Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Vn9NK643tVeZtIFMtqPHeuYfBJ0.roa
File: Vn9NK643tVeZtIFMtqPHeuYfBJ0.roa (raw, json)
Hash identifier: /+W6m4UTO5NRUlBib17abxgseNdf67nEu7fowqls2ak=
Subject key identifier: 56:7F:4D:2B:AE:37:B5:57:99:B4:81:4C:B6:A3:C7:7A:E6:1F:04:9D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vn9NK643tVeZtIFMtqPHeuYfBJ0.roa
Signing time: Fri 13 Jun 2025 07:39:52 +0000
ROA not before: Fri 13 Jun 2025 07:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7149 (0x1bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 07:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=567F4D2BAE37B55799B4814CB6A3C77AE61F049D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:79:b2:d3:73:53:88:26:4a:66:63:fd:a1:
8c:6c:83:2e:5b:8d:3b:fc:38:81:e7:46:3e:bf:da:
e7:93:60:f7:dc:0f:76:95:7c:5b:a6:77:c5:0c:04:
5a:2b:e5:a8:ee:91:ad:1e:e3:c2:0c:91:0a:26:bc:
9c:44:91:bd:e5:2d:09:dd:4d:31:24:d6:ca:83:d6:
ad:0d:44:54:51:7c:f8:34:49:cd:ac:19:bd:8c:18:
ed:c3:f3:5f:28:95:b0:27:79:2b:de:20:43:57:03:
1e:26:aa:a4:60:f6:2d:c7:5e:d7:6c:33:ba:36:19:
db:d0:d8:70:1b:11:73:a4:13:7d:16:04:f2:2f:5d:
cb:bd:ad:d8:0b:4e:b2:03:c3:05:1c:4e:87:3a:4c:
5f:d6:a2:c9:f7:e0:5b:a5:c5:fd:c9:37:13:08:5c:
ec:8e:4a:f0:01:48:dc:48:f4:92:6b:2a:06:6f:bc:
8e:23:b5:0b:3c:3a:74:42:81:7e:0e:e2:fb:3a:b1:
e6:51:78:bf:65:71:de:ae:69:6c:e9:9d:64:4b:5e:
4e:ce:da:29:2b:79:95:42:73:85:3b:58:51:ec:48:
4f:9e:a0:fd:b3:18:47:82:08:fb:3a:d5:1e:95:2e:
bd:7c:45:2e:5d:cb:ea:c3:5a:ab:b2:a2:47:98:e0:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:4D:2B:AE:37:B5:57:99:B4:81:4C:B6:A3:C7:7A:E6:1F:04:9D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vn9NK643tVeZtIFMtqPHeuYfBJ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:ec:45:d6:7a:6a:d6:a6:27:c3:68:51:73:9d:f8:51:9d:d3:
c9:1d:bd:42:7a:22:42:6a:f3:5c:b4:35:90:37:50:55:a5:56:
56:0b:53:75:5f:d4:69:21:70:d1:55:63:e7:6d:9c:1c:bf:1a:
a3:e2:ae:4a:6b:48:73:6d:77:27:50:b8:da:6d:7a:58:3a:de:
88:22:2d:81:a2:86:f8:3e:d3:8e:39:01:f6:e0:5a:e3:06:ad:
1e:c0:bc:a9:8e:28:13:b1:21:80:10:35:a6:b3:77:82:e9:c6:
67:7a:06:c2:f9:19:66:a2:82:a8:cb:49:ce:70:b8:c5:32:a0:
23:c9:ea:b8:0f:b4:e8:99:13:cb:c0:32:58:96:15:04:d7:eb:
16:67:d0:22:2e:10:87:63:a9:56:e1:17:b4:cb:0e:01:25:6f:
d0:8e:cc:99:39:b4:56:6c:95:a8:2b:7a:a3:95:c8:19:e2:0e:
22:85:dd:36:ca:87:4d:67:1b:39:ec:a9:c5:98:45:da:52:d3:
05:4c:7e:00:78:7f:8b:a4:f6:4c:56:71:75:32:ca:25:1f:f4:
c5:2c:da:fc:80:93:3c:d3:21:d7:36:f1:3c:cf:42:31:29:69:
70:ce:70:7d:60:f4:db:5f:d6:fb:d8:f5:bb:54:af:d6:f4:1d:
63:33:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:14:48 2025 by rpki-client