Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QbQ_6cDXWlmISmV9514TdyqbWeM.roa
File: QbQ_6cDXWlmISmV9514TdyqbWeM.roa (raw, json)
Hash identifier: LZElJOCAQCqFhAOixvDOP/bxa8gJ98UOoWAwC0RJ2Eo=
Subject key identifier: 41:B4:3F:E9:C0:D7:5A:59:88:4A:65:7D:E7:5E:13:77:2A:9B:59:E3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BE1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QbQ_6cDXWlmISmV9514TdyqbWeM.roa
Signing time: Fri 13 Jun 2025 06:09:52 +0000
ROA not before: Fri 13 Jun 2025 06:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7137 (0x1be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 06:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=41B43FE9C0D75A59884A657DE75E13772A9B59E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:94:21:50:24:39:e3:3d:7b:80:cd:97:d2:
7c:34:3f:ca:31:6c:70:f1:37:54:78:69:00:c9:52:
f1:a9:71:70:7e:29:b0:d6:d7:b7:e7:48:d1:df:a6:
0f:4a:71:6a:a3:37:e4:6b:07:78:e3:f2:34:1b:91:
92:9f:32:dc:da:ac:76:37:f5:f6:20:26:12:62:06:
d2:41:05:0f:81:4a:99:8a:b8:e7:09:d5:56:6a:e0:
e9:38:f0:08:8b:c3:db:e8:4f:e7:a1:8f:7f:6a:06:
b2:8d:b3:d8:ba:1d:85:6e:c6:9a:7e:ef:cd:be:17:
9e:d9:b3:41:73:62:39:1e:0a:eb:ec:d3:1d:72:8f:
6d:df:c6:ac:20:db:69:fd:94:e4:b9:03:91:33:38:
4d:2b:c6:76:a8:57:9d:3c:63:cd:7c:b3:0d:57:19:
03:6f:10:c8:f3:20:c0:11:12:c5:4a:a6:9c:57:a7:
40:ec:d4:95:15:b1:31:f3:79:33:93:d1:d7:ea:14:
b9:92:ec:84:cf:41:af:84:98:82:f5:b2:d2:66:74:
7d:81:03:2c:18:56:5d:d8:e2:1e:c4:76:e1:bb:58:
5a:f5:43:31:e4:7a:99:f9:a3:72:fd:b8:2c:20:2f:
2f:6f:4e:fd:28:28:e3:41:78:cf:c1:06:a5:a6:7b:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:3F:E9:C0:D7:5A:59:88:4A:65:7D:E7:5E:13:77:2A:9B:59:E3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QbQ_6cDXWlmISmV9514TdyqbWeM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:b3:e4:5e:d7:fe:41:f7:41:28:14:82:43:7a:79:78:ea:4a:
43:a2:77:46:8b:93:ed:90:cf:36:0e:c5:9a:a5:89:39:49:d5:
49:26:6f:4f:52:e4:9e:f2:b3:f7:23:5c:2e:8d:90:be:a7:06:
2e:b4:89:54:96:d8:f8:fc:bd:1e:29:8d:fc:09:b4:45:28:4f:
c6:75:c9:31:ee:1f:b1:9a:a4:58:80:2f:d6:22:b1:6d:e2:4f:
22:a5:10:ce:70:6f:4e:0e:f3:65:4c:f3:97:30:8c:3d:94:51:
79:59:ed:66:0c:e7:36:b8:cc:2d:c2:78:a2:3b:17:8b:e3:eb:
d4:aa:d4:6b:a8:f0:c8:b4:38:b3:1d:4f:aa:e3:75:50:d6:ff:
5b:76:10:6e:f8:6c:30:79:05:b0:d4:35:8a:70:5f:d0:ed:6d:
30:fa:5c:3a:39:95:e2:e3:06:7a:9b:c3:fe:4c:cb:cf:63:99:
36:03:0a:a0:6e:78:a1:67:68:9f:9d:8e:dc:5e:2f:0b:15:86:
16:ec:7c:1d:0a:d2:22:a6:78:cc:87:07:e3:e8:c6:92:2f:7d:
7f:8c:07:11:6f:56:06:5b:a7:75:ef:eb:91:99:79:32:44:ae:
a7:88:95:55:6e:d6:63:43:45:a1:b0:f2:5a:79:83:4d:96:b5:
0d:69:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:02:20 2025 by rpki-client