Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CBnm0a7kmrozAq_BvDArdvdwykk.roa
File: CBnm0a7kmrozAq_BvDArdvdwykk.roa (raw, json)
Hash identifier: COPgwYjDIaTRISdHqMAp5L5PEocU3YEjynEBZnQmQ5Q=
Subject key identifier: 08:19:E6:D1:AE:E4:9A:BA:33:02:AF:C1:BC:30:2B:76:F7:70:CA:49
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0529
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CBnm0a7kmrozAq_BvDArdvdwykk.roa
Signing time: Tue 13 May 2025 23:08:03 +0000
ROA not before: Tue 13 May 2025 23:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 23:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0819E6D1AEE49ABA3302AFC1BC302B76F770CA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:1d:4f:e1:57:f2:2e:2c:f1:d2:aa:ac:7f:
e0:96:ba:3e:1e:38:0a:87:e6:4d:4c:48:9b:67:37:
95:12:f2:3a:30:5f:82:15:1a:c3:79:56:2b:7c:0f:
59:60:28:0a:6d:6f:87:02:90:e1:b5:e9:fc:c0:6d:
d8:02:cb:72:ef:7b:bb:f3:6b:b9:e9:22:18:2e:c9:
ce:6a:8d:80:65:2a:fc:2b:c5:0e:5f:92:ba:58:10:
73:d6:e6:5d:74:27:b9:38:13:7c:31:41:e6:d4:fa:
ba:b6:1f:77:fe:98:76:ae:f6:d3:9e:50:26:d3:3b:
a4:50:bb:bb:fb:26:84:6e:77:1a:8f:3c:e0:34:3b:
3c:35:15:bb:be:de:a2:4c:e3:0c:04:b4:fe:ba:77:
b3:54:7e:85:04:75:32:6c:71:f5:bc:f2:62:c3:7a:
46:3d:44:4e:a8:51:dd:96:a2:63:32:f2:f5:dd:35:
e3:d4:d9:7e:2d:73:8f:0d:73:a6:b2:8a:cb:08:9b:
21:bc:87:fe:96:1b:d1:24:a7:92:b4:8c:fe:34:9b:
74:c7:30:71:32:c9:4e:0a:ca:f3:eb:ac:18:e6:b3:
40:03:76:f2:7e:e2:a4:87:79:69:b1:d9:28:81:14:
08:3e:e5:7a:10:ad:a7:90:70:8f:08:db:9b:f0:e3:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:E6:D1:AE:E4:9A:BA:33:02:AF:C1:BC:30:2B:76:F7:70:CA:49
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CBnm0a7kmrozAq_BvDArdvdwykk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:2f:a6:0b:20:51:81:ae:7a:6c:a9:9d:00:e2:a5:29:79:97:
12:ee:cb:f6:11:1d:01:92:85:6e:39:3c:26:a3:52:02:77:c7:
10:65:b7:96:26:c0:f2:65:ab:c3:1c:56:a7:10:c3:58:2b:ca:
e2:db:d7:9f:2b:09:85:61:d8:af:62:84:8e:23:89:57:2f:3e:
61:dd:dd:81:85:c2:80:66:1f:48:aa:ed:78:ca:53:7f:72:25:
9b:c9:9b:09:4a:ce:1e:bf:a7:58:5d:e0:8e:02:f4:58:8b:1e:
4b:e1:e7:a0:57:72:9b:77:a7:41:c9:1f:c8:06:a8:14:5b:b5:
11:41:51:2a:8b:18:79:b9:e2:9d:05:d2:96:6d:d3:d3:8c:69:
70:87:17:41:46:6a:0e:5a:04:7d:c3:a3:64:94:90:b1:c8:4d:
83:06:d4:4a:ea:02:c6:c9:a9:b8:43:82:e3:e5:5d:a0:71:af:
75:1a:0b:77:bd:46:1c:00:5b:84:e6:78:a2:0b:9a:de:e8:9f:
2f:cb:8d:0d:ee:3e:d6:97:2d:cf:14:b9:02:f0:3b:80:09:4f:
58:de:f2:43:1f:0b:4f:aa:1f:5a:91:f7:f9:c6:b7:64:34:1e:
33:a0:e1:cb:0c:97:96:0a:e6:a6:a3:72:ce:c9:df:f7:43:dc:
56:62:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:05:44 2025 by rpki-client