Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cFYy9izLplsSVNb9YsyuoJP-jSY.roa
File: cFYy9izLplsSVNb9YsyuoJP-jSY.roa (raw, json)
Hash identifier: s/9oHXMmcuW9trxRHNR9EKGd2c7oEbUSVhzcb4aKMq8=
Subject key identifier: 70:56:32:F6:2C:CB:A6:5B:12:54:D6:FD:62:CC:AE:A0:93:FE:8D:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1899
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cFYy9izLplsSVNb9YsyuoJP-jSY.roa
Signing time: Sun 08 Jun 2025 21:09:34 +0000
ROA not before: Sun 08 Jun 2025 21:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6297 (0x1899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 21:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=705632F62CCBA65B1254D6FD62CCAEA093FE8D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:e2:24:dc:0b:c8:24:42:c1:70:dc:03:ff:
79:6e:51:82:7e:03:86:c3:7d:98:45:8c:9f:08:6b:
7f:3a:23:8f:d4:8c:02:99:4f:c6:cd:ad:f6:68:a7:
17:7d:31:ad:55:24:97:95:dd:a5:6c:73:57:07:38:
a6:c2:69:3a:dc:db:5b:ab:38:23:eb:9e:37:03:70:
80:d6:32:71:1b:35:1b:45:e5:b6:73:f7:01:e4:19:
63:e1:8c:c7:13:2e:8c:76:bf:95:44:9b:92:d6:d5:
cd:e5:40:77:1a:f0:8d:8d:aa:b7:66:44:65:82:d2:
68:a4:2b:a2:39:36:f6:e1:5c:08:e8:ac:2b:3a:6c:
9f:c0:92:4c:d6:fe:83:41:64:3b:41:84:0e:37:31:
5c:f4:f9:bb:61:de:f9:81:ae:e3:84:ff:1f:0b:18:
cc:9a:94:66:1f:19:b2:2b:02:97:c9:d8:27:b2:db:
0e:25:35:71:a6:0d:51:94:34:58:60:56:d2:88:13:
fd:5c:33:dd:f7:48:81:d6:18:67:b6:74:12:34:5a:
18:09:e8:73:46:a1:30:ed:b3:bb:32:ca:d7:a0:c6:
08:af:e4:4f:71:66:13:2d:16:06:2f:fb:e5:8c:c8:
5b:54:bd:f0:26:56:1a:55:07:4c:3b:32:42:55:46:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:32:F6:2C:CB:A6:5B:12:54:D6:FD:62:CC:AE:A0:93:FE:8D:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cFYy9izLplsSVNb9YsyuoJP-jSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:49:18:aa:3b:1d:45:3c:e7:ae:30:57:5a:b4:c3:de:2e:35:
a3:69:f1:97:26:61:09:58:a0:b2:a5:f8:0a:ba:50:31:80:c8:
1f:ba:0e:6e:da:27:8a:c6:b5:58:ea:fd:25:97:e6:06:87:48:
8d:ec:74:d0:6a:8f:f6:96:3d:af:0c:4e:92:a7:ec:29:0a:8f:
96:c8:83:29:dd:98:f6:14:7c:d9:70:c3:0a:d0:ce:a8:67:41:
31:b8:20:d8:c7:ec:35:9c:88:8b:e8:43:85:9a:4c:f9:8a:6c:
0e:57:55:6a:cc:df:d4:ba:78:5f:78:c6:d0:5d:a0:d2:30:92:
4b:89:f5:d9:57:91:e1:3b:88:24:64:53:8f:8b:ae:f3:86:cd:
b7:ee:db:03:b9:3b:4b:7a:93:48:70:32:f6:64:5d:92:ce:20:
66:7e:17:c6:7e:3a:96:14:4c:0e:bc:78:8e:ce:00:39:41:1a:
1a:d9:6e:cc:04:04:0b:27:c1:1b:f7:fa:56:92:af:cd:1b:b7:
1d:c4:ee:cc:1b:af:ca:46:9d:5e:81:7e:3a:e7:9b:38:a6:db:
3b:d4:38:a5:58:df:19:de:aa:22:cf:45:05:a9:20:48:55:7c:
e2:ba:0d:ef:82:7b:c0:ec:6b:82:9d:3c:ff:58:e0:d9:78:f6:
1b:9e:53:a3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgy
MTA5MzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcwNTYzMkY2MkNDQkE2
NUIxMjU0RDZGRDYyQ0NBRUEwOTNGRThEMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5OuIk3AvIJELBcNwD/3luUYJ+A4bDfZhFjJ8Ia386I4/UjAKZ
T8bNrfZopxd9Ma1VJJeV3aVsc1cHOKbCaTrc21urOCPrnjcDcIDWMnEbNRtF5bZz
9wHkGWPhjMcTLox2v5VEm5LW1c3lQHca8I2NqrdmRGWC0mikK6I5NvbhXAjorCs6
bJ/AkkzW/oNBZDtBhA43MVz0+bth3vmBruOE/x8LGMyalGYfGbIrApfJ2Cey2w4l
NXGmDVGUNFhgVtKIE/1cM933SIHWGGe2dBI0WhgJ6HNGoTDts7syytegxgiv5E9x
ZhMtFgYv++WMyFtUvfAmVhpVB0w7MkJVRng7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcFYy9izLplsSVNb9YsyuoJP+jSYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jRll5OWl6THBsc1NWTmI5
WXN5dW9KUC1qU1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAG9JGKo7HUU8564wV1q0w94uNaNp8ZcmYQlY
oLKl+Aq6UDGAyB+6Dm7aJ4rGtVjq/SWX5gaHSI3sdNBqj/aWPa8MTpKn7CkKj5bI
gyndmPYUfNlwwwrQzqhnQTG4INjH7DWciIvoQ4WaTPmKbA5XVWrM39S6eF94xtBd
oNIwkkuJ9dlXkeE7iCRkU4+LrvOGzbfu2wO5O0t6k0hwMvZkXZLOIGZ+F8Z+OpYU
TA68eI7OADlBGhrZbswEBAsnwRv3+laSr80btx3E7swbr8pGnV6Bfjrnmzim2zvU
OKVY3xneqiLPRQWpIEhVfOK6De+Ce8Dsa4KdPP9Y4Nl49hueU6M=
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:23:10 2025 by rpki-client