Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/to_pVtE1IY7NGB8OjQhqX-BgCCI.roa
File: to_pVtE1IY7NGB8OjQhqX-BgCCI.roa (raw, json)
Hash identifier: OBu7ZXJE7Y6/9b3XSrzFXNZyMFQ7fMsAEotvf7qQl60=
Subject key identifier: B6:8F:E9:56:D1:35:21:8E:CD:18:1F:0E:8D:08:6A:5F:E0:60:08:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1881
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/to_pVtE1IY7NGB8OjQhqX-BgCCI.roa
Signing time: Sun 08 Jun 2025 18:09:44 +0000
ROA not before: Sun 08 Jun 2025 18:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6273 (0x1881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 18:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B68FE956D135218ECD181F0E8D086A5FE0600822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:ca:d5:4a:09:97:e6:c5:ad:6a:76:68:e3:
20:f8:22:38:5d:cd:9a:fe:fc:bb:fa:80:fa:bd:4a:
e5:a0:0d:b0:95:3e:54:20:cd:6e:ed:ed:d3:56:3b:
62:0e:29:80:b2:05:07:43:3b:d8:6f:67:58:a0:ff:
88:a8:a1:85:e1:08:c3:66:16:95:25:4e:f5:8b:29:
4b:14:e4:71:68:0b:de:db:28:81:dd:8c:3b:17:0d:
e0:34:13:f8:66:36:c8:2c:21:6f:87:10:51:f4:c1:
80:71:b0:63:62:be:29:ce:86:d6:b7:17:e1:4b:c7:
1e:c1:48:a7:cc:47:51:71:e2:0e:be:55:a0:0d:b5:
d5:ca:2e:4d:3d:4b:37:5d:c3:d1:c7:d6:ef:84:f5:
ad:eb:85:63:c1:9a:3f:e2:b1:fa:0b:43:3f:76:db:
7c:22:01:cd:26:48:7f:22:4d:c5:72:13:02:fd:aa:
a6:af:51:73:f9:bd:02:3e:63:04:d1:76:ea:f9:b2:
4c:97:2f:b0:50:79:9b:72:64:4f:5c:33:12:66:f9:
bf:8d:34:26:fc:39:3c:1f:88:31:ef:bb:23:16:a2:
95:6e:05:c2:e3:e4:16:df:89:7d:08:19:e2:41:95:
ca:a9:8c:1d:81:3f:db:46:67:12:72:8a:54:1f:e5:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:E9:56:D1:35:21:8E:CD:18:1F:0E:8D:08:6A:5F:E0:60:08:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/to_pVtE1IY7NGB8OjQhqX-BgCCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:4d:6c:4f:6d:52:22:e0:e5:6a:47:87:8d:db:c8:8e:9d:a8:
30:cc:61:9c:07:b5:fa:b9:04:2c:38:d0:28:4b:3a:c2:c7:f6:
52:cb:4f:a8:e3:6d:de:d4:08:6d:f8:2c:c6:3a:c7:c9:14:d2:
1c:77:c0:15:55:0c:b6:34:09:31:83:95:48:a3:37:36:ea:7c:
bc:73:73:7e:a2:5b:22:71:54:2e:7b:55:08:49:96:4b:24:f9:
b5:cf:29:39:62:af:30:16:14:03:6e:c6:31:96:41:6e:27:51:
6b:ed:76:67:ba:53:a4:0a:24:1b:7a:17:57:6d:05:2c:d4:8f:
42:d0:08:f1:fb:a0:b6:e6:f9:4d:19:22:a2:c1:4e:d4:6a:35:
fb:e2:dd:80:ae:a9:c9:15:51:7f:c8:29:e6:b3:a9:19:67:4c:
86:15:76:c0:a0:8c:ef:5e:6a:f8:db:31:f2:67:c0:ca:48:64:
a4:89:99:b6:aa:45:1d:cc:2f:d9:25:f3:2b:6d:64:93:3e:97:
5d:06:31:83:6d:e2:5e:4b:71:b2:5b:44:b3:e8:32:e2:6b:ee:
52:5e:4f:60:2c:eb:dd:fb:f7:62:e3:68:6a:f3:31:ea:0f:8a:
a8:0e:ca:cc:be:14:a0:8e:13:77:e6:af:6e:52:44:e2:64:1a:
6f:c5:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:06:38 2025 by rpki-client