Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NbeS3HgDOMfXmDzlGlBVTvd48So.roa
File: NbeS3HgDOMfXmDzlGlBVTvd48So.roa (raw, json)
Hash identifier: wydBIrP1+LOtxTNBAiU0vfcag+Q715YmR3IJ5v0gIZs=
Subject key identifier: 35:B7:92:DC:78:03:38:C7:D7:98:3C:E5:1A:50:55:4E:F7:78:F1:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B49
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NbeS3HgDOMfXmDzlGlBVTvd48So.roa
Signing time: Thu 22 May 2025 03:08:20 +0000
ROA not before: Thu 22 May 2025 03:08:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 03:08:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=35B792DC780338C7D7983CE51A50554EF778F12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:fb:51:54:08:b1:d9:50:18:37:4d:d2:23:
91:5e:67:21:27:e5:a4:c7:07:7a:85:de:25:d1:a9:
a9:0c:05:0f:ed:51:ec:4f:f1:28:16:10:ba:38:0f:
b8:86:b9:ea:e0:62:bd:4d:47:a5:bf:15:84:dc:6d:
d1:10:20:53:b0:cd:4c:e5:a3:c1:3d:6a:2d:8f:13:
0c:1d:32:59:0a:b6:20:58:1e:af:06:d2:74:fa:47:
26:9f:30:8d:36:2c:30:9d:76:f4:76:d3:20:27:0d:
ab:4e:0c:f9:af:be:e8:41:74:81:79:e9:ab:f3:66:
36:73:42:28:e6:e2:b8:c7:e1:d5:17:7b:8a:ee:74:
72:b0:08:e1:ff:12:b6:e7:67:7c:c5:76:2e:8c:4b:
75:a6:cc:85:34:de:dd:d3:65:c1:87:d0:ba:2d:83:
8f:27:9f:26:69:fe:df:c7:a1:fc:48:59:b7:38:ce:
2c:c0:61:71:7f:84:7f:95:67:af:2c:de:28:2c:27:
ad:dc:d0:e5:aa:33:13:fa:62:f5:7c:ad:b2:15:da:
02:bc:d8:78:87:c4:72:74:e2:26:2e:23:32:ba:fb:
23:68:45:95:50:43:ba:5a:dc:42:c9:0d:b2:35:45:
4d:b0:7c:c7:3f:e5:4c:b0:e8:f7:eb:b8:30:52:e6:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:92:DC:78:03:38:C7:D7:98:3C:E5:1A:50:55:4E:F7:78:F1:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NbeS3HgDOMfXmDzlGlBVTvd48So.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:63:7e:b1:3e:e4:35:12:d5:d0:20:f2:17:2d:f6:81:8f:27:
19:78:e1:93:1d:a8:5f:a5:89:8c:3c:be:f9:aa:29:04:99:bd:
76:40:11:48:31:fe:03:a7:5d:40:67:0c:70:2a:ef:23:0f:61:
6a:e9:e8:e7:22:b3:03:0d:ca:ed:6f:db:af:5b:88:75:fa:21:
9d:7e:a6:56:59:99:b4:54:3a:9a:e8:8c:fb:42:07:1b:ce:a3:
c3:55:a0:7b:56:07:68:54:b2:9e:46:bc:48:e2:b3:7a:1b:d6:
31:9c:fb:bb:bb:8a:7c:fc:24:ad:14:a7:41:c0:a7:50:c0:c8:
bd:a8:1e:26:d0:27:5f:cf:24:d2:80:65:e4:d2:da:fe:20:96:
db:ba:bf:5a:3f:5d:07:53:23:2f:d6:cf:44:98:9f:23:99:20:
c0:8e:26:5f:b9:30:53:e1:bf:09:cb:7a:ec:69:39:56:54:d5:
01:9b:30:ff:a1:c1:c8:7a:c0:f2:39:be:b1:81:1d:aa:dc:05:
bf:18:be:98:ee:7a:90:97:50:66:4f:34:56:d6:4b:05:27:86:
2f:15:40:3d:82:1f:72:66:cb:85:18:3e:59:69:70:9a:ff:dc:
84:6b:40:b6:82:a3:32:b4:c8:00:8c:32:51:9d:0b:69:7f:a7:
77:31:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:36:41 2025 by rpki-client