:c6:49:c8:08:cc:43:50:bb:db:8a:6f:73:
0d:4c:75:96:60:0b:c8:19:67:8c:ef:9a:b6:eb:41:14:1f:32:
64:07:5a:69:b7:b8:e3:6e:b8:b5:9c:a1:2b:7d:1c:fd:3d:82:
2e:4d:f5:73:1d:0b:11:d9:ec:36:87:10:b8:eb:3c:35:b7:e0:
5f:7b:35:2c:d1:f6:50:7b:f8:b9:72:5a:2f:25:bc:bf:44:ec:
1f:ed:b3:63:10:61:70:c5:c8:f4:87:6f:04:77:df:9d:4a:a5:
bb:59:df:58:5e:6c:8c:18:46:f3:9a:b3:ec:69:8c:7f:02:80:
2d:8d:8c:0e:ed:6d:e7:b6:31:3c:e9:ed:44:89:d0:22:a2:fa:
fa:eb:76:f0:e4:82:e3:a0:f1:56:5d:e7:50:bd:7d:1a:89:9a:
b5:c3:df:11:b5:f6:2f:4b:93:b1:0d:7f:b5:41:3e:80:90:d1:
86:0e:99:74:b2:50:78:5f:53:6a:61:07:23:5b:74:44:20:81:
ca:16:0c:7d:d0:49:05:ed:b1:2d:b3:b4:35:63:fd:b0:28:dc:
30:3f:09:3a:68:4e:6a:84:80:7c:83:b1:89:92:c9:e8:1a:df:
2c:b3:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:23 2025 by rpki-client