Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LXmG9uK7FXya1efD2SsNez0WVCk.roa
File: LXmG9uK7FXya1efD2SsNez0WVCk.roa (raw, json)
Hash identifier: fVwsxEw9E/rVHojZInCTh8kUaqrbSMk8Id4bjggtZf0=
Subject key identifier: 2D:79:86:F6:E2:BB:15:7C:9A:D5:E7:C3:D9:2B:0D:7B:3D:16:54:29
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19E1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LXmG9uK7FXya1efD2SsNez0WVCk.roa
Signing time: Tue 10 Jun 2025 14:09:51 +0000
ROA not before: Tue 10 Jun 2025 14:09:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6625 (0x19e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 14:09:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2D7986F6E2BB157C9AD5E7C3D92B0D7B3D165429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:2a:8c:0f:a1:50:29:55:7d:73:01:ec:e9:
bb:3e:ba:37:b6:b5:5f:20:87:aa:43:92:68:78:63:
f1:fc:74:5d:45:d0:76:a3:5f:17:96:5b:01:a3:1b:
8e:34:67:97:90:be:3e:02:1c:95:0e:15:f5:e5:bc:
14:92:3f:9d:79:ef:ab:91:96:9c:78:02:0d:07:9a:
9e:c9:a1:36:5a:06:3b:fe:50:66:e9:6c:76:95:ac:
77:46:56:fa:a0:94:03:0c:54:a4:34:22:02:7c:d2:
0f:e4:17:d0:2f:93:8a:51:e3:d6:29:2e:29:13:46:
18:83:11:44:bb:76:64:70:59:eb:2c:11:33:a4:e1:
27:2b:ba:ae:1d:0c:ac:47:a7:c9:7b:43:54:e6:d1:
f1:f2:bf:74:eb:c6:fd:3e:55:dc:a5:2f:82:d4:e4:
bb:67:19:00:12:99:d0:2a:74:bd:b0:be:0d:b4:ca:
c2:4b:07:45:7e:c7:d4:d7:13:68:69:39:10:65:40:
3c:14:60:8a:d3:02:e1:70:21:a4:ba:1c:42:58:66:
bc:df:2b:84:1f:e5:34:79:04:1f:b1:9a:42:31:75:
da:dd:3a:8a:34:4e:24:94:82:3f:e4:42:dc:21:57:
2c:53:4e:6b:a0:85:6a:36:fd:a9:e9:91:44:77:9f:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:86:F6:E2:BB:15:7C:9A:D5:E7:C3:D9:2B:0D:7B:3D:16:54:29
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LXmG9uK7FXya1efD2SsNez0WVCk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:60:02:74:62:b8:45:8b:09:75:ce:4a:e1:70:f2:ec:22:1a:
28:8e:f0:c0:b0:25:99:df:48:c1:79:ea:85:36:0d:68:1a:6f:
8b:9d:ea:11:19:be:ab:f9:87:16:b1:5c:c9:e9:2b:08:53:2a:
3a:b9:f9:45:06:b9:4f:7d:b7:ff:5f:4e:08:6d:1f:b3:6d:b9:
18:33:e8:ac:af:c9:8b:b8:e8:59:ff:82:22:ec:07:d9:1e:45:
d2:f4:97:ec:70:81:09:5a:ee:68:c0:23:d9:44:96:37:36:21:
7f:4a:b6:30:e8:36:ee:d4:93:cc:af:a1:af:4f:5d:77:3e:fe:
e1:34:ea:3f:18:da:d2:47:53:33:b4:1c:cf:c7:eb:b7:6e:32:
b7:4f:cb:cc:22:de:25:bd:03:bd:f6:b6:54:46:66:7f:a7:19:
46:47:4d:41:9f:b0:87:af:c1:19:33:3b:b0:f4:36:cb:91:35:
5d:44:6a:63:75:34:68:28:10:db:14:ff:1a:91:e5:95:8d:83:
fd:7d:82:62:70:4e:6e:34:66:ab:f3:65:a3:d0:45:af:d9:12:
72:f1:f4:d6:bb:03:e9:0b:9e:34:55:55:85:fc:5e:e7:3d:d6:
a6:3e:9d:ff:82:e0:49:e5:ce:84:61:a4:53:37:7b:2d:80:f6:
08:98:25:92
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx
NDA5NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJENzk4NkY2RTJCQjE1
N0M5QUQ1RTdDM0Q5MkIwRDdCM0QxNjU0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvYSqMD6FQKVV9cwHs6bs+uje2tV8gh6pDkmh4Y/H8dF1F0Haj
XxeWWwGjG440Z5eQvj4CHJUOFfXlvBSSP51576uRlpx4Ag0Hmp7JoTZaBjv+UGbp
bHaVrHdGVvqglAMMVKQ0IgJ80g/kF9Avk4pR49YpLikTRhiDEUS7dmRwWessETOk
4Scruq4dDKxHp8l7Q1Tm0fHyv3Trxv0+VdylL4LU5LtnGQASmdAqdL2wvg20ysJL
B0V+x9TXE2hpORBlQDwUYIrTAuFwIaS6HEJYZrzfK4Qf5TR5BB+xmkIxddrdOoo0
TiSUgj/kQtwhVyxTTmughWo2/anpkUR3nwVvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULXmG9uK7FXya1efD2SsNez0WVCkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9MWG1HOXVLN0ZYeWExZWZE
MlNzTmV6MFdWQ2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAI9gAnRiuEWLCXXOSuFw8uwiGiiO8MCwJZnf
SMF56oU2DWgab4ud6hEZvqv5hxaxXMnpKwhTKjq5+UUGuU99t/9fTghtH7NtuRgz
6KyvyYu46Fn/giLsB9keRdL0l+xwgQla7mjAI9lEljc2IX9KtjDoNu7Uk8yvoa9P
XXc+/uE06j8Y2tJHUzO0HM/H67duMrdPy8wi3iW9A732tlRGZn+nGUZHTUGfsIev
wRkzO7D0NsuRNV1EamN1NGgoENsU/xqR5ZWNg/19gmJwTm40ZqvzZaPQRa/ZEnLx
9Na7A+kLnjRVVYX8Xuc91qY+nf+C4EnlzoRhpFM3ey2A9giYJZI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:11 2025 by rpki-client