Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qaOyaSn1AWczeC4Ss06l9XTriFs.roa
File: qaOyaSn1AWczeC4Ss06l9XTriFs.roa (raw, json)
Hash identifier: qfsosrCthFqDIQx8KjgOOnxk16kAL8jodNRZaiFp9g4=
Subject key identifier: A9:A3:B2:69:29:F5:01:67:33:78:2E:12:B3:4E:A5:F5:74:EB:88:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1901
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qaOyaSn1AWczeC4Ss06l9XTriFs.roa
Signing time: Mon 09 Jun 2025 10:09:36 +0000
ROA not before: Mon 09 Jun 2025 10:09:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6401 (0x1901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 10:09:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A9A3B26929F5016733782E12B34EA5F574EB885B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:d6:43:15:f9:35:01:1c:62:db:6f:da:86:
de:84:c6:e3:8a:8d:30:02:2e:de:98:30:b8:ef:a9:
2e:63:c4:8e:37:99:72:93:4e:e4:72:90:bd:77:f8:
1f:a8:d4:7d:64:60:66:3a:f5:6c:9b:d1:24:71:5e:
da:4d:b5:1a:cd:12:13:98:95:15:32:f7:50:3e:22:
70:42:96:a8:79:3c:b0:d7:e0:1d:9a:d1:ae:2e:e0:
61:2b:ef:4c:42:42:80:b1:da:83:99:89:cb:0b:bd:
ff:a8:61:af:78:56:d9:c9:bb:80:2a:a2:16:2e:98:
83:0a:df:95:83:eb:06:97:54:d1:a0:39:d9:32:85:
93:a9:bc:8c:27:50:7d:b8:89:82:1f:e4:da:e9:b5:
41:e7:fa:c0:f2:f8:62:c5:a1:86:69:db:f0:9c:b7:
e2:1f:f9:de:0a:d6:73:82:fb:5b:66:de:f2:ab:fb:
92:64:59:73:d1:42:1e:52:54:23:98:d3:6a:08:d2:
6f:5c:35:0e:99:3e:32:66:62:64:3c:08:e3:6c:38:
7f:f9:c7:b3:c7:d2:ac:3a:54:57:53:dd:63:c8:cd:
4f:a6:3e:b3:e2:17:69:fa:fb:14:c7:70:4e:cf:67:
61:db:88:db:86:d5:78:94:25:ea:6d:55:fc:2a:a4:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:B2:69:29:F5:01:67:33:78:2E:12:B3:4E:A5:F5:74:EB:88:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qaOyaSn1AWczeC4Ss06l9XTriFs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:b4:2d:f9:c3:ee:5a:11:60:5f:d2:59:76:67:2b:84:a5:1a:
37:ae:46:f1:6b:1a:02:69:7c:09:ab:94:f5:89:34:98:53:97:
ac:c3:29:ca:46:ef:cb:f4:85:15:ac:6c:09:05:8d:8d:82:e7:
be:18:cb:f1:88:5e:b0:b5:a0:cc:68:ea:66:d7:bb:43:c6:15:
32:dc:36:5f:d0:14:e4:ff:b4:e8:fa:7f:af:c6:7e:fe:45:4a:
ca:99:94:9d:50:16:70:31:c0:08:3b:14:17:8c:4b:8c:90:77:
15:ef:23:bd:eb:14:ae:35:a9:60:71:24:4c:72:63:d7:42:73:
a9:40:5c:b2:b3:60:60:f3:63:d5:f2:02:8a:9b:96:2b:05:b4:
92:64:d1:04:e7:29:61:45:1a:50:6a:a0:67:34:b7:4d:3e:ff:
f0:17:14:38:75:93:54:c8:21:cb:5b:31:be:f0:09:c1:c2:18:
67:fd:77:86:6a:27:ee:c5:f4:68:44:82:f6:35:31:1d:ec:a4:
74:4f:10:17:a3:c6:1d:30:c8:80:c7:7e:e2:4a:8e:f5:43:c0:
5e:8f:f4:22:62:f4:98:a0:4f:ab:02:39:0b:e6:81:39:0a:9f:
a9:a0:f1:64:bd:68:5d:af:be:75:91:c1:9c:3c:a6:d9:98:94:
0c:49:5b:bb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkx
MDA5MzZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE5QTNCMjY5MjlGNTAx
NjczMzc4MkUxMkIzNEVBNUY1NzRFQjg4NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcRNZDFfk1ARxi22/aht6ExuOKjTACLt6YMLjvqS5jxI43mXKT
TuRykL13+B+o1H1kYGY69Wyb0SRxXtpNtRrNEhOYlRUy91A+InBClqh5PLDX4B2a
0a4u4GEr70xCQoCx2oOZicsLvf+oYa94VtnJu4AqohYumIMK35WD6waXVNGgOdky
hZOpvIwnUH24iYIf5NrptUHn+sDy+GLFoYZp2/Cct+If+d4K1nOC+1tm3vKr+5Jk
WXPRQh5SVCOY02oI0m9cNQ6ZPjJmYmQ8CONsOH/5x7PH0qw6VFdT3WPIzU+mPrPi
F2n6+xTHcE7PZ2HbiNuG1XiUJeptVfwqpLNLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqaOyaSn1AWczeC4Ss06l9XTriFswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9xYU95YVNuMUFXY3plQzRT
czA2bDlYVHJpRnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJa0LfnD7loRYF/SWXZnK4SlGjeuRvFrGgJp
fAmrlPWJNJhTl6zDKcpG78v0hRWsbAkFjY2C574Yy/GIXrC1oMxo6mbXu0PGFTLc
Nl/QFOT/tOj6f6/Gfv5FSsqZlJ1QFnAxwAg7FBeMS4yQdxXvI73rFK41qWBxJExy
Y9dCc6lAXLKzYGDzY9XyAoqblisFtJJk0QTnKWFFGlBqoGc0t00+//AXFDh1k1TI
IctbMb7wCcHCGGf9d4ZqJ+7F9GhEgvY1MR3spHRPEBejxh0wyIDHfuJKjvVDwF6P
9CJi9JigT6sCOQvmgTkKn6mg8WS9aF2vvnWRwZw8ptmYlAxJW7s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:22:19 2025 by rpki-client