Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W5SbjV3EZZ4KkTCBbK5E1ZWvI8c.roa
File: W5SbjV3EZZ4KkTCBbK5E1ZWvI8c.roa (raw, json)
Hash identifier: gcrLnvqQsLL0XXmNVJI1X1jC1cg3zXTL8sc+kUy8IcM=
Subject key identifier: 5B:94:9B:8D:5D:C4:65:9E:0A:91:30:81:6C:AE:44:D5:95:AF:23:C7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CA5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W5SbjV3EZZ4KkTCBbK5E1ZWvI8c.roa
Signing time: Sat 14 Jun 2025 06:39:54 +0000
ROA not before: Sat 14 Jun 2025 06:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7333 (0x1ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 06:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5B949B8D5DC4659E0A9130816CAE44D595AF23C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:b6:86:76:de:e8:5b:37:4d:bc:84:e7:24:
55:79:0e:fa:52:4b:3e:b2:c4:53:5e:1a:eb:4f:ed:
38:e6:a0:f7:8a:bc:88:86:70:12:2e:6d:2e:f6:a8:
67:06:37:53:54:3e:9d:e5:c2:c3:1a:c5:37:6c:f0:
2f:f3:c4:01:2b:48:80:88:1d:17:35:d7:8e:ea:d6:
e5:3d:8e:0c:b5:22:26:0b:a0:e8:b0:8c:04:2a:e0:
d8:28:a4:78:51:48:e9:4b:a9:ab:77:f6:9e:fa:f9:
a8:11:65:8f:5e:76:ec:32:55:9b:71:a3:28:f0:9c:
f2:84:49:50:73:e9:90:46:8d:78:f8:cc:da:2c:18:
81:6e:8a:c1:0d:4b:75:ab:36:c7:89:cd:b1:9a:e4:
54:c2:a6:ee:f0:6f:7f:d8:fe:3b:09:fa:fb:9e:8f:
d3:1a:67:0e:f5:6f:a9:47:22:cc:63:cd:51:72:ec:
e9:01:de:71:82:6a:ee:a4:c0:33:4d:d9:4d:a2:b5:
7d:83:5a:63:a0:18:0c:e4:3b:a3:97:64:73:9e:17:
8d:9d:24:0b:c3:56:93:51:9f:97:e2:7a:f5:71:cf:
b1:89:16:28:b6:45:5e:ab:e6:59:c5:b5:43:0a:20:
4d:04:00:11:14:b9:35:a8:1c:5f:e0:4f:c9:4d:57:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:9B:8D:5D:C4:65:9E:0A:91:30:81:6C:AE:44:D5:95:AF:23:C7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W5SbjV3EZZ4KkTCBbK5E1ZWvI8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:e1:8f:bc:84:54:02:9f:71:44:b1:db:d0:8f:66:c9:8f:08:
59:9f:5b:67:89:84:94:4d:21:80:8b:ae:95:a2:a6:54:ed:75:
f8:6e:7d:cc:fb:e7:49:02:64:18:ce:46:e5:26:42:b9:17:6e:
2f:c9:22:1c:8c:a0:3e:e4:d7:26:1f:62:0a:d7:0a:fc:b7:35:
68:8c:93:12:82:dc:26:b4:66:bf:86:d4:81:b3:6a:e4:aa:0f:
44:87:55:90:b5:96:9c:5d:31:26:73:21:af:f6:7c:a4:88:67:
ee:50:1a:3c:f6:c6:15:0e:50:68:98:5b:bf:98:a1:f8:bb:ee:
f1:a0:9c:1f:0d:c0:ec:c1:97:fe:c3:f0:42:3a:3e:42:2d:a9:
c7:3f:1e:50:94:35:1d:65:e1:e1:88:17:87:aa:47:c5:aa:85:
05:27:eb:49:34:f2:32:d1:47:95:92:a4:dd:c6:f0:49:1e:e7:
67:92:1b:96:a4:a9:49:be:5c:1e:15:d2:eb:fe:4c:3f:e4:32:
a8:79:d4:10:ab:8a:36:4d:d1:1f:36:42:70:d7:ed:a1:24:cb:
c4:7d:b5:2c:f7:a9:48:ea:a6:7b:eb:ec:6a:bd:e2:6e:0f:f7:
94:10:9f:e7:f3:be:ae:3a:37:cd:f3:06:11:3b:50:fe:13:e6:
f1:f9:50:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTQw
NjM5NTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDVCOTQ5QjhENURDNDY1
OUUwQTkxMzA4MTZDQUU0NEQ1OTVBRjIzQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDElraGdt7oWzdNvITnJFV5DvpSSz6yxFNeGutP7TjmoPeKvIiG
cBIubS72qGcGN1NUPp3lwsMaxTds8C/zxAErSICIHRc1147q1uU9jgy1IiYLoOiw
jAQq4NgopHhRSOlLqat39p76+agRZY9eduwyVZtxoyjwnPKESVBz6ZBGjXj4zNos
GIFuisENS3WrNseJzbGa5FTCpu7wb3/Y/jsJ+vuej9MaZw71b6lHIsxjzVFy7OkB
3nGCau6kwDNN2U2itX2DWmOgGAzkO6OXZHOeF42dJAvDVpNRn5fievVxz7GJFii2
RV6r5lnFtUMKIE0EABEUuTWoHF/gT8lNVzHjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW5SbjV3EZZ4KkTCBbK5E1ZWvI8cwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XNVNialYzRVpaNEtrVENC
Yks1RTFaV3ZJOGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAIfhj7yEVAKfcUSx29CPZsmPCFmfW2eJhJRN
IYCLrpWiplTtdfhufcz750kCZBjORuUmQrkXbi/JIhyMoD7k1yYfYgrXCvy3NWiM
kxKC3Ca0Zr+G1IGzauSqD0SHVZC1lpxdMSZzIa/2fKSIZ+5QGjz2xhUOUGiYW7+Y
ofi77vGgnB8NwOzBl/7D8EI6PkItqcc/HlCUNR1l4eGIF4eqR8WqhQUn60k08jLR
R5WSpN3G8Eke52eSG5akqUm+XB4V0uv+TD/kMqh51BCrijZN0R82QnDX7aEky8R9
tSz3qUjqpnvr7Gq94m4P95QQn+fzvq46N83zBhE7UP4T5vH5UAo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:53 2025 by rpki-client