Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jHH4t27QqU62vMMwmax15P-to6g.roa
File: jHH4t27QqU62vMMwmax15P-to6g.roa (raw, json)
Hash identifier: 4njQu1j/o4Mqv1+30rA95i0tBl+ixdtBsPqPIdMhMVs=
Subject key identifier: 8C:71:F8:B7:6E:D0:A9:4E:B6:BC:C3:30:99:AC:75:E4:FF:AD:A3:A8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0409
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jHH4t27QqU62vMMwmax15P-to6g.roa
Signing time: Mon 12 May 2025 11:07:55 +0000
ROA not before: Mon 12 May 2025 11:07:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 11:07:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8C71F8B76ED0A94EB6BCC33099AC75E4FFADA3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:6e:2d:5e:a2:f2:27:48:1a:54:37:f6:d7:
9d:ff:c9:55:b6:70:ed:2c:a9:78:c9:4a:5f:cf:51:
99:02:c4:8f:0d:db:94:a0:4a:14:ca:ba:01:95:46:
80:ff:e2:e4:5c:8f:73:9c:fe:e4:d2:06:dd:3c:9a:
44:1a:8e:e1:3f:1d:9c:bf:82:6e:b5:c3:45:89:e7:
0e:7f:14:e9:a8:94:4a:e1:cc:e4:b7:30:63:c3:42:
26:ec:e9:2b:95:0b:10:77:d5:84:3c:51:33:0e:06:
41:7c:9b:46:61:4d:45:80:f6:89:a6:0a:ee:ab:93:
63:6c:72:e6:40:e8:ea:1c:6a:1f:9f:ae:16:f2:d2:
c4:6f:21:f5:9e:ab:8f:25:1d:29:c4:0e:d8:92:a0:
5c:17:da:6e:c4:36:55:07:b5:c3:6e:6c:2c:ce:33:
f0:61:e7:87:b8:f2:48:3c:d5:dd:16:90:a1:4d:bb:
3a:e9:82:52:98:e6:89:f3:19:42:ce:60:6d:15:02:
0a:c4:f8:be:0b:32:b5:18:b5:bb:50:94:c0:31:9f:
c1:cd:1d:6b:07:1d:0f:b3:dc:c0:a2:cd:85:b2:e3:
4e:fe:aa:73:c0:2f:03:37:a0:b9:d7:4e:7e:08:87:
5b:d3:f0:b1:68:53:89:a8:8b:89:27:cd:b0:2f:f7:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:F8:B7:6E:D0:A9:4E:B6:BC:C3:30:99:AC:75:E4:FF:AD:A3:A8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jHH4t27QqU62vMMwmax15P-to6g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:b6:e7:94:c3:51:21:33:3d:10:04:4d:61:a9:c4:3d:7c:f0:
7d:bc:90:76:f6:3b:f5:c2:ae:e5:f6:40:bb:51:11:a5:b6:bc:
e9:d4:39:53:df:61:fa:53:a0:c5:0e:0f:c2:d1:55:77:bc:f7:
d3:8f:d7:36:74:99:66:a7:da:be:47:f2:e6:b3:e5:57:57:a2:
9a:46:82:4a:d2:8a:1f:8a:2d:7e:ea:21:0b:23:3f:37:43:cd:
a9:39:07:e0:a9:ec:13:a6:14:50:cf:ed:54:cf:78:56:83:8a:
2f:c0:c7:42:b6:f0:54:1b:52:d9:39:71:e8:42:02:f5:79:7d:
6c:ac:28:4b:59:81:3e:af:3f:b4:a9:87:ed:88:9c:75:13:ce:
15:90:d4:5a:47:1f:9b:a0:6c:92:73:3a:ec:37:11:cf:e6:e9:
09:83:f6:b5:07:88:7f:9f:cb:1e:d0:68:57:79:a5:71:41:76:
8a:e5:a3:c8:10:4d:a8:86:6b:09:15:62:94:f0:4a:16:96:67:
20:bc:19:74:f2:42:3a:4e:c8:51:63:49:b0:0b:23:76:55:6b:
ef:9f:38:fb:3a:a8:56:7b:19:90:4f:78:c9:57:06:31:c7:2a:
83:6f:55:93:40:8f:a8:ec:8e:2d:b4:30:50:69:a7:f5:8e:a0:
7d:78:9f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:14 2025 by rpki-client