Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OwwBiHsFqyUGE2kHQH1Oi2S08Xc.roa
File: OwwBiHsFqyUGE2kHQH1Oi2S08Xc.roa (raw, json)
Hash identifier: w1fOXwt2dFxNXaWK44JIVuBKijTdAoAhyCpwpX6eyhw=
Subject key identifier: 3B:0C:01:88:7B:05:AB:25:06:13:69:07:40:7D:4E:8B:64:B4:F1:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 197D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OwwBiHsFqyUGE2kHQH1Oi2S08Xc.roa
Signing time: Tue 10 Jun 2025 01:39:44 +0000
ROA not before: Tue 10 Jun 2025 01:39:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6525 (0x197d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 01:39:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3B0C01887B05AB2506136907407D4E8B64B4F177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:28:71:e0:61:f1:53:20:b7:56:70:cc:c0:
16:d2:1a:d1:4c:8e:7a:fc:90:a9:dd:9b:bd:0b:75:
9d:50:01:21:c2:1a:8f:8c:04:2b:40:d1:a7:50:24:
9a:92:84:2e:d6:94:bb:11:4d:87:44:a5:ff:e9:09:
f7:5b:5a:92:8b:11:f3:72:cc:74:18:c3:59:89:ad:
95:12:be:21:30:4e:fc:ba:9b:29:ce:b6:c4:9f:fc:
28:a7:3d:df:eb:a9:7b:ab:fa:68:7f:19:8e:35:6f:
63:27:9e:6f:ae:1f:09:7a:89:2f:fb:c6:7c:2a:3c:
8c:85:4d:2c:4c:26:58:c9:e8:0a:1a:b0:24:e9:1d:
e8:9f:a0:bc:51:30:90:62:f4:00:30:6d:47:f2:bc:
28:a5:a3:ec:7f:23:c5:3c:f6:70:4e:01:ba:ad:cb:
f0:2e:d3:41:04:75:79:c6:b8:5e:5f:03:94:96:2b:
67:57:73:85:2c:de:30:fe:aa:92:d4:c8:28:8e:23:
b8:f3:62:44:60:4d:b6:63:63:c7:cf:7e:0f:36:27:
8b:45:ce:21:dd:b9:cc:f2:d6:09:40:4a:23:a0:e5:
7e:d2:ca:39:cd:ce:25:5c:df:2f:1d:75:12:ab:e2:
6c:d3:a0:44:38:03:71:09:12:47:f3:dc:41:20:6c:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:01:88:7B:05:AB:25:06:13:69:07:40:7D:4E:8B:64:B4:F1:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OwwBiHsFqyUGE2kHQH1Oi2S08Xc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:d2:3f:6c:4b:72:eb:d0:71:9d:b3:bd:8e:2a:9d:98:b8:85:
c2:04:b4:cc:71:2f:b3:4b:38:00:cc:3c:3e:43:f6:bd:73:48:
0f:59:a4:42:61:30:46:c3:c3:2b:df:8a:32:98:d9:ab:35:dc:
c4:58:e4:c0:01:98:61:b1:fd:d0:57:e9:76:af:eb:45:2f:71:
e9:2f:e2:54:a8:17:94:cb:b1:48:af:5d:39:b4:80:80:0a:26:
ec:32:f7:54:b5:7f:43:16:18:99:4c:19:7b:55:75:34:87:f1:
a4:cf:0f:b5:7a:4c:72:dd:41:cd:c6:1b:16:62:4d:d9:d9:61:
fa:bd:7f:74:76:52:c7:b7:f8:4c:0d:4c:eb:2a:d1:01:e6:68:
58:53:0f:21:17:f7:ca:bd:c6:bf:f2:48:0e:69:93:73:cd:e1:
5d:e8:2e:fa:0b:50:af:fd:5e:9a:c3:b9:46:26:5a:28:16:89:
70:73:4a:1e:b4:15:dc:26:0b:47:43:89:60:47:b4:87:36:ac:
8b:a3:51:d5:f0:a7:d8:2d:1c:ff:eb:4a:66:b7:c8:f5:9b:8e:
ef:fa:f4:1c:81:ea:84:a5:60:bb:fb:21:a0:24:c1:e3:64:91:
55:8d:71:61:d3:8d:7c:cb:28:93:4d:a2:55:48:07:15:b7:29:
7c:02:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:07 2025 by rpki-client