Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dZAgWWU66ATJMz3Cv-uO2yUksxY.roa
File: dZAgWWU66ATJMz3Cv-uO2yUksxY.roa (raw, json)
Hash identifier: c9ALW3piTMsfPbKdxYnvULc4wmsbLBAdBQgQvT5UfW4=
Subject key identifier: 75:90:20:59:65:3A:E8:04:C9:33:3D:C2:BF:EB:8E:DB:25:24:B3:16
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dZAgWWU66ATJMz3Cv-uO2yUksxY.roa
Signing time: Wed 21 May 2025 20:38:20 +0000
ROA not before: Wed 21 May 2025 20:38:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 20:38:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=75902059653AE804C9333DC2BFEB8EDB2524B316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:ca:66:da:4f:1e:01:1e:33:a0:ad:92:4d:
d7:ce:37:a6:65:d6:ff:d7:6d:1a:2a:22:a5:6d:42:
3d:54:6b:29:b6:b5:44:1d:8b:de:82:0e:d2:5a:fd:
bb:cb:47:e1:f7:7f:e4:b3:61:d9:02:25:9a:d3:b4:
3d:08:ab:41:11:f9:91:0a:16:f4:98:b9:d5:04:fb:
a2:4f:82:81:5b:6e:f5:d5:1c:30:cf:0d:48:45:fe:
14:dc:90:58:0e:00:3d:5a:b1:e7:9f:2e:a2:02:6a:
1b:ac:8d:f6:86:17:f8:9e:d9:4a:19:24:a6:9b:37:
f9:74:a0:bb:98:42:4b:f8:c4:2a:35:42:4e:f4:42:
3c:67:71:c5:b0:33:df:76:f8:b6:ea:ac:a6:6e:4a:
4e:42:e5:3d:53:ed:dc:ab:6e:3c:d2:6d:37:5c:c7:
a4:48:a0:d4:d2:92:73:d1:01:f3:60:f2:9d:e3:80:
57:55:18:a6:83:99:c7:10:c7:d6:12:b6:db:9b:31:
90:75:f0:4a:e7:cf:ea:c2:c9:6e:15:95:63:6e:81:
65:a4:5e:f1:60:e3:a0:ce:30:9a:ed:6e:cc:6b:7f:
52:cd:cf:4a:84:16:cd:33:65:08:ed:4a:f4:cf:33:
c0:d0:2f:a8:79:e5:72:b0:4c:4b:c5:ce:99:98:b5:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:20:59:65:3A:E8:04:C9:33:3D:C2:BF:EB:8E:DB:25:24:B3:16
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dZAgWWU66ATJMz3Cv-uO2yUksxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:b1:e7:05:ee:f8:f5:f4:40:ea:da:c4:73:81:23:b0:f6:82:
26:76:d9:c9:ae:d9:55:4e:ee:16:52:61:4b:89:14:89:af:13:
79:94:57:30:83:8f:40:c3:0f:d7:4c:d9:ab:99:d9:80:6f:c8:
f2:37:71:12:a9:bf:3c:65:59:b7:02:17:6d:e6:b1:b9:8b:e2:
66:61:d5:d6:66:43:a2:dc:27:19:96:45:31:66:f4:50:d9:23:
76:20:4f:59:a0:0e:f6:2f:ae:8d:4d:dc:a7:a5:c0:84:26:9f:
de:c7:e3:74:05:5e:de:57:80:f3:1e:9a:d9:c7:07:a4:1c:dd:
1b:66:ac:2e:29:db:98:c7:e4:38:d1:e7:a8:48:ac:30:61:d1:
fe:53:cc:20:24:1f:14:9c:9e:ea:e7:3d:1a:6e:e6:f1:69:8c:
70:55:58:43:63:a0:4c:f7:26:df:2d:c6:93:b7:a3:01:46:fd:
57:b8:ff:27:8a:67:df:72:8d:37:37:be:3b:df:b4:0e:bb:01:
b5:55:84:38:ca:2b:b1:43:ab:bf:7f:d1:f6:25:f6:58:7c:aa:
5b:83:60:48:c5:5b:eb:46:30:7d:3c:c8:77:42:56:44:2e:a1:
cd:29:e6:cb:d9:de:8f:24:d9:86:9c:23:ef:7a:9d:6d:7b:b6:
ae:7c:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:23 2025 by rpki-client