Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OIe3rHimtCFZvNUYYFXgYr-bzMk.roa
File: OIe3rHimtCFZvNUYYFXgYr-bzMk.roa (raw, json)
Hash identifier: Lt5yq9m+88kdQrxNcgg9BgDVgnCfRTZrMOEKxrYl65o=
Subject key identifier: 38:87:B7:AC:78:A6:B4:21:59:BC:D5:18:60:55:E0:62:BF:9B:CC:C9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C29
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OIe3rHimtCFZvNUYYFXgYr-bzMk.roa
Signing time: Fri 13 Jun 2025 15:09:52 +0000
ROA not before: Fri 13 Jun 2025 15:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7209 (0x1c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 15:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3887B7AC78A6B42159BCD5186055E062BF9BCCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:8c:f1:4d:0d:84:f7:57:73:7a:85:21:bb:
84:ee:c8:7c:73:70:16:29:45:19:df:70:0d:48:e5:
d3:e5:45:51:94:eb:68:ea:29:33:28:c2:2a:b5:d3:
44:d8:10:94:b5:22:0d:54:f7:cc:ac:98:11:4f:3f:
af:4a:b9:b1:65:04:5f:e3:10:6c:78:21:e1:1a:5a:
1e:b3:fd:94:2d:e9:8a:1e:5a:7b:42:d6:e2:a8:da:
31:15:6d:c5:03:ad:0a:16:f0:cd:31:df:11:60:46:
98:7d:81:9d:3e:fd:e3:f4:45:0f:9e:a8:63:c9:d9:
61:e6:76:f3:2c:3b:0a:78:a4:4f:57:9a:65:a2:12:
07:a4:ab:aa:16:fa:de:94:da:c9:ab:3b:73:ea:10:
5c:3d:3c:0e:d5:2c:06:19:d8:c5:35:86:b8:86:f8:
21:69:cd:69:f7:86:81:5d:0e:a9:40:ed:28:fc:14:
bc:5f:1a:05:1b:09:bd:33:b7:ad:c5:f1:94:1b:46:
fe:ca:ef:58:90:71:17:e1:bb:0a:97:1b:1d:71:43:
54:7c:15:38:f9:ea:3d:b5:56:3f:54:2e:06:5a:cd:
b9:93:a7:d2:a6:f6:cd:00:2c:30:f9:ae:84:88:e8:
2b:27:ef:e1:5b:44:cf:3a:d7:4b:c6:bf:e4:bf:95:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:B7:AC:78:A6:B4:21:59:BC:D5:18:60:55:E0:62:BF:9B:CC:C9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OIe3rHimtCFZvNUYYFXgYr-bzMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:67:17:13:8a:a2:c2:54:83:36:64:33:d9:1a:78:82:ef:fa:
cd:e2:9a:08:40:fb:50:52:c5:b4:c8:59:76:cd:0f:2f:6a:e0:
90:f0:09:4c:ab:e9:3f:fd:69:e7:0b:8b:59:77:50:11:bb:69:
93:16:0a:03:ff:26:50:02:19:73:88:68:ab:69:2a:d4:10:fb:
4c:cb:51:de:cb:1b:22:47:3b:84:2c:b1:ef:4a:51:a5:7e:22:
3c:c4:af:54:a0:b9:9f:e6:63:a9:07:1c:e9:f1:6e:cf:9d:b1:
80:88:f6:6e:4e:99:0b:b1:36:f4:2b:c7:77:f8:c3:86:de:0c:
30:71:96:ab:50:04:eb:5b:96:50:92:a5:f1:6e:03:37:97:7f:
ae:02:ad:4b:7b:d0:47:89:72:5c:b9:0d:d7:4e:2d:ed:f4:00:
5e:ec:96:1b:c7:d5:e7:95:03:8c:dd:44:e3:d7:1a:5c:76:70:
e4:2f:25:1a:f3:21:94:9b:f0:ec:8c:a2:aa:cb:dd:b1:63:ce:
e9:db:32:5d:50:a0:69:38:e4:63:4c:81:be:17:27:94:bf:9e:
38:fa:5d:73:8c:e4:c6:b0:99:ea:96:39:fa:82:6a:86:cb:4f:
d8:fa:9b:64:17:c4:84:26:15:1d:d1:f0:4c:fa:ed:d9:e6:85:
24:c7:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:32 2025 by rpki-client