Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YE6Et5m0m106VWMIWfmz0_eAPVA.roa
File: YE6Et5m0m106VWMIWfmz0_eAPVA.roa (raw, json)
Hash identifier: E9IZnqPV667+GRpmvw8TqwWqOaeyIEyMtV45gg1IXpY=
Subject key identifier: 60:4E:84:B7:99:B4:9B:5D:3A:55:63:08:59:F9:B3:D3:F7:80:3D:50
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YE6Et5m0m106VWMIWfmz0_eAPVA.roa
Signing time: Mon 09 Jun 2025 06:39:37 +0000
ROA not before: Mon 09 Jun 2025 06:39:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6373 (0x18e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 06:39:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=604E84B799B49B5D3A55630859F9B3D3F7803D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:03:8c:a4:97:10:41:a7:7d:76:48:d3:49:
cd:1a:0a:4f:de:a3:01:94:c1:3c:a8:ae:4d:14:5b:
bd:64:10:7f:53:91:a4:55:23:d8:c5:37:82:4e:10:
c6:b9:f8:9a:dd:2a:3e:46:cf:32:23:10:8d:bc:7a:
6b:9e:0d:ce:94:06:03:ec:5e:65:b1:b7:f2:17:31:
d4:31:f1:f3:59:1f:0d:92:cc:bc:61:d0:7a:b6:a9:
0f:56:f3:3b:3d:90:4d:7d:a1:07:b6:3d:f4:d4:f5:
1e:92:cb:4b:6e:71:90:16:9f:56:40:95:ec:d4:c8:
e5:af:a3:8d:09:f7:d1:c0:bf:58:09:3c:d2:bf:a0:
6d:db:12:77:e6:d9:5c:87:78:b0:7d:9b:5e:85:8a:
2c:bd:b0:3b:02:fb:2b:db:2b:45:91:cf:59:62:82:
ca:25:a1:77:e5:74:b3:86:94:57:52:49:1a:11:c4:
a3:a5:8f:01:5f:30:39:b7:8a:68:70:8f:d9:b3:fb:
07:73:e8:16:64:c4:98:db:14:bc:a7:c3:9b:a5:6d:
c3:b0:7b:dd:13:18:1e:27:3a:04:9b:c6:e6:b9:32:
a7:a3:c7:52:65:c8:4c:0f:ed:aa:48:44:51:99:f6:
45:4f:b3:a2:db:bd:0e:95:95:a8:46:5c:e9:0f:e6:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:84:B7:99:B4:9B:5D:3A:55:63:08:59:F9:B3:D3:F7:80:3D:50
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YE6Et5m0m106VWMIWfmz0_eAPVA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:06:8f:66:05:d4:77:7a:b4:ec:fa:36:85:f7:4a:60:6a:46:
e3:e2:12:75:e6:34:94:33:a0:94:ac:9a:25:5a:1c:44:af:1a:
c0:6b:09:45:6d:6f:f0:69:a0:79:b1:7b:eb:58:42:59:ae:b0:
c6:53:da:d9:03:d8:1b:06:6f:61:fe:48:b1:77:9b:b0:7e:dd:
6c:81:50:37:bb:41:c8:21:ce:ac:4c:c7:44:f0:64:c9:67:9a:
e9:f8:e6:b9:b7:91:91:cb:29:74:e1:d2:b1:f9:40:31:b4:14:
32:c6:e1:1f:d5:d6:30:39:d4:40:df:45:5a:4d:04:0d:02:0c:
74:af:08:9e:fa:57:ee:eb:a1:b0:d3:21:3d:be:b7:7c:c7:43:
9f:32:e6:c1:2b:86:de:c7:b9:47:77:00:27:e5:4e:fa:55:de:
ed:38:58:a4:30:6f:af:11:59:b5:ff:4d:f3:77:c3:c9:7f:a5:
92:1b:c1:ac:90:13:74:2c:32:ed:d5:49:62:c5:00:b2:77:37:
de:07:6c:e8:dd:c0:8f:b6:1c:9f:33:46:14:6f:68:78:11:e0:
88:d1:07:b4:85:65:ed:81:a4:a0:bd:9b:30:1e:db:d8:51:7f:
40:49:1a:db:37:43:e0:3e:18:c9:bf:2c:98:39:05:65:40:57:
f0:c1:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:25 2025 by rpki-client