Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UBC4Kl-jOEUZZ2Dm8O_R8XiE-N0.roa
File: UBC4Kl-jOEUZZ2Dm8O_R8XiE-N0.roa (raw, json)
Hash identifier: s9Nf2w+q7QK90X2c0MR8oRQsvC80AVT0iUGwczCC+aQ=
Subject key identifier: 50:10:B8:2A:5F:A3:38:45:19:67:60:E6:F0:EF:D1:F1:78:84:F8:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EA1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UBC4Kl-jOEUZZ2Dm8O_R8XiE-N0.roa
Signing time: Mon 26 May 2025 14:09:28 +0000
ROA not before: Mon 26 May 2025 14:09:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3745 (0xea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 14:09:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5010B82A5FA33845196760E6F0EFD1F17884F8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:b4:1c:70:fe:b4:17:21:3b:67:52:e3:f4:
33:8d:4a:28:78:76:96:fe:fe:b7:fe:68:1b:0e:c8:
0d:17:f2:23:38:74:cf:75:6a:37:21:10:a9:5e:78:
46:3b:ca:52:8f:fe:af:8a:27:59:3b:7a:70:12:30:
8b:b3:66:b7:bb:f0:d5:02:64:9b:89:52:f3:9e:23:
f3:b2:70:3d:a5:dd:30:cb:4f:9e:57:dd:0a:25:a1:
5c:3d:d5:3e:3a:de:57:20:ea:1f:9f:54:a0:1e:25:
6b:f3:12:f6:cb:ad:da:a4:38:3e:2c:69:22:7e:52:
cf:d3:2d:22:8a:e5:c2:76:4d:7a:b9:5f:ad:86:f7:
7a:96:22:02:ea:0f:ae:58:3e:28:91:4a:13:90:07:
d0:e9:a5:15:75:78:f7:06:9f:db:c3:ac:05:55:5a:
7c:06:1b:cd:e9:3b:a6:17:04:2c:6a:07:10:e6:df:
c4:f8:d3:17:3a:de:29:9b:76:8b:63:8e:e4:d1:5c:
bd:09:09:03:63:bb:52:3c:32:67:31:50:4c:f6:85:
58:aa:de:e0:d8:d8:dd:c9:5b:7b:6d:e3:f2:f6:34:
54:d7:37:8d:8b:30:31:15:6a:c9:ec:84:60:3d:4b:
1f:bb:a4:97:be:4a:f9:09:c5:66:dc:e9:4d:2d:27:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:B8:2A:5F:A3:38:45:19:67:60:E6:F0:EF:D1:F1:78:84:F8:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UBC4Kl-jOEUZZ2Dm8O_R8XiE-N0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:99:70:0d:a0:b8:23:2f:2d:8c:1e:5a:5f:c9:cb:e9:e0:12:
a0:a7:08:5d:ba:09:07:24:78:6d:74:09:bb:ba:0b:b9:c9:fb:
8c:7b:5d:e7:ac:92:f7:5f:1a:ba:2a:54:a0:4e:aa:1b:d4:84:
32:76:01:28:0e:24:3c:ec:af:7c:77:eb:f3:ee:78:ce:f8:66:
40:18:6e:01:ad:65:7f:60:26:04:ac:a9:2a:10:70:14:27:96:
90:09:1c:c8:30:6d:e4:85:71:11:da:41:f1:21:3b:1d:70:39:
c1:c8:48:15:f8:cf:60:a3:48:39:42:59:90:25:50:8a:a6:11:
18:b0:73:c2:9e:ba:e2:95:4c:f8:57:9b:66:eb:a1:5b:c9:54:
66:fe:02:80:25:db:dc:d0:81:50:af:e7:dc:e8:24:6b:60:92:
cd:3b:62:1b:f7:fa:e9:96:83:4e:e1:37:cd:3e:b1:71:90:ae:
72:6a:2a:6f:d0:cd:be:5e:ff:1d:5d:0b:f9:b0:cb:88:05:d7:
e1:c4:d4:8d:9b:9d:a2:2f:ce:32:9b:d1:8f:75:71:60:63:a3:
3d:f7:c0:1f:28:b6:e3:82:a6:0d:61:fb:f3:45:56:ce:48:43:
3e:b5:83:cb:c4:7a:cf:c1:d4:e1:15:aa:c3:6c:c8:0f:36:f9:
c0:e8:f5:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYx
NDA5MjhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUwMTBCODJBNUZBMzM4
NDUxOTY3NjBFNkYwRUZEMUYxNzg4NEY4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/uLQccP60FyE7Z1Lj9DONSih4dpb+/rf+aBsOyA0X8iM4dM91
ajchEKleeEY7ylKP/q+KJ1k7enASMIuzZre78NUCZJuJUvOeI/OycD2l3TDLT55X
3QoloVw91T463lcg6h+fVKAeJWvzEvbLrdqkOD4saSJ+Us/TLSKK5cJ2TXq5X62G
93qWIgLqD65YPiiRShOQB9DppRV1ePcGn9vDrAVVWnwGG83pO6YXBCxqBxDm38T4
0xc63imbdotjjuTRXL0JCQNju1I8MmcxUEz2hViq3uDY2N3JW3tt4/L2NFTXN42L
MDEVasnshGA9Sx+7pJe+SvkJxWbc6U0tJwN9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUBC4Kl+jOEUZZ2Dm8O/R8XiE+N0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VQkM0S2wtak9FVVpaMkRt
OE9fUjhYaUUtTjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAEOZcA2guCMvLYweWl/Jy+ngEqCnCF26CQck
eG10Cbu6C7nJ+4x7XeeskvdfGroqVKBOqhvUhDJ2ASgOJDzsr3x36/PueM74ZkAY
bgGtZX9gJgSsqSoQcBQnlpAJHMgwbeSFcRHaQfEhOx1wOcHISBX4z2CjSDlCWZAl
UIqmERiwc8KeuuKVTPhXm2broVvJVGb+AoAl29zQgVCv59zoJGtgks07Yhv3+umW
g07hN80+sXGQrnJqKm/Qzb5e/x1dC/mwy4gF1+HE1I2bnaIvzjKb0Y91cWBjoz33
wB8otuOCpg1h+/NFVs5IQz61g8vEes/B1OEVqsNsyA82+cDo9bU=
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:35 2025 by rpki-client