Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uOzbAy1PnG5ZmL_U2Z3RdvcmvVw.roa
File: uOzbAy1PnG5ZmL_U2Z3RdvcmvVw.roa (raw, json)
Hash identifier: rB5/Gn2TzFPdTKwtfRozmkeDW7aSjsISRVJEfU/lmEc=
Subject key identifier: B8:EC:DB:03:2D:4F:9C:6E:59:98:BF:D4:D9:9D:D1:76:F7:26:BD:5C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12C9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uOzbAy1PnG5ZmL_U2Z3RdvcmvVw.roa
Signing time: Sun 01 Jun 2025 03:09:18 +0000
ROA not before: Sun 01 Jun 2025 03:09:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4809 (0x12c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 03:09:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B8ECDB032D4F9C6E5998BFD4D99DD176F726BD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:fc:67:32:a0:06:8e:6b:b7:cf:f4:ab:c3:
59:6c:47:0e:fd:b9:5b:f5:3a:22:44:31:bf:f5:cd:
b7:22:fd:37:49:f9:d2:1b:fb:f5:ef:89:af:c1:80:
cf:17:93:00:8d:6e:f2:24:30:99:e9:47:70:12:8f:
32:b3:03:1b:83:80:0a:1d:49:12:04:c6:03:19:48:
7d:9c:2e:5d:a7:4b:e2:66:e1:25:61:8e:98:c0:97:
17:2b:a7:c6:36:16:2e:56:69:3e:4d:8b:33:d5:4e:
d2:02:ca:6f:77:1d:59:0c:ae:3a:2f:24:9d:4b:71:
6f:9d:3a:3d:4e:42:be:62:7d:45:69:14:29:89:45:
5e:4b:30:da:80:eb:9e:54:24:9d:c8:d6:b6:52:50:
f5:a4:60:52:5f:64:22:1a:31:42:55:d2:b0:37:d0:
a1:56:5e:6f:4f:2b:68:fb:11:17:eb:9b:e7:9c:13:
a4:b6:03:12:68:9e:72:59:9c:6c:4e:69:6b:91:ab:
1a:a9:a5:bb:73:8f:fc:2f:de:cf:90:e3:af:1f:4b:
37:3b:ef:37:1a:3c:bc:1e:83:28:4f:96:d4:03:38:
81:4e:b7:e7:83:20:6c:de:09:af:1e:13:ab:d5:3b:
40:8b:07:0b:4b:7e:c2:14:28:21:b7:d4:cb:1f:c3:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:DB:03:2D:4F:9C:6E:59:98:BF:D4:D9:9D:D1:76:F7:26:BD:5C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uOzbAy1PnG5ZmL_U2Z3RdvcmvVw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:f4:56:1f:8d:12:74:25:3b:02:d0:8d:4c:9d:84:5c:92:92:
c1:a7:3d:f6:bf:d1:c0:71:ad:96:88:1d:dc:4e:19:0c:55:d9:
3d:4b:03:4b:28:b7:14:a6:d6:0b:3c:aa:1d:bf:fc:5f:e1:84:
59:15:ae:23:9c:cf:50:32:6d:6c:53:2d:77:95:6a:b9:c8:1c:
f6:8f:79:43:e7:61:22:d2:37:da:df:ce:02:17:15:3e:09:e6:
81:c0:bb:50:0b:cb:ae:e8:85:69:9e:c3:fa:ca:fd:37:7d:5d:
ab:d2:e9:14:45:df:bf:a6:f5:1d:11:26:b5:26:c8:de:72:a9:
4e:8d:7c:cd:86:99:93:cd:61:0a:5f:ce:2d:34:aa:cf:e1:9c:
c2:f9:b3:df:30:5d:bc:b0:92:ac:d5:c4:58:e8:71:20:5a:f5:
21:e9:bb:50:22:85:94:eb:0f:29:75:d5:14:27:ad:f8:69:a2:
45:d9:d9:25:c5:f0:0d:78:51:b9:89:65:82:4b:f4:c2:37:d4:
09:b7:ec:83:8a:60:04:21:14:55:24:7f:14:a4:e9:81:93:97:
5d:80:16:9f:16:7f:65:18:c8:49:63:a4:60:d2:65:59:e3:fb:
be:59:52:cf:2e:08:07:5a:30:6c:d0:01:70:aa:ea:0b:99:6e:
eb:99:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:55 2025 by rpki-client