Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ryCcc0d9Rodw45k_7X4PkXbWqZY.roa
File: ryCcc0d9Rodw45k_7X4PkXbWqZY.roa (raw, json)
Hash identifier: 6gG9Xh0DFtdVKVBGx8JvPsfc8kpD6zXUS3xxpFsnlik=
Subject key identifier: AF:20:9C:73:47:7D:46:87:70:E3:99:3F:ED:7E:0F:91:76:D6:A9:96
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1559
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ryCcc0d9Rodw45k_7X4PkXbWqZY.roa
Signing time: Wed 04 Jun 2025 13:09:30 +0000
ROA not before: Wed 04 Jun 2025 13:09:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5465 (0x1559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 13:09:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF209C73477D468770E3993FED7E0F9176D6A996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:48:3f:19:ae:d4:5b:ad:10:53:8b:c8:d1:
f8:99:d5:0e:be:62:8c:df:e1:5f:1a:d7:6c:8c:31:
a9:dd:82:ac:ee:5e:1f:c3:3a:52:63:9f:63:c7:8b:
b9:ba:3c:a9:c4:04:b2:8d:56:60:d2:1b:5d:5c:aa:
01:74:e3:77:a5:c7:22:5c:82:de:52:62:18:26:8f:
bf:cf:09:77:e8:39:a3:47:e7:67:22:51:fc:e6:58:
15:4a:ca:d1:72:9f:7e:24:16:0b:58:a8:86:8a:a8:
23:d0:ee:1f:13:64:8a:23:55:d7:ee:ef:c1:89:e1:
d3:a9:25:d5:a9:94:ff:cc:b2:92:27:dc:fa:78:e9:
bc:04:f0:d2:dd:48:e1:84:0b:91:b6:91:f9:80:26:
1c:61:05:41:bc:a6:24:e8:60:3d:8b:8a:55:f2:16:
70:25:de:0d:d3:76:af:2b:54:d0:eb:7e:e0:71:15:
9a:5c:f8:48:d8:35:4f:2b:70:66:15:38:30:4e:75:
67:c0:3d:14:a0:87:00:f0:08:5e:9a:4f:ae:b2:a0:
8e:8e:bc:6c:b0:26:f8:48:de:4a:c9:c1:63:fc:86:
7d:63:07:70:c4:3b:ff:bf:34:e2:41:ee:d7:0f:22:
b4:3f:e7:fd:76:dd:af:d3:77:59:d2:9a:df:db:a0:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:9C:73:47:7D:46:87:70:E3:99:3F:ED:7E:0F:91:76:D6:A9:96
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ryCcc0d9Rodw45k_7X4PkXbWqZY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:85:b9:84:72:51:ed:67:cc:b4:7f:45:af:d5:55:7d:4d:5c:
64:5a:d8:2f:88:99:9c:83:9f:c0:d1:51:8c:88:d2:55:ec:05:
61:d6:c9:b5:cf:54:56:4f:cc:ec:77:a9:ea:af:b2:d4:c4:26:
73:9b:7f:e0:cf:9a:db:a2:33:d5:fc:ff:e7:7a:99:ec:3f:3a:
be:20:b3:d7:95:e8:47:b5:b8:2e:3a:72:6a:9b:92:ec:f0:39:
11:6a:42:c3:79:40:75:1b:aa:3d:d6:e1:3c:d1:69:06:78:50:
ad:49:a6:ae:74:dc:fa:f6:5a:b2:f1:b5:bf:3a:e9:d2:ba:7f:
57:2f:e0:8b:fb:53:63:aa:0c:b9:64:7c:19:72:16:1a:6e:6c:
47:2c:86:09:bc:27:bb:83:60:98:79:e7:d3:62:63:e9:5f:49:
8c:a7:88:a8:b8:71:f0:0d:e2:95:07:9d:dd:7d:02:2a:a3:24:
df:15:c8:53:2c:af:cd:d0:4d:cc:4d:48:04:44:94:cd:e9:da:
6a:30:be:06:00:6f:6e:7a:08:ab:8d:28:c8:5a:60:fa:35:f4:
c2:e3:e6:0e:11:33:56:af:76:ff:e9:cb:9c:49:2c:35:3a:61:
94:20:c8:63:ed:07:f6:22:73:72:b1:2c:b7:c8:b7:e9:92:8d:
45:10:90:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQx
MzA5MzBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFGMjA5QzczNDc3RDQ2
ODc3MEUzOTkzRkVEN0UwRjkxNzZENkE5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+XUg/Ga7UW60QU4vI0fiZ1Q6+Yozf4V8a12yMMandgqzuXh/D
OlJjn2PHi7m6PKnEBLKNVmDSG11cqgF043elxyJcgt5SYhgmj7/PCXfoOaNH52ci
UfzmWBVKytFyn34kFgtYqIaKqCPQ7h8TZIojVdfu78GJ4dOpJdWplP/MspIn3Pp4
6bwE8NLdSOGEC5G2kfmAJhxhBUG8piToYD2LilXyFnAl3g3Tdq8rVNDrfuBxFZpc
+EjYNU8rcGYVODBOdWfAPRSghwDwCF6aT66yoI6OvGywJvhI3krJwWP8hn1jB3DE
O/+/NOJB7tcPIrQ/5/123a/Td1nSmt/boN4zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUryCcc0d9Rodw45k/7X4PkXbWqZYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yeUNjYzBkOVJvZHc0NWtf
N1g0UGtYYldxWlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADaFuYRyUe1nzLR/Ra/VVX1NXGRa2C+ImZyD
n8DRUYyI0lXsBWHWybXPVFZPzOx3qeqvstTEJnObf+DPmtuiM9X8/+d6mew/Or4g
s9eV6Ee1uC46cmqbkuzwORFqQsN5QHUbqj3W4TzRaQZ4UK1Jpq503Pr2WrLxtb86
6dK6f1cv4Iv7U2OqDLlkfBlyFhpubEcshgm8J7uDYJh559NiY+lfSYyniKi4cfAN
4pUHnd19AiqjJN8VyFMsr83QTcxNSARElM3p2mowvgYAb256CKuNKMhaYPo19MLj
5g4RM1avdv/py5xJLDU6YZQgyGPtB/Yic3KxLLfIt+mSjUUQkMs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:33:40 2025 by rpki-client