Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pJ7c-y6bTgcZzXT5S50e5bR4-Ig.roa
File: pJ7c-y6bTgcZzXT5S50e5bR4-Ig.roa (raw, json)
Hash identifier: pOU4yTVORf2lhDOV4SMXLugbQEslO7CebJ1a9FZ4230=
Subject key identifier: A4:9E:DC:FB:2E:9B:4E:07:19:CD:74:F9:4B:9D:1E:E5:B4:78:F8:88
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19C9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pJ7c-y6bTgcZzXT5S50e5bR4-Ig.roa
Signing time: Tue 10 Jun 2025 11:09:42 +0000
ROA not before: Tue 10 Jun 2025 11:09:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6601 (0x19c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 11:09:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A49EDCFB2E9B4E0719CD74F94B9D1EE5B478F888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:9a:eb:6c:d0:b9:a8:5c:6a:fe:bd:8a:6e:
f8:a8:9a:25:28:1d:02:0c:38:35:f2:e4:cd:2c:39:
ef:52:fc:61:62:c8:fe:f8:78:68:6e:ca:e0:01:10:
60:cf:70:ef:d1:03:12:29:5e:ca:5a:cd:0a:5e:99:
31:28:b7:5f:16:de:e2:46:49:d4:33:db:1f:f7:dd:
66:36:ea:1c:d2:8f:58:9d:90:a1:89:4e:e2:1f:be:
67:4b:f1:0c:2d:89:e7:fb:1a:9e:28:48:cd:f6:43:
47:e7:b0:05:f1:3f:06:a5:e1:37:62:11:31:03:c0:
4f:ec:0d:70:22:0e:b7:6e:1e:7c:9a:1d:20:41:bc:
94:dd:e3:03:ac:2a:e3:ef:9b:b5:cc:7c:af:83:04:
7a:9d:83:15:50:9a:97:7c:ca:61:a5:00:25:6b:74:
3c:3f:f7:8d:66:b0:1c:a1:7f:dd:42:b8:a0:be:0e:
55:a2:b6:9c:89:05:f9:2e:c2:f8:51:bf:3c:10:eb:
e1:ca:3a:38:af:8b:4a:ca:d2:8c:33:98:f8:e3:6f:
bd:7a:51:e9:1f:04:b5:51:74:4d:35:71:b3:3c:eb:
3a:e4:9f:be:31:dc:84:0b:50:67:b0:f2:81:cd:3c:
26:48:0a:e8:d6:ce:78:a1:26:f3:ae:26:07:d6:1f:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:DC:FB:2E:9B:4E:07:19:CD:74:F9:4B:9D:1E:E5:B4:78:F8:88
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pJ7c-y6bTgcZzXT5S50e5bR4-Ig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:fd:a9:75:22:87:5e:d6:ea:65:ae:7d:fb:e4:eb:97:93:69:
0a:b4:d3:14:69:af:4b:09:b7:36:94:da:2f:60:6e:18:47:2b:
ea:34:e2:08:70:bd:18:e3:90:63:d9:c5:8f:80:65:b8:97:6e:
91:69:96:ed:d7:c2:4e:97:74:ec:f7:4b:42:fd:08:93:ce:8b:
41:db:75:96:61:df:5d:5c:64:17:bb:d2:be:53:4a:44:61:a7:
6b:11:1b:32:99:8a:68:66:a6:f3:9c:d9:37:bb:88:05:60:3a:
58:78:cf:53:74:36:f3:51:cc:c2:9d:54:4a:77:e4:8e:5d:70:
8c:82:f8:37:ff:15:27:4e:ac:cc:73:df:2c:b6:45:1d:be:a4:
6d:6d:01:bc:22:f2:a3:53:09:45:74:7b:ac:2d:f6:da:81:84:
5a:1e:4b:5a:4b:c8:c6:c1:eb:62:f3:ec:fa:f4:44:94:6f:0a:
af:83:96:21:1c:bb:af:aa:a7:22:e0:c6:32:24:8c:28:db:d5:
6a:bf:a1:45:28:28:6b:db:a6:95:1f:ef:c3:11:05:a6:e9:a4:
70:52:66:87:38:64:8e:1d:01:19:43:0a:f5:3d:fe:f9:8e:92:
44:3a:e5:f3:47:87:b5:5f:83:80:cf:fc:3a:b7:26:3e:bd:ae:
f9:f0:c1:cd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx
MTA5NDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE0OUVEQ0ZCMkU5QjRF
MDcxOUNENzRGOTRCOUQxRUU1QjQ3OEY4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxDJrrbNC5qFxq/r2KbviomiUoHQIMODXy5M0sOe9S/GFiyP74
eGhuyuABEGDPcO/RAxIpXspazQpemTEot18W3uJGSdQz2x/33WY26hzSj1idkKGJ
TuIfvmdL8Qwtief7Gp4oSM32Q0fnsAXxPwal4TdiETEDwE/sDXAiDrduHnyaHSBB
vJTd4wOsKuPvm7XMfK+DBHqdgxVQmpd8ymGlACVrdDw/941msByhf91CuKC+DlWi
tpyJBfkuwvhRvzwQ6+HKOjivi0rK0owzmPjjb716UekfBLVRdE01cbM86zrkn74x
3IQLUGew8oHNPCZICujWznihJvOuJgfWHxaDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpJ7c+y6bTgcZzXT5S50e5bR4+IgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wSjdjLXk2YlRnY1p6WFQ1
UzUwZTViUjQtSWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKz9qXUih17W6mWuffvk65eTaQq00xRpr0sJ
tzaU2i9gbhhHK+o04ghwvRjjkGPZxY+AZbiXbpFplu3Xwk6XdOz3S0L9CJPOi0Hb
dZZh311cZBe70r5TSkRhp2sRGzKZimhmpvOc2Te7iAVgOlh4z1N0NvNRzMKdVEp3
5I5dcIyC+Df/FSdOrMxz3yy2RR2+pG1tAbwi8qNTCUV0e6wt9tqBhFoeS1pLyMbB
62Lz7Pr0RJRvCq+DliEcu6+qpyLgxjIkjCjb1Wq/oUUoKGvbppUf78MRBabppHBS
Zoc4ZI4dARlDCvU9/vmOkkQ65fNHh7Vfg4DP/Dq3Jj69rvnwwc0=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:11 2025 by rpki-client