Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RFTFJUseDsIISOZjJML-zocUGlo.roa
File: RFTFJUseDsIISOZjJML-zocUGlo.roa (raw, json)
Hash identifier: PcSHUgjo4sIbP666H8XLtRyJ19oI/ezzwY1KPB8LNYk=
Subject key identifier: 44:54:C5:25:4B:1E:0E:C2:08:48:E6:63:24:C2:FE:CE:87:14:1A:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0765
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RFTFJUseDsIISOZjJML-zocUGlo.roa
Signing time: Fri 16 May 2025 22:38:07 +0000
ROA not before: Fri 16 May 2025 22:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1893 (0x765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 22:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4454C5254B1E0EC20848E66324C2FECE87141A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:bb:d7:14:56:e6:d7:16:cd:ad:31:ba:46:
ed:c4:f9:fc:1e:b4:71:01:d2:8f:5f:14:6c:28:b1:
b2:99:06:e8:4f:0c:40:64:ac:c3:d2:50:82:0f:8b:
52:4b:39:34:b1:e4:f4:a8:81:08:4b:2f:39:a0:31:
c0:1c:3c:7e:c9:ad:a3:f0:fe:a7:3d:64:b8:0e:ef:
9f:9b:22:be:36:12:24:c6:91:ad:0a:66:33:b5:78:
9c:17:4a:5d:58:49:bd:f8:d9:b9:70:e6:1a:e8:55:
e7:ee:b2:10:b4:5d:c0:d9:b6:ee:08:4b:b6:5a:ef:
ed:ac:3f:9d:19:9d:b1:0f:c6:27:99:f2:e6:f5:3a:
87:34:f9:e2:fd:1c:57:71:25:bb:4f:1f:3c:0f:2e:
37:18:ed:fe:f4:64:48:67:d0:0d:d1:5b:e6:8f:18:
4a:b8:3d:61:bb:6d:ff:3c:80:d4:1c:17:93:83:4b:
cb:dd:c2:41:37:0c:b1:04:86:39:47:67:a3:f3:e7:
98:79:8c:96:b8:24:5c:30:34:b7:f1:b2:50:88:49:
8c:b4:93:1f:5c:39:8b:5a:9b:f8:24:7f:6b:32:05:
62:eb:2a:d2:23:5b:09:31:70:57:f5:d5:68:17:78:
12:63:eb:2d:e3:66:0d:97:4e:0e:40:b6:00:fa:ae:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:C5:25:4B:1E:0E:C2:08:48:E6:63:24:C2:FE:CE:87:14:1A:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RFTFJUseDsIISOZjJML-zocUGlo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:73:40:aa:b6:5f:4a:38:63:9e:27:72:be:3f:67:3e:d1:49:
70:87:bf:b3:f8:e7:76:b8:ff:f2:71:6d:26:da:43:d6:9b:50:
a0:2e:b1:ed:8a:f3:f9:c4:85:53:ab:c9:da:fa:c3:3f:88:6b:
a6:c8:9c:13:5a:90:8d:e1:5d:40:30:4b:4c:05:a0:12:c8:26:
2d:23:7e:d9:ab:14:b7:89:92:a3:13:e6:d3:02:59:ba:23:8f:
8c:20:e1:d9:69:da:42:9a:64:54:49:58:b6:54:67:1a:5b:b3:
bb:54:67:4a:ea:43:52:b1:47:2f:98:e6:d5:13:b3:28:ab:38:
4c:d9:13:dd:64:59:31:8b:d7:a7:36:2b:15:8e:63:49:75:49:
7f:b1:42:6d:77:77:2a:09:e5:72:bb:ca:23:5b:e3:42:10:95:
bf:05:58:de:65:d9:e6:cc:25:2b:86:cd:f4:ec:a7:36:51:aa:
c7:71:ec:a1:8c:b7:1b:d4:1a:6f:da:8b:a3:f8:c8:4c:87:87:
cd:11:c0:fd:1b:7d:5a:39:b4:db:2a:88:1a:ba:ba:ad:04:52:
21:2c:48:3e:b2:c2:b7:48:cd:6c:0f:67:84:77:4e:26:77:a6:
26:94:31:2b:a3:cb:bb:94:59:73:82:c4:0b:1e:d5:95:1f:32:
c6:a9:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:22 2025 by rpki-client