Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/S3EKLcwC_qWb3n6RutUWP3w69zI.roa
File: S3EKLcwC_qWb3n6RutUWP3w69zI.roa (raw, json)
Hash identifier: k5fKyqH373cYLrhUTpYcSdCwJ73+uro5b5TRFckID7M=
Subject key identifier: 4B:71:0A:2D:CC:02:FE:A5:9B:DE:7E:91:BA:D5:16:3F:7C:3A:F7:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1379
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/S3EKLcwC_qWb3n6RutUWP3w69zI.roa
Signing time: Mon 02 Jun 2025 01:09:11 +0000
ROA not before: Mon 02 Jun 2025 01:09:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4985 (0x1379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 01:09:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4B710A2DCC02FEA59BDE7E91BAD5163F7C3AF732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ee:de:ca:36:c2:b3:2b:dc:ce:ea:c0:d9:cc:
c8:bb:be:c1:75:41:06:5a:6d:48:c1:b0:cb:d3:6d:
fb:c0:54:87:26:f7:81:88:4f:92:ed:59:19:62:b9:
58:99:2e:0a:54:06:66:9e:ee:5a:f1:6d:07:34:ad:
2b:ff:6f:cf:c5:fe:72:e4:3e:b6:f5:c9:b4:60:6c:
e2:84:20:35:7c:4f:10:79:23:1c:52:7c:23:f7:a3:
31:16:80:2e:dd:77:70:be:3d:2c:91:81:85:41:4e:
2d:58:ce:06:e2:5e:e1:5a:17:ae:b5:4b:d9:ce:c0:
b3:34:bd:40:5e:8e:d5:30:62:32:c2:58:44:df:40:
ae:74:94:a0:ec:dd:f5:d0:19:f0:73:27:1e:80:59:
6e:cc:d1:f5:b5:5f:7c:8f:53:32:7e:b8:e6:a6:d9:
36:4e:dc:46:4e:ab:11:1e:6f:2f:63:31:48:f6:e2:
44:e8:93:f7:c7:55:37:51:11:9b:9e:6f:37:b2:27:
9b:16:21:1e:6c:32:62:c3:64:40:75:74:73:72:90:
4a:b8:7d:e6:3f:4a:93:d4:49:0d:e4:5a:bb:fd:6d:
6b:bb:26:4d:82:25:3b:86:e1:03:e2:c0:90:8b:cb:
a9:40:3f:4b:c7:aa:f2:c3:80:ad:57:5b:64:a7:7b:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:0A:2D:CC:02:FE:A5:9B:DE:7E:91:BA:D5:16:3F:7C:3A:F7:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/S3EKLcwC_qWb3n6RutUWP3w69zI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:cd:2b:16:1f:89:ef:84:f0:98:91:be:53:c2:1c:b7:ae:ab:
6c:49:04:e5:5b:f1:8b:97:b7:9e:de:7f:20:0b:f9:42:68:b7:
9f:fc:fb:ea:1e:7e:e1:c2:51:64:35:ba:30:02:44:e0:38:a6:
31:91:42:04:c2:0e:00:5a:75:94:d4:dd:f1:24:1f:ed:90:d2:
8d:a7:f0:9f:c5:89:03:78:f8:21:68:14:95:cd:b5:80:86:f0:
42:f7:49:11:85:66:01:c5:d5:86:8d:dd:38:1e:48:1f:4e:18:
42:f7:0f:b3:4f:b7:d5:12:93:03:77:09:41:e3:10:a0:f9:43:
97:ea:37:87:dd:0c:2f:28:fd:c1:0c:89:1d:2d:94:43:b6:e0:
3e:03:0d:f2:c6:b3:24:6b:db:2e:48:f7:39:4d:cd:00:2a:52:
07:32:54:33:3a:76:92:e1:58:b9:22:c5:08:78:a0:74:0d:98:
b1:bf:1c:c7:e7:1e:08:18:05:1f:46:a9:ba:c1:4f:8b:e2:8c:
cb:73:2f:4e:bb:b8:05:89:e2:79:40:b1:f5:9b:86:a9:9c:34:
a0:bd:d0:9b:f9:2b:d1:72:1e:ec:3e:8a:d1:3d:6b:3d:b6:de:
57:96:54:04:5d:73:37:52:a7:88:9e:5c:5f:08:96:cf:d6:8f:
75:be:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:07 2025 by rpki-client