Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VQ1DKkdIYjgNg4YuN1ROIgPhJT4.roa
File: VQ1DKkdIYjgNg4YuN1ROIgPhJT4.roa (raw, json)
Hash identifier: 6o4AufAb3BqMp6xvxV5E3+VTQkIQ6wZfsxEqACUwMW4=
Subject key identifier: 55:0D:43:2A:47:48:62:38:0D:83:86:2E:37:54:4E:22:03:E1:25:3E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B3D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VQ1DKkdIYjgNg4YuN1ROIgPhJT4.roa
Signing time: Thu 22 May 2025 01:38:22 +0000
ROA not before: Thu 22 May 2025 01:38:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 01:38:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=550D432A474862380D83862E37544E2203E1253E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:58:f3:80:46:5c:49:59:2b:49:a1:e0:f6:
37:c7:ad:49:89:84:60:a7:9c:87:2c:8a:2b:8d:a7:
88:d6:5e:d5:34:8b:f9:a2:aa:d8:11:a4:49:73:e3:
de:e7:9a:f4:08:76:36:b1:33:b1:54:36:bc:06:61:
cc:97:12:22:96:8b:a3:89:3e:ff:1d:9c:67:77:a2:
39:24:23:75:63:f7:27:7a:17:73:b2:54:cd:05:70:
87:a8:7b:e0:a7:d2:2a:c3:82:b9:53:2a:14:d3:f0:
72:79:5e:61:0a:7d:13:91:a1:64:6f:34:8a:4e:52:
51:16:86:31:fc:4d:f9:7b:f6:71:f1:6f:a7:75:cd:
9f:8e:a5:de:b5:fe:6d:06:f0:db:c2:31:4a:16:2f:
32:ed:b8:b8:c5:19:88:22:2b:0a:b8:89:ef:af:73:
2f:4d:e3:58:e9:ec:e4:8b:1f:06:fb:6f:03:21:2d:
9d:ac:a7:51:50:81:c0:44:cf:c3:26:66:8f:e0:c0:
7c:f4:0b:5b:db:58:ae:24:22:0b:a0:79:de:9e:f9:
4d:59:94:0a:32:66:8e:d4:10:e9:dc:d7:79:d4:7e:
68:23:76:79:09:fd:53:f8:f9:92:3d:c0:f8:0b:39:
44:68:cb:94:58:84:e6:ea:c1:08:bf:e7:91:43:64:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:43:2A:47:48:62:38:0D:83:86:2E:37:54:4E:22:03:E1:25:3E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VQ1DKkdIYjgNg4YuN1ROIgPhJT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:72:16:ea:48:4c:91:05:b3:e1:41:f4:73:1c:d0:cf:4d:4a:
5f:9a:19:ba:79:80:06:8b:b9:4c:cd:be:93:82:bf:6e:c8:ae:
33:f8:b8:8e:d5:58:b8:89:17:1c:9a:29:9c:71:ce:aa:97:99:
cd:60:b8:92:d8:b1:ef:73:30:23:28:9f:e0:26:80:f8:74:ab:
62:95:2e:65:66:14:b0:ab:8f:4f:f5:b3:e1:b1:8b:eb:8f:90:
68:89:15:18:dc:37:79:15:1e:82:02:a3:4c:e6:6a:b7:13:ba:
58:49:79:15:a2:46:98:f8:58:a1:fb:7b:0d:07:85:4d:5c:7c:
e7:8d:b1:df:e4:04:4c:fb:e8:d8:ff:f1:50:3e:4f:2f:74:45:
63:10:99:0d:67:32:41:46:88:c6:fe:23:1b:9d:90:d8:19:25:
24:a7:e5:5b:c3:0d:26:fc:57:0e:53:5a:73:7a:53:f8:46:48:
84:23:a8:9e:db:bb:f1:6f:12:8f:da:42:a2:ab:97:46:69:43:
54:85:57:13:4e:c5:23:58:10:b1:f1:66:24:c5:f8:52:cc:a3:
16:e7:dc:3c:18:cf:1e:f9:25:07:90:67:72:e6:c6:e0:04:f9:
1f:b1:ee:d2:81:8b:80:09:89:55:93:cb:ec:4f:28:86:b4:c6:
99:21:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:23 2025 by rpki-client