Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YAWKkj9Zb2645ZQdBZ5EZPRmNp0.roa
File: YAWKkj9Zb2645ZQdBZ5EZPRmNp0.roa (raw, json)
Hash identifier: I/kcQA24XGiSX/SaUTT1z/4sTnK4e3FVyS7nkdQneTs=
Subject key identifier: 60:05:8A:92:3F:59:6F:6E:B8:E5:94:1D:05:9E:44:64:F4:66:36:9D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YAWKkj9Zb2645ZQdBZ5EZPRmNp0.roa
Signing time: Fri 06 Jun 2025 14:39:29 +0000
ROA not before: Fri 06 Jun 2025 14:39:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5861 (0x16e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 14:39:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=60058A923F596F6EB8E5941D059E4464F466369D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:65:e1:eb:dc:c1:69:cd:44:da:c6:d8:0b:
04:d3:da:1a:62:e7:a1:57:15:5e:c2:d0:98:31:cf:
03:07:23:6f:4b:c9:b6:98:55:8d:e5:f3:0a:cb:6a:
db:08:b7:c8:91:e9:74:7a:18:59:14:6d:47:5a:f8:
08:32:13:1a:31:11:03:8f:33:7a:30:4f:9a:e3:a7:
83:2e:f5:8b:ee:48:64:96:bb:bc:92:de:e1:0a:32:
52:b7:43:be:b2:4e:53:1a:cf:8e:08:e4:89:d1:7d:
00:d5:30:34:f9:48:a6:d6:f5:5e:73:16:01:47:3e:
0b:69:da:9f:d9:bf:2e:23:bf:c8:db:d9:f8:4d:b6:
14:fe:af:7d:8d:6b:97:98:e8:67:0f:d6:59:f1:02:
f9:d8:75:46:1d:4b:b9:a7:6c:56:48:19:0a:fe:1c:
3d:1e:da:df:20:4d:43:d9:e2:5f:7c:7d:1c:34:69:
fc:de:3f:f1:81:28:5e:79:54:4e:ae:32:6c:2c:1b:
69:55:e3:d6:10:20:bd:ce:5b:48:83:28:4b:ef:3a:
d1:90:b8:b5:17:73:79:86:a6:dc:d4:f2:15:b0:81:
79:b3:fe:ef:69:fc:ed:1d:fa:cc:ab:6b:4a:55:5a:
92:cd:e8:85:dc:68:27:a5:91:48:d9:83:ed:84:11:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:8A:92:3F:59:6F:6E:B8:E5:94:1D:05:9E:44:64:F4:66:36:9D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YAWKkj9Zb2645ZQdBZ5EZPRmNp0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:dc:6a:9a:c9:01:99:1a:5c:b2:a9:22:c7:18:28:d1:f5:5f:
46:d7:a6:03:b3:b8:c9:ab:0e:49:86:ed:a0:e1:96:ee:70:cb:
aa:4b:ea:15:69:ad:62:e8:9f:e2:7a:08:8f:b7:f1:88:c7:2b:
c8:ff:71:c3:9f:4b:4c:87:d7:9a:0d:21:9a:51:59:a1:b3:ce:
4e:1a:9b:86:22:3a:25:70:0e:97:42:d0:80:65:b9:e7:b8:ed:
3b:d8:b0:a6:ae:bd:08:27:a4:10:38:2e:a7:a0:5c:8b:4e:c5:
83:7e:f2:c6:1a:41:6a:9a:37:ff:4d:d4:e1:ec:9b:3c:bb:42:
0b:ad:c8:f4:3e:63:fa:a9:21:54:6c:41:0d:98:a9:7d:6d:3f:
5e:c9:14:68:16:27:b6:7f:52:76:07:70:81:40:69:0e:cf:02:
dd:81:03:91:8e:0f:32:c2:67:bc:5f:dc:c4:8b:35:cf:ca:d9:
73:de:50:9c:9f:dc:2f:4f:65:18:14:b9:f3:09:6f:eb:91:50:
76:40:dc:9b:56:2e:05:64:e2:20:16:65:39:84:dc:db:eb:ed:
ca:05:21:ed:cc:8d:67:c1:48:d7:25:59:91:28:7e:5d:38:5f:
de:b2:f0:6c:40:d6:80:80:75:bb:bb:cf:9a:c1:99:a7:cb:1b:
02:e8:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:07:18 2025 by rpki-client