Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/usFne5LDJsWX9fRSL9rr84T0MU0.roa
File: usFne5LDJsWX9fRSL9rr84T0MU0.roa (raw, json)
Hash identifier: jv9HKbKTBXTC+QCqxeh4qDzTnBWU/O0dTi0qylRAC/Y=
Subject key identifier: BA:C1:67:7B:92:C3:26:C5:97:F5:F4:52:2F:DA:EB:F3:84:F4:31:4D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A91
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/usFne5LDJsWX9fRSL9rr84T0MU0.roa
Signing time: Wed 11 Jun 2025 12:09:45 +0000
ROA not before: Wed 11 Jun 2025 12:09:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6801 (0x1a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 12:09:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BAC1677B92C326C597F5F4522FDAEBF384F4314D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:b4:9c:f2:24:df:b2:af:14:9e:d5:ec:94:
34:3e:01:03:06:53:0d:4c:f7:3b:30:03:5b:c9:c1:
8e:3e:79:12:6e:be:5c:8b:1f:76:5a:59:2d:37:bc:
bf:b4:90:88:23:4c:7e:4d:17:9e:ee:15:ba:56:79:
e4:7b:bc:24:d3:9d:55:46:89:5d:a6:ac:49:bb:9c:
2b:b4:92:e6:e2:6f:0e:9d:62:64:36:f0:3b:c0:7b:
d5:73:d2:b2:ed:41:88:a8:21:c8:18:f3:8f:1e:d3:
20:6b:bf:a8:ca:ad:ea:00:96:58:66:c8:28:8d:6a:
8e:74:25:e1:45:3e:01:44:30:99:ba:94:2b:97:ba:
e8:f3:03:12:02:98:8e:c3:87:7c:ea:60:1f:67:23:
42:2c:e5:5d:0a:6a:eb:c5:f7:20:f8:0f:af:c7:09:
bc:9a:fd:3a:6d:b8:55:06:62:f3:a4:6d:db:e5:78:
0c:ea:1b:c4:5f:28:0d:c8:58:1a:25:e3:ae:b4:cd:
ce:ea:44:ec:ef:ce:cb:25:78:2c:28:6d:17:8d:52:
d0:37:83:0b:2f:25:17:19:e3:46:f2:3f:1c:41:2a:
dc:1d:a9:94:88:5d:aa:10:fa:0c:5d:22:b2:b8:91:
5e:cd:69:56:44:82:23:07:21:a2:cf:2e:bc:c0:c7:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:67:7B:92:C3:26:C5:97:F5:F4:52:2F:DA:EB:F3:84:F4:31:4D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/usFne5LDJsWX9fRSL9rr84T0MU0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:71:ca:a5:51:15:b7:62:b6:da:23:06:8c:7e:55:d8:28:11:
60:78:33:cf:4a:a9:f8:7c:15:a5:2b:cf:1e:83:47:96:27:ce:
22:22:56:34:b0:26:37:27:75:5d:c3:c8:2a:52:e4:72:88:e2:
43:45:8b:50:6a:7c:d2:76:fe:fa:6c:af:ae:10:0c:9e:9c:72:
21:85:c6:bd:67:32:57:a1:33:0a:06:eb:36:55:4f:65:87:5f:
1f:13:ff:6f:a7:3b:0e:93:35:1f:1a:1b:79:ad:fc:43:b4:be:
a3:eb:63:6e:15:84:ff:1a:1e:2a:a7:24:08:eb:c4:09:83:54:
64:4c:44:bb:6f:5a:ae:64:04:6e:30:61:2f:6e:32:69:25:b5:
a8:7c:1f:ed:29:7c:c1:29:2d:d7:dd:82:17:19:7d:88:d6:b0:
9f:1f:9d:ac:c5:49:93:29:b0:6a:e2:23:58:79:e4:72:61:8c:
e0:fa:67:26:a6:49:2c:80:b5:f2:78:81:49:6e:56:50:63:09:
37:58:db:95:0d:e3:b4:ec:5d:33:da:89:ef:22:47:0c:67:90:
20:a7:3f:07:a4:8e:93:68:c8:02:a8:91:9f:d2:ab:f5:7b:25:
b9:34:5d:2b:13:e5:d7:6a:26:43:e3:a4:8b:1c:0f:fa:45:b6:
65:35:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 04:56:54 2025 by rpki-client