Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kke-aplxXVzBlEoFS0b1RCvCDKU.roa
File: kke-aplxXVzBlEoFS0b1RCvCDKU.roa (raw, json)
Hash identifier: v3MTq6ZZXRAqyvGbED7XK4+fbirEzhXgYhDsi7vIk4E=
Subject key identifier: 92:47:BE:6A:99:71:5D:5C:C1:94:4A:05:4B:46:F5:44:2B:C2:0C:A5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14B1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kke-aplxXVzBlEoFS0b1RCvCDKU.roa
Signing time: Tue 03 Jun 2025 16:09:59 +0000
ROA not before: Tue 03 Jun 2025 16:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5297 (0x14b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 16:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9247BE6A99715D5CC1944A054B46F5442BC20CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:04:1c:f9:85:42:7c:33:68:cf:cb:2b:f4:
15:39:f1:ef:f5:cc:b8:3e:53:4b:0a:6e:ee:91:b4:
63:a2:0d:86:28:54:22:b9:9c:94:f8:4a:ee:de:5d:
5d:3e:3c:b1:d4:5a:66:dc:b7:33:84:d9:d0:fb:e0:
e7:a3:2b:02:d9:62:92:1e:8c:a4:99:8a:ec:52:da:
8a:fc:b8:8c:be:d4:e4:10:2d:21:16:2e:8c:ab:db:
a7:db:c3:1c:10:6d:f3:c2:3c:42:0a:b8:2a:de:92:
17:5d:70:e4:b8:c7:bc:f9:35:3a:7d:f5:25:5b:d9:
66:a1:ad:a3:f3:b7:19:cd:ab:c4:7e:39:a7:af:d5:
98:fe:29:f1:f4:6b:2d:1a:33:f8:43:7f:59:e4:dc:
ba:62:33:20:f1:5b:0a:56:2d:a8:49:3d:3c:cc:82:
25:6e:88:d6:f7:1f:14:c4:9f:df:14:a6:13:72:d7:
57:d8:e0:0d:88:cf:c6:9a:fc:68:ae:1e:16:07:79:
6f:23:da:36:a9:e2:2a:70:02:cf:b3:ac:bc:e2:b1:
2b:4c:e8:c0:7a:11:2a:6d:c2:c6:fd:dc:fe:ae:d8:
21:9b:40:6f:32:09:4c:a8:d0:81:a3:15:fe:94:8c:
6a:a9:b0:4f:d9:66:97:41:3d:14:00:b3:1a:7c:75:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:BE:6A:99:71:5D:5C:C1:94:4A:05:4B:46:F5:44:2B:C2:0C:A5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kke-aplxXVzBlEoFS0b1RCvCDKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:13:bf:09:19:37:c3:a9:e4:fa:0f:9b:92:8b:b1:98:9e:ee:
d8:af:07:28:e8:b9:7c:3a:eb:be:a5:92:32:a6:d8:51:00:98:
00:47:95:cd:09:60:c8:97:96:bc:79:91:67:67:be:f4:c2:04:
b1:ee:ff:03:a7:5a:cc:cd:64:5e:9e:58:4a:77:02:fc:81:3e:
c1:1a:6e:31:85:26:d3:2b:11:bc:33:6b:41:de:26:86:82:87:
4a:b5:39:c4:54:06:d1:e0:d9:cd:0e:67:c4:99:83:3e:1b:cb:
da:04:86:58:55:4a:c5:6f:f0:9e:fb:7c:df:31:b9:68:19:d7:
c9:d0:59:0c:91:84:ae:e8:79:36:e7:a4:44:a7:19:c8:0c:cf:
fe:ea:44:c8:61:b9:a6:3f:53:21:a3:c4:db:5b:5f:44:b1:f5:
99:da:af:d6:c6:73:3e:6b:8b:f1:60:f8:3b:c2:4b:4e:6f:83:
fb:30:dc:ba:73:0e:83:22:2f:7a:55:9d:bb:58:f1:24:de:1d:
fe:ee:82:9a:ca:d3:d1:c2:9a:7f:0f:ab:16:a1:de:1b:00:c7:
a0:22:ef:dd:56:87:58:09:e2:65:c6:ef:2d:ee:1e:f5:bd:34:
2a:5d:07:94:8a:45:08:6d:c4:af:9e:34:33:69:43:e0:f5:1c:
f3:a3:0c:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMx
NjA5NTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkyNDdCRTZBOTk3MTVE
NUNDMTk0NEEwNTRCNDZGNTQ0MkJDMjBDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7oQQc+YVCfDNoz8sr9BU58e/1zLg+U0sKbu6RtGOiDYYoVCK5
nJT4Su7eXV0+PLHUWmbctzOE2dD74OejKwLZYpIejKSZiuxS2or8uIy+1OQQLSEW
Loyr26fbwxwQbfPCPEIKuCrekhddcOS4x7z5NTp99SVb2WahraPztxnNq8R+Oaev
1Zj+KfH0ay0aM/hDf1nk3LpiMyDxWwpWLahJPTzMgiVuiNb3HxTEn98UphNy11fY
4A2Iz8aa/GiuHhYHeW8j2jap4ipwAs+zrLzisStM6MB6ESptwsb93P6u2CGbQG8y
CUyo0IGjFf6UjGqpsE/ZZpdBPRQAsxp8deSvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkke+aplxXVzBlEoFS0b1RCvCDKUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ra2UtYXBseFhWekJsRW9G
UzBiMVJDdkNES1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAA0TvwkZN8Op5PoPm5KLsZie7tivByjouXw6
676lkjKm2FEAmABHlc0JYMiXlrx5kWdnvvTCBLHu/wOnWszNZF6eWEp3AvyBPsEa
bjGFJtMrEbwza0HeJoaCh0q1OcRUBtHg2c0OZ8SZgz4by9oEhlhVSsVv8J77fN8x
uWgZ18nQWQyRhK7oeTbnpESnGcgMz/7qRMhhuaY/UyGjxNtbX0Sx9Znar9bGcz5r
i/Fg+DvCS05vg/sw3LpzDoMiL3pVnbtY8STeHf7ugprK09HCmn8Pqxah3hsAx6Ai
791Wh1gJ4mXG7y3uHvW9NCpdB5SKRQhtxK+eNDNpQ+D1HPOjDCY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:04 2025 by rpki-client