Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uYAw3PqgtKkR2s9te_jkhmnCy90.roa
File: uYAw3PqgtKkR2s9te_jkhmnCy90.roa (raw, json)
Hash identifier: 9eGFE+iu0EaNzuAuFn6CCfMjCV9UaAUxISusndOiyVI=
Subject key identifier: B9:80:30:DC:FA:A0:B4:A9:11:DA:CF:6D:7B:F8:E4:86:69:C2:CB:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 188D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uYAw3PqgtKkR2s9te_jkhmnCy90.roa
Signing time: Sun 08 Jun 2025 19:39:34 +0000
ROA not before: Sun 08 Jun 2025 19:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 19:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B98030DCFAA0B4A911DACF6D7BF8E48669C2CBDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:f6:aa:06:8c:1c:c0:9a:32:16:d9:ad:08:
bb:a8:fb:09:c9:d3:ca:3f:69:95:14:92:4b:1a:bc:
f9:48:70:ac:bc:d2:53:ec:91:5b:83:20:11:1f:59:
3d:00:c2:4f:fe:03:77:cb:0a:b1:e5:b0:53:f2:ed:
c7:04:04:7c:6c:f5:ec:da:a0:93:5f:b9:6a:b4:c7:
6d:65:77:cd:6c:49:6a:f6:b5:f0:07:8d:e3:fa:01:
f2:bf:c7:e1:11:d5:8d:03:37:ce:0c:0b:e5:ef:75:
c7:49:ac:d8:ae:1f:e1:77:73:6e:e2:2d:6f:2a:e2:
2c:f0:1e:2f:7f:0c:e8:61:fc:0d:fa:d6:79:03:1f:
9c:d3:59:c6:ab:6c:9a:93:9f:0d:8e:ee:9b:eb:6a:
27:2a:13:dc:7c:69:32:0c:80:76:d3:8b:d4:a7:6d:
30:ea:a2:be:8b:e6:05:02:f8:2c:84:72:26:12:37:
be:d1:cd:4b:1c:a9:87:c9:08:7c:37:b3:09:53:68:
9e:1a:7c:2f:08:02:49:70:08:0c:eb:85:e6:bf:da:
9a:33:54:9e:88:b4:31:4d:31:71:58:cf:9b:d7:14:
52:92:b4:4d:5f:91:56:17:d1:77:7b:16:48:0a:b1:
ff:0a:11:e9:1e:b3:5c:f9:99:08:18:61:7a:2e:c4:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:30:DC:FA:A0:B4:A9:11:DA:CF:6D:7B:F8:E4:86:69:C2:CB:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uYAw3PqgtKkR2s9te_jkhmnCy90.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:ae:a9:39:fe:52:47:11:fa:47:03:64:83:63:3f:a2:30:ee:
5c:8f:de:4f:28:0b:2a:2c:d0:3e:2a:8e:5a:03:51:3e:78:7a:
eb:20:21:bf:38:82:27:aa:bf:9d:41:24:e1:be:29:06:25:76:
67:29:31:94:4f:8c:c9:fd:40:df:9a:9c:67:67:29:3a:45:27:
fb:b6:a3:01:cb:93:23:3b:d2:23:d9:b2:d3:b4:12:13:a2:85:
c1:2d:9e:13:77:08:60:d7:9b:07:6e:ce:b5:1d:78:d1:86:ab:
ef:bb:f9:98:6e:2c:29:0a:3f:c7:bb:c1:b0:12:1c:fe:a0:7a:
96:51:e7:51:9a:6f:fd:e6:e5:05:52:1c:a0:88:70:01:2d:c8:
78:73:0e:cb:b4:22:86:39:45:8f:f3:3c:ff:6f:aa:26:04:6c:
7f:78:5a:2a:51:ee:aa:fc:f2:33:32:81:51:9c:be:3e:a8:fd:
57:2c:35:e9:43:00:6a:89:49:07:25:b4:2e:fc:06:eb:03:1a:
d6:cb:3d:3a:c2:ee:00:dd:84:08:01:6c:20:2a:ac:4d:f3:f8:
1e:90:0a:13:30:ca:28:3d:a9:1b:96:d1:4f:4b:4e:af:13:95:
b2:8a:4a:b3:aa:01:06:dd:3d:ad:5c:f5:e1:e9:41:c4:d7:89:
52:22:53:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgx
OTM5MzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEI5ODAzMERDRkFBMEI0
QTkxMURBQ0Y2RDdCRjhFNDg2NjlDMkNCREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0/PaqBowcwJoyFtmtCLuo+wnJ08o/aZUUkksavPlIcKy80lPs
kVuDIBEfWT0Awk/+A3fLCrHlsFPy7ccEBHxs9ezaoJNfuWq0x21ld81sSWr2tfAH
jeP6AfK/x+ER1Y0DN84MC+XvdcdJrNiuH+F3c27iLW8q4izwHi9/DOhh/A361nkD
H5zTWcarbJqTnw2O7pvraicqE9x8aTIMgHbTi9SnbTDqor6L5gUC+CyEciYSN77R
zUscqYfJCHw3swlTaJ4afC8IAklwCAzrhea/2pozVJ6ItDFNMXFYz5vXFFKStE1f
kVYX0Xd7FkgKsf8KEekes1z5mQgYYXouxEsvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuYAw3PqgtKkR2s9te/jkhmnCy90wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni91WUF3M1BxZ3RLa1Iyczl0
ZV9qa2htbkN5OTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHauqTn+UkcR+kcDZINjP6Iw7lyP3k8oCyos
0D4qjloDUT54eusgIb84gieqv51BJOG+KQYldmcpMZRPjMn9QN+anGdnKTpFJ/u2
owHLkyM70iPZstO0EhOihcEtnhN3CGDXmwduzrUdeNGGq++7+ZhuLCkKP8e7wbAS
HP6gepZR51Gab/3m5QVSHKCIcAEtyHhzDsu0IoY5RY/zPP9vqiYEbH94WipR7qr8
8jMygVGcvj6o/VcsNelDAGqJSQcltC78BusDGtbLPTrC7gDdhAgBbCAqrE3z+B6Q
ChMwyig9qRuW0U9LTq8TlbKKSrOqAQbdPa1c9eHpQcTXiVIiU9w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:28:53 2025 by rpki-client