Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/R_rSJ6-sIa2ZsskjDA5tI7kNZSE.roa
File: R_rSJ6-sIa2ZsskjDA5tI7kNZSE.roa (raw, json)
Hash identifier: 5K6mG94InCR2+G0YI2aePfH+pTA2I4ZWs4W3VNCxWDQ=
Subject key identifier: 47:FA:D2:27:AF:AC:21:AD:99:B2:C9:23:0C:0E:6D:23:B9:0D:65:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13C1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R_rSJ6-sIa2ZsskjDA5tI7kNZSE.roa
Signing time: Mon 02 Jun 2025 10:09:53 +0000
ROA not before: Mon 02 Jun 2025 10:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5057 (0x13c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 10:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=47FAD227AFAC21AD99B2C9230C0E6D23B90D6521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:31:44:a8:1c:7f:57:62:dc:3d:54:3b:3b:
77:10:28:9b:eb:f7:39:7f:36:e3:01:02:4e:ea:d3:
81:81:23:9f:4d:0d:7d:b0:76:70:86:30:6d:da:d8:
c6:14:c3:ea:a8:64:af:1b:ee:6c:94:b0:52:9f:e6:
c8:08:5c:41:ad:a2:b5:7e:77:5e:c8:6e:ea:7d:a1:
e7:46:70:3a:2f:68:d9:1d:dd:08:07:a4:78:7e:20:
15:4a:bf:bf:c8:fd:22:77:45:13:d7:e8:85:ed:97:
24:e6:3f:1c:66:00:87:40:32:d7:2b:9e:9d:18:fe:
7e:75:6e:ce:ae:fc:22:c7:e2:75:bc:84:0b:87:91:
88:5c:4a:60:27:ff:95:85:e3:a8:6d:34:e2:75:4c:
13:a2:0c:1a:d6:6c:35:98:17:96:51:9a:62:e9:45:
28:1a:3f:c3:9c:ac:a5:58:7a:76:98:16:d8:0f:c3:
42:39:ce:a3:f0:19:e4:e9:be:fe:f6:59:38:f1:2c:
d8:7f:ae:85:8f:8d:8d:d2:a4:98:27:31:fa:26:33:
6e:3f:4d:bb:65:b4:40:32:10:0c:6a:da:ff:b8:f3:
92:4b:02:76:6f:d6:c8:48:9d:81:ca:52:8c:84:8e:
9c:d4:78:72:d2:70:e3:8d:a5:ab:d8:79:bb:bd:07:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:D2:27:AF:AC:21:AD:99:B2:C9:23:0C:0E:6D:23:B9:0D:65:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/R_rSJ6-sIa2ZsskjDA5tI7kNZSE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:7b:b7:a2:1c:4d:6b:58:b2:dd:75:cd:6b:8c:0c:47:93:eb:
43:73:6d:31:55:69:b8:04:b3:a8:55:c9:9f:2e:ab:a3:06:74:
8a:4c:23:b2:cb:cb:29:96:00:3e:ca:4d:19:2a:9d:57:0c:f9:
c0:73:22:7a:61:4a:5d:55:d2:17:68:26:41:67:ef:5c:94:9b:
8c:d0:8c:2b:3c:02:dd:b9:35:da:5f:4e:b6:d1:e4:6d:cd:d9:
d4:6d:11:7f:6c:18:ed:f1:f8:e0:2e:26:17:48:79:43:24:b4:
6d:c8:bd:9d:d9:69:fd:c9:80:3f:a5:e1:ef:e9:4e:ad:60:0f:
eb:5e:2b:c9:2f:df:c0:94:99:bb:5a:02:e2:c1:8d:1a:62:9f:
88:3b:83:84:eb:a2:fe:eb:70:96:b3:bb:6d:69:bb:74:0b:94:
6c:89:69:2b:d2:e9:2e:25:6f:6e:e2:27:70:c5:61:c9:60:83:
a5:92:a6:dd:a9:f0:62:6f:cc:ac:d2:10:47:98:60:da:18:4a:
74:65:69:2f:1c:bf:0b:95:e2:4b:1d:1b:20:95:56:f1:4c:2b:
af:be:8c:1b:f5:4d:27:a6:0d:62:96:ef:d2:82:86:7b:0f:a1:
26:93:df:11:0d:3a:80:e3:84:6f:df:03:4c:c4:31:1e:43:48:
11:6b:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:54 2025 by rpki-client