Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wyPorDKKhGh3qKx7Io3Bvw-dDfk.roa
File: wyPorDKKhGh3qKx7Io3Bvw-dDfk.roa (raw, json)
Hash identifier: +K2cYf/N7I3d9rxT89y3ReSS6dkS0FlIOtqlHSEM28Q=
Subject key identifier: C3:23:E8:AC:32:8A:84:68:77:A8:AC:7B:22:8D:C1:BF:0F:9D:0D:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1471
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wyPorDKKhGh3qKx7Io3Bvw-dDfk.roa
Signing time: Tue 03 Jun 2025 08:09:15 +0000
ROA not before: Tue 03 Jun 2025 08:09:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5233 (0x1471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 08:09:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C323E8AC328A846877A8AC7B228DC1BF0F9D0DF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:8f:2a:14:48:4a:49:f9:4c:53:ea:dd:28:
73:95:63:14:00:7d:57:6c:2b:5f:63:95:f6:e4:dd:
ac:b2:42:e8:1c:0d:fe:3e:71:21:76:29:88:48:dc:
58:dd:d8:bf:97:cf:43:23:72:69:da:f6:36:47:9a:
28:a9:51:ec:c3:13:e1:bb:19:f5:71:e0:81:37:40:
54:7b:ae:6b:6c:ae:9c:a9:16:aa:04:52:63:84:96:
8a:4e:12:fd:84:11:99:26:ad:54:b1:51:46:3a:2d:
61:74:26:e8:16:ad:7b:f5:c9:45:ae:43:b4:31:32:
73:70:c4:de:90:3c:02:7a:66:c1:52:b3:9e:2e:5b:
44:66:d7:c2:51:3c:d8:2d:9e:17:3f:74:b2:64:10:
99:e4:2b:4b:81:aa:6b:20:e3:b3:6a:b1:71:70:a3:
49:a1:9d:2f:eb:b0:78:89:e2:9d:ad:dd:56:4b:ac:
53:9d:2f:35:6f:1d:95:a0:dd:d7:f4:62:f3:19:f5:
86:97:32:b1:c6:0f:12:c4:25:db:4a:b7:eb:85:64:
67:d0:69:e6:02:f7:87:da:ea:04:e9:80:48:97:df:
37:f9:d4:71:cf:aa:eb:1d:1b:ea:1c:87:99:ba:f2:
c9:7d:e9:95:17:02:e3:ec:01:a3:00:4a:26:27:e4:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:E8:AC:32:8A:84:68:77:A8:AC:7B:22:8D:C1:BF:0F:9D:0D:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wyPorDKKhGh3qKx7Io3Bvw-dDfk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:cf:e3:23:c0:af:99:71:f7:44:6e:91:c8:2f:fe:72:ab:c5:
d5:fe:ae:10:07:93:19:f8:70:a0:80:36:2f:93:dc:3a:2f:ae:
c8:31:a9:d9:c6:51:6f:85:bb:2d:f4:7b:ed:a7:e7:8f:5a:54:
e1:3b:bb:7d:a7:b3:a5:dd:2c:4b:68:b2:e7:34:f1:45:35:d9:
33:7a:15:a3:48:15:e2:a4:9a:11:a1:47:4a:77:80:a0:be:75:
d5:ed:7c:dd:98:24:90:44:91:85:e7:29:b3:ee:4b:bf:f5:8b:
df:8d:a6:b2:8c:8b:fc:dc:56:81:80:73:5c:9a:af:97:a3:a3:
ac:3f:4d:4c:70:57:e0:21:82:6a:33:0d:25:59:f9:10:c3:0f:
4a:15:7b:a1:a1:ee:24:a9:bc:a1:63:5b:fd:92:89:6e:51:88:
17:d3:54:20:ac:58:6f:48:e2:58:c8:ee:6e:fe:59:15:16:dd:
af:f5:d8:3f:40:34:49:39:d5:88:94:e6:eb:3c:17:99:72:73:
18:0b:46:e4:d1:eb:0a:16:8e:7e:4d:7c:21:ce:6b:b5:be:ef:
35:d7:b8:dd:b1:ea:68:a2:84:ee:6e:de:16:54:76:90:87:a7:
7b:6d:a2:73:4d:3c:24:bc:80:13:49:e1:b8:c0:c5:9c:59:89:
12:34:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:11:52 2025 by rpki-client