Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KbYChNBKLPiiXw6GDWrJrMcEC_o.roa
File: KbYChNBKLPiiXw6GDWrJrMcEC_o.roa (raw, json)
Hash identifier: OwDbfHcAsGowe6QLYaBTC3Ws9AJRNS1FNjahfafXfIQ=
Subject key identifier: 29:B6:02:84:D0:4A:2C:F8:A2:5F:0E:86:0D:6A:C9:AC:C7:04:0B:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17F5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KbYChNBKLPiiXw6GDWrJrMcEC_o.roa
Signing time: Sun 08 Jun 2025 00:39:32 +0000
ROA not before: Sun 08 Jun 2025 00:39:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6133 (0x17f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 00:39:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=29B60284D04A2CF8A25F0E860D6AC9ACC7040BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:ec:e0:2c:94:5e:70:49:c8:c6:e4:9f:46:
fc:9b:58:1c:37:87:8a:4f:ac:b5:cc:85:ec:33:3c:
23:fe:62:bb:f0:49:62:60:28:b1:a2:bd:a1:a2:be:
46:7a:db:9b:cc:22:79:9d:be:67:a5:f9:1c:bd:e9:
d3:49:d3:23:2d:d2:ab:0f:85:a8:7c:0e:7a:3a:96:
85:d9:ff:49:13:ef:81:10:d1:5a:4e:92:5d:3e:91:
1d:82:2f:40:a0:cd:d8:07:d9:1b:50:f3:1d:7e:34:
4d:1b:28:d1:5b:04:e7:b8:71:2c:32:40:a6:a0:cd:
bc:cc:20:0c:b6:95:23:d5:99:b8:d8:a8:51:b6:2b:
28:38:7a:7f:31:c6:dd:91:e5:a6:2c:64:a2:9f:a6:
55:df:1a:46:49:37:8e:f0:c5:0d:e5:9e:72:3b:cf:
ed:f7:da:e6:1c:24:7c:80:3f:06:3d:d6:22:8b:77:
13:c1:1e:b8:3a:e4:84:83:1a:b9:fa:b5:12:66:51:
04:87:1e:71:f1:da:e8:47:7e:56:2d:cc:54:88:58:
5a:cc:fa:74:25:53:3b:00:01:d6:b2:df:dc:34:7f:
74:f2:a9:09:35:34:54:53:41:5f:f2:72:12:28:8f:
b7:c3:42:73:6f:4f:c4:5e:39:bd:39:ed:54:52:51:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:02:84:D0:4A:2C:F8:A2:5F:0E:86:0D:6A:C9:AC:C7:04:0B:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KbYChNBKLPiiXw6GDWrJrMcEC_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:10:e7:c4:14:43:63:69:e9:86:7f:aa:17:3d:93:28:db:83:
93:93:dd:3b:27:41:98:d3:99:12:35:ad:32:a5:39:aa:e3:0a:
18:8b:8f:13:27:5c:5d:85:8d:13:f8:ed:78:6e:df:5f:07:04:
8e:ce:57:90:0e:4d:83:a9:d1:07:13:22:32:6f:a9:fb:ac:eb:
bf:20:8a:45:b6:37:1f:33:7a:99:88:4e:b3:62:9e:2b:55:c5:
88:2a:af:6f:f5:aa:38:aa:ff:75:ae:e0:16:9c:8d:46:8e:98:
59:c2:2c:82:d2:ad:1b:8f:51:ca:a9:6e:12:9a:f8:03:e5:c1:
73:28:d3:09:6f:9a:e1:17:73:e0:a9:a3:a7:7b:70:05:b9:e0:
92:60:ab:3c:50:44:22:09:47:e4:0c:89:b4:97:2b:c3:a5:96:
a0:67:5f:4e:a3:ae:d2:98:c8:cb:2b:4e:d5:4e:da:ad:5c:9e:
90:c1:b2:61:77:ed:ca:99:9b:30:c9:71:18:fe:06:d7:5b:26:
58:98:df:59:c5:24:d0:62:2c:f5:60:28:99:78:21:f8:95:94:
fe:d5:5c:d5:f0:ef:34:9f:5b:22:1d:d5:2f:3b:ae:9c:01:6c:
c6:a9:9d:5a:47:0f:bf:ff:23:f7:64:c0:38:43:ee:dd:cc:67:
c5:a3:4d:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgw
MDM5MzJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDI5QjYwMjg0RDA0QTJD
RjhBMjVGMEU4NjBENkFDOUFDQzcwNDBCRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGu+zgLJRecEnIxuSfRvybWBw3h4pPrLXMhewzPCP+YrvwSWJg
KLGivaGivkZ625vMInmdvmel+Ry96dNJ0yMt0qsPhah8Dno6loXZ/0kT74EQ0VpO
kl0+kR2CL0CgzdgH2RtQ8x1+NE0bKNFbBOe4cSwyQKagzbzMIAy2lSPVmbjYqFG2
Kyg4en8xxt2R5aYsZKKfplXfGkZJN47wxQ3lnnI7z+332uYcJHyAPwY91iKLdxPB
Hrg65ISDGrn6tRJmUQSHHnHx2uhHflYtzFSIWFrM+nQlUzsAAday39w0f3TyqQk1
NFRTQV/ychIoj7fDQnNvT8ReOb057VRSUecjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKbYChNBKLPiiXw6GDWrJrMcEC/owHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9LYllDaE5CS0xQaWlYdzZH
RFdySnJNY0VDX28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABsQ58QUQ2Np6YZ/qhc9kyjbg5OT3TsnQZjT
mRI1rTKlOarjChiLjxMnXF2FjRP47Xhu318HBI7OV5AOTYOp0QcTIjJvqfus678g
ikW2Nx8zepmITrNinitVxYgqr2/1qjiq/3Wu4BacjUaOmFnCLILSrRuPUcqpbhKa
+APlwXMo0wlvmuEXc+Cpo6d7cAW54JJgqzxQRCIJR+QMibSXK8OllqBnX06jrtKY
yMsrTtVO2q1cnpDBsmF37cqZmzDJcRj+BtdbJliY31nFJNBiLPVgKJl4IfiVlP7V
XNXw7zSfWyId1S87rpwBbMapnVpHD7//I/dkwDhD7t3MZ8WjTQw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:45 2025 by rpki-client