Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tLHnRzKtVrHflHcodEwP0irMo_4.roa
File: tLHnRzKtVrHflHcodEwP0irMo_4.roa (raw, json)
Hash identifier: TZ4gm6NQ6kYcHxBgB1og2Z10PGzteSsnYZ5VwwkMwUo=
Subject key identifier: B4:B1:E7:47:32:AD:56:B1:DF:94:77:28:74:4C:0F:D2:2A:CC:A3:FE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tLHnRzKtVrHflHcodEwP0irMo_4.roa
Signing time: Sat 24 May 2025 12:38:33 +0000
ROA not before: Sat 24 May 2025 12:38:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 12:38:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B4B1E74732AD56B1DF947728744C0FD22ACCA3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:4d:8c:31:d4:15:d9:af:0d:29:5b:50:6a:
48:72:4a:26:c4:81:4c:21:8f:1d:4e:c0:4e:29:14:
da:ae:81:aa:e6:1d:b5:5e:ab:dd:0b:e7:8c:ea:93:
38:09:ac:df:56:4b:1c:f0:aa:f4:a1:78:d0:7b:df:
37:5c:a7:6c:e3:0d:b8:00:69:82:0c:41:0d:61:eb:
80:0a:b2:c8:cd:50:17:8e:c0:06:d6:c4:53:15:50:
0f:91:4a:50:63:86:df:e7:e7:27:0f:a7:da:a7:ea:
b0:ac:9e:40:34:2d:7c:80:08:7d:5e:bc:6d:2e:34:
65:15:da:34:da:11:37:4f:2a:39:68:f4:8f:81:54:
94:19:5c:24:fb:03:be:4a:ba:08:c0:a5:89:22:af:
18:32:98:dd:0f:d0:6d:3e:d5:5e:d8:b6:f4:8f:b8:
3d:e9:47:8a:77:90:8d:12:85:50:6b:0f:31:03:14:
e3:9f:e6:08:6c:10:8c:a8:b8:e1:ad:b2:ef:7b:ce:
ec:27:ab:75:50:45:c5:d7:5e:a2:48:83:2d:67:a5:
ee:c7:9b:a4:0d:01:db:56:03:53:a5:24:23:6e:67:
ac:08:4d:5d:02:2f:23:9d:ca:4f:c5:6b:c8:64:56:
59:46:b9:50:9d:89:a5:3d:fe:32:cf:c5:40:59:d8:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B1:E7:47:32:AD:56:B1:DF:94:77:28:74:4C:0F:D2:2A:CC:A3:FE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tLHnRzKtVrHflHcodEwP0irMo_4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:ad:dc:0e:19:a7:f1:7f:cc:c0:a5:33:f8:6f:01:72:20:95:
3f:e3:6b:2c:f2:3c:ac:72:28:e3:cc:6b:14:24:f1:d8:60:6a:
a9:90:66:fa:a9:2c:34:52:61:6f:23:b4:a4:84:58:fd:55:d2:
c3:0c:46:ae:c0:67:4f:b4:29:90:6e:50:ad:73:6e:59:fc:42:
f1:8e:04:06:cf:20:cb:f9:9f:75:7c:03:22:6d:11:57:3d:df:
1d:98:8d:9a:d5:82:a5:1e:d3:02:f3:67:9f:68:f3:70:15:81:
a2:84:c0:20:6c:17:5b:c5:39:6f:bb:5b:d4:8c:a9:3f:02:56:
6f:61:1e:4a:ed:2e:a7:54:9c:4b:cb:15:23:b7:35:dd:8a:58:
3c:95:29:81:ee:08:c8:24:92:45:7e:27:6c:87:66:ba:58:ee:
93:f2:47:db:03:d8:e1:ad:e8:1d:cc:c9:e2:21:cb:9c:ad:6a:
6b:6b:89:2d:22:bf:d9:a6:a3:05:35:cb:4b:79:0c:b8:b3:0a:
37:07:35:df:e7:8b:70:8d:58:9e:76:41:9e:9a:82:b3:5b:91:
65:02:af:24:f6:b5:98:cd:03:12:51:1a:a5:0f:b9:77:be:98:
71:6e:f3:b9:14:0e:44:6a:97:ec:60:b9:c9:24:f8:4e:5c:5e:
d7:e9:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:09:08 2025 by rpki-client