Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TVSsPbY3uc2PGv6NFL7HE4hgQSY.roa
File: TVSsPbY3uc2PGv6NFL7HE4hgQSY.roa (raw, json)
Hash identifier: EG6HYco5argtKsovU2m/8ZZSWbfdOyCyM0lQeiukZkg=
Subject key identifier: 4D:54:AC:3D:B6:37:B9:CD:8F:1A:FE:8D:14:BE:C7:13:88:60:41:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07C9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TVSsPbY3uc2PGv6NFL7HE4hgQSY.roa
Signing time: Sat 17 May 2025 11:08:08 +0000
ROA not before: Sat 17 May 2025 11:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 11:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4D54AC3DB637B9CD8F1AFE8D14BEC71388604126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:65:4b:83:6c:9e:00:93:a6:d8:a1:be:b5:
f1:ec:34:c2:82:52:4a:a7:e0:b7:2a:ad:17:db:1c:
a9:69:7e:3a:97:ca:94:10:35:0e:cf:cd:47:24:a3:
e9:03:20:20:11:bf:5f:c5:a1:61:30:2d:b6:c2:85:
b1:4c:81:1f:8b:16:a0:91:49:a2:0b:94:b0:d5:da:
4a:2d:a1:af:b1:c9:e5:3a:f2:12:67:9e:e2:ef:04:
ec:a9:61:ce:d8:1f:ac:4a:01:f7:38:8f:bc:f7:5e:
8f:e2:fd:9b:dd:d6:88:a8:81:d5:c8:c8:41:e7:79:
90:72:9e:b8:7a:8f:62:46:e9:65:32:f1:ed:94:0f:
15:7d:bc:0d:50:58:19:94:d3:53:da:b7:3a:95:8f:
ba:5d:ec:ca:b8:6c:e5:3f:db:f4:42:de:7a:8e:46:
ad:32:f8:7a:62:25:89:6f:fb:93:d0:be:6c:cf:d0:
eb:0b:71:35:f8:f0:cf:67:0d:98:f3:1d:0f:99:fc:
ac:2c:0e:2d:50:ce:62:e3:07:96:34:33:b9:db:e7:
60:56:d0:56:f4:7c:f7:4e:2c:ff:72:c6:5a:b8:ae:
32:ff:bc:d7:92:f6:9a:ac:9c:cd:86:b4:d6:71:20:
30:ec:40:5d:b0:9c:11:45:9a:45:9a:77:c8:b1:5e:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:AC:3D:B6:37:B9:CD:8F:1A:FE:8D:14:BE:C7:13:88:60:41:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TVSsPbY3uc2PGv6NFL7HE4hgQSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:49:0a:78:63:aa:b2:9e:45:fa:9d:d6:96:c8:57:1e:ba:05:
d9:e0:00:a4:7a:f9:7b:80:d9:9c:00:74:12:81:8a:70:be:a8:
92:9c:ce:e3:f2:3c:55:d0:8b:bb:2c:8b:68:34:96:51:86:c3:
14:06:58:f5:dc:01:16:3c:a7:18:f7:4f:30:e4:c3:3a:77:23:
83:30:a2:1a:be:5f:3d:30:32:c2:5d:01:42:d0:31:64:e4:e7:
70:54:08:6c:a4:6e:77:61:0c:6b:25:0c:44:ab:5b:82:68:a6:
5a:87:93:1d:c0:a2:64:e4:64:4e:cc:e7:cc:30:fd:a0:8e:61:
9b:92:35:f3:ad:07:23:38:a4:8d:99:23:1e:f1:44:c8:47:bc:
37:d5:f8:c5:2e:3d:06:07:db:3b:bf:e8:9b:41:c0:b8:ef:c6:
f2:41:51:0b:2a:bf:76:95:1d:d0:16:f8:ed:48:e9:01:67:52:
eb:5b:63:17:bc:cc:b0:2a:37:9d:8b:39:43:9c:03:39:1d:82:
b0:b9:dd:b6:fd:63:75:4e:c2:d6:9e:bb:d9:47:b3:dd:e2:82:
dc:f5:b0:ad:23:13:b7:04:a0:7b:91:17:e3:e3:63:6d:8b:8e:
eb:f2:0f:23:da:14:7f:a7:3e:1a:78:6a:46:e6:ec:59:b2:41:
06:e2:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:01:47 2025 by rpki-client