Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RWvAFWRSbBDQiREEgB3eyNpKg0s.roa
File: RWvAFWRSbBDQiREEgB3eyNpKg0s.roa (raw, json)
Hash identifier: KET0pTwMr3FAlxcuogYhzKvarORIGpLQjKPoSjrousI=
Subject key identifier: 45:6B:C0:15:64:52:6C:10:D0:89:11:04:80:1D:DE:C8:DA:4A:83:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1541
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RWvAFWRSbBDQiREEgB3eyNpKg0s.roa
Signing time: Wed 04 Jun 2025 10:09:34 +0000
ROA not before: Wed 04 Jun 2025 10:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5441 (0x1541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 10:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=456BC01564526C10D0891104801DDEC8DA4A834B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:ed:10:8f:0e:19:6e:80:a5:19:1f:74:49:
a2:b7:8f:d3:88:d8:45:b0:ed:a8:b0:4a:d6:61:ad:
c5:e7:a7:b5:b0:b2:b3:71:f5:31:23:f3:81:b7:fb:
74:76:cc:3e:db:47:0f:e6:ae:0d:fa:50:d5:16:e2:
b6:86:5a:6b:e5:a5:e6:35:3c:ea:0d:d5:fc:2e:98:
cd:70:79:e5:ff:b0:78:c1:1f:d9:a8:2f:78:2c:36:
c7:70:17:6b:a5:7f:1d:86:12:9b:93:b8:d4:16:73:
61:b4:1a:16:1a:1f:7b:17:46:cc:0c:8e:ea:1c:be:
1e:3d:7d:39:44:4e:81:20:c4:86:27:dc:dd:71:4f:
34:dd:4f:35:dc:74:6e:64:c4:d0:03:08:cb:f1:f1:
35:04:21:c8:a3:f2:25:3c:9c:74:13:32:4f:ca:bc:
dc:ea:cd:c2:59:0c:94:fe:a5:e3:43:7d:ae:cb:35:
1e:09:11:36:88:56:d9:18:25:bf:46:ba:d5:97:9c:
19:1e:96:11:8b:ec:25:69:16:d5:95:35:4e:49:2a:
e6:a9:31:2b:f7:46:d0:3e:0d:a3:3d:e6:08:b6:47:
6d:9a:4e:a2:a1:ee:a2:48:19:75:9f:bc:48:10:fe:
2c:96:28:66:ca:a8:a6:07:c6:db:77:0e:78:dc:c5:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:C0:15:64:52:6C:10:D0:89:11:04:80:1D:DE:C8:DA:4A:83:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RWvAFWRSbBDQiREEgB3eyNpKg0s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:e5:ba:1f:b7:e6:0d:fc:92:27:12:02:c2:bd:23:7d:65:b1:
cd:6e:f1:a8:d7:71:c5:7f:7e:e3:e9:3b:8b:f0:28:1f:73:97:
fc:b4:9d:6f:84:39:91:57:30:6a:82:e4:ec:5c:10:de:20:56:
de:a7:48:a2:41:33:a5:23:24:77:8e:88:b6:cb:db:b5:b7:8a:
2e:46:5d:87:1a:78:d6:c9:b5:4d:29:32:1f:8c:8e:eb:d7:3f:
e2:35:ff:5a:3e:a4:5d:b8:34:cf:db:51:94:4c:5d:e1:1e:a3:
64:a9:1c:c2:a4:dd:20:db:bf:07:1b:eb:9a:bf:b8:92:54:2d:
35:6f:b7:66:c8:e8:45:76:9a:b4:1d:da:2c:22:96:69:88:3a:
3d:cb:55:bd:02:7c:be:52:25:da:e3:1b:dc:d9:6c:9b:87:da:
7a:b7:06:26:5b:d6:88:7b:60:a6:fb:a8:c2:d6:b1:ee:74:91:
1c:75:5c:54:96:8a:8f:c1:eb:94:3f:8a:ec:31:00:10:95:0e:
c2:fe:da:ff:4e:d5:b8:a5:7c:2e:d1:56:74:6e:c2:ce:d0:eb:
57:a1:48:f1:ab:7a:28:9f:7b:13:88:fd:72:be:b6:ca:67:a5:
6c:07:36:bf:77:26:5c:2a:41:90:b5:c1:7d:24:d8:97:64:1c:
23:e0:da:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:04 2025 by rpki-client