Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nGNaBOnmqU4jwHQGUgP_b_Hf7z4.roa
File: nGNaBOnmqU4jwHQGUgP_b_Hf7z4.roa (raw, json)
Hash identifier: 3ABrDhnWxVPMx/GTonMgW/6vh62I1gvZzDvtjahoEmI=
Subject key identifier: 9C:63:5A:04:E9:E6:A9:4E:23:C0:74:06:52:03:FF:6F:F1:DF:EF:3E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AF1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nGNaBOnmqU4jwHQGUgP_b_Hf7z4.roa
Signing time: Thu 12 Jun 2025 00:09:48 +0000
ROA not before: Thu 12 Jun 2025 00:09:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6897 (0x1af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 00:09:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9C635A04E9E6A94E23C074065203FF6FF1DFEF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:5f:2d:68:9f:32:23:da:df:94:09:88:e3:
79:74:72:38:09:ca:98:da:55:12:fd:d3:cb:70:27:
07:55:4f:60:91:33:28:7d:b8:54:ed:32:49:a7:97:
21:fc:df:65:8f:1e:c5:3b:e8:c3:99:78:af:3d:b8:
9b:7a:e4:6b:0b:8a:31:3f:9d:e5:8f:d5:f4:e9:72:
fb:89:e9:80:40:71:7a:b8:84:dd:c7:0c:0c:75:32:
37:d6:67:2a:c1:87:96:4b:8a:6d:92:a5:e2:7a:e3:
b8:3c:79:6d:21:1c:bc:f1:95:ce:e0:a5:8c:32:f6:
f5:f8:74:56:50:13:09:38:c2:e9:d8:db:b0:5d:21:
43:68:97:3b:ac:23:d1:27:26:8d:1c:b3:c8:7a:27:
ca:b4:75:c5:96:7b:31:5c:47:ed:50:bf:fd:c1:26:
8e:b8:5c:de:ab:40:3a:25:0e:c5:bf:03:a0:89:a8:
dc:c1:fd:3c:03:37:df:06:3c:b5:96:70:1a:28:da:
f3:0f:0c:f2:29:7f:b9:69:ab:a0:07:41:01:eb:b4:
6a:40:87:f6:a5:20:58:7d:f1:6e:06:46:8f:ff:ab:
ee:07:bd:91:f8:0a:d3:48:45:41:35:05:b0:0e:74:
77:ac:e9:0c:19:0e:9c:e1:58:f3:04:b4:de:b0:02:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:5A:04:E9:E6:A9:4E:23:C0:74:06:52:03:FF:6F:F1:DF:EF:3E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nGNaBOnmqU4jwHQGUgP_b_Hf7z4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:e6:cd:fb:1a:ac:88:56:53:57:3e:2e:62:02:27:1c:5e:ce:
67:de:6d:78:99:9e:eb:b8:42:4b:08:77:4b:aa:32:8b:c2:31:
40:5c:cc:d8:14:a6:d3:bc:97:bf:ce:bc:25:86:8c:71:5a:0a:
6a:75:c3:5f:c8:e9:4f:ae:61:d2:29:0a:97:0d:6e:b8:5c:b0:
b3:f1:d2:79:35:08:92:dd:57:a8:a7:14:ab:ba:56:cd:43:7a:
b2:09:b1:a9:19:6b:46:78:5f:fb:88:0e:45:18:43:19:44:7d:
82:a2:52:12:b3:41:a3:f4:c0:22:c9:0a:a4:88:32:fc:5f:de:
5d:14:c7:78:5b:55:0e:2d:db:b9:b6:fd:3a:2a:86:84:8e:e1:
bc:0f:7d:9e:88:71:e7:e9:cf:b5:65:6a:30:fd:cb:ed:99:21:
23:98:44:24:70:0b:78:1c:a5:30:9f:1d:30:09:8d:81:a5:d0:
5e:d4:27:c7:68:90:38:60:a3:b4:31:bc:44:8c:92:42:d9:cc:
d3:a5:7f:ea:50:57:11:95:b0:c3:9d:bc:b4:58:ca:3a:ed:13:
30:18:c5:50:43:4b:7c:30:60:c3:3a:bd:bc:0b:9c:44:cb:84:
04:13:d6:ec:7b:69:eb:2b:98:d3:97:1c:9d:60:d3:d9:1c:4d:
ef:3e:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:19 2025 by rpki-client