Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P-zF0B4guhGs1hx4SFbkfVaO8cE.roa
File: P-zF0B4guhGs1hx4SFbkfVaO8cE.roa (raw, json)
Hash identifier: GRkaSIxdQNWyl9/lmcPiih/wITHL4LbPcNT10PsVFKI=
Subject key identifier: 3F:EC:C5:D0:1E:20:BA:11:AC:D6:1C:78:48:56:E4:7D:56:8E:F1:C1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 033D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P-zF0B4guhGs1hx4SFbkfVaO8cE.roa
Signing time: Sun 11 May 2025 09:38:18 +0000
ROA not before: Sun 11 May 2025 09:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 09:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3FECC5D01E20BA11ACD61C784856E47D568EF1C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:b6:7c:24:1c:57:3b:eb:a0:43:11:a4:2c:
88:40:8d:98:75:71:f8:b4:c1:28:be:db:32:c5:f2:
3b:53:d4:7e:c9:ff:9f:d7:9d:7e:85:ca:e0:44:4b:
96:32:b2:32:2e:85:64:ee:ea:09:91:96:4f:40:d4:
8e:98:e5:b6:f8:df:9e:13:9b:43:9d:0c:a5:81:bd:
5a:c0:10:52:ae:c9:94:fb:04:73:9b:68:22:7c:19:
3f:4d:01:ad:f6:c8:e8:82:6a:bc:63:54:8e:20:64:
5c:eb:03:69:88:8d:f4:a9:3f:98:23:47:b4:b7:d8:
b1:33:60:8f:ad:76:d9:b5:3d:36:71:79:37:62:a6:
a9:58:db:e8:29:da:87:59:83:e2:a4:2b:cb:5a:23:
7f:d1:00:2c:e7:c4:a6:c0:3e:ae:f9:cb:d9:bd:33:
f3:0c:cb:19:ae:cf:a4:f2:c2:75:7d:e7:72:cd:1a:
ab:49:00:0a:34:22:d8:9f:65:0b:89:47:f3:51:6f:
6d:4c:4d:d5:d2:89:40:10:b1:72:6f:33:70:b2:b2:
38:94:7d:3c:e2:83:4e:61:e7:8b:a2:81:55:e2:3f:
6f:4b:42:22:27:4d:ce:46:e4:4e:9b:1e:02:f6:06:
7d:84:1a:86:a2:bf:77:e9:da:23:59:04:0c:4b:f7:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:C5:D0:1E:20:BA:11:AC:D6:1C:78:48:56:E4:7D:56:8E:F1:C1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P-zF0B4guhGs1hx4SFbkfVaO8cE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:00:c6:5b:a8:3c:df:5f:56:2f:5a:2c:de:11:f7:c0:5a:ae:
2b:5a:88:df:8d:d6:76:17:2b:3d:0f:0d:d3:c7:1d:bf:35:35:
ad:37:a7:c1:65:44:bb:50:09:a6:0a:b3:83:d9:12:ce:af:3d:
1b:a4:de:64:c8:a3:d6:9b:ba:66:48:e5:d1:35:7b:44:4f:c2:
25:4b:e3:4a:7c:27:90:70:0b:2d:e5:6e:12:a6:62:fa:fe:58:
96:de:1d:0f:16:f6:e5:bb:d8:88:62:0b:88:b0:bb:c2:9b:ce:
28:94:dc:a2:54:fc:66:26:04:cc:b6:28:47:34:9b:f6:9d:15:
98:8b:ff:01:c7:55:76:b5:95:60:e2:d3:47:0f:00:6f:93:c6:
d1:45:d7:c8:29:26:f2:3a:a3:a0:de:14:d3:cc:a6:15:77:df:
04:df:2d:74:31:d3:58:52:d1:a8:80:3c:2f:2d:3d:c7:58:2b:
1e:7d:59:f1:e4:df:a2:43:e7:7f:0c:df:38:e6:a6:f3:72:2d:
ab:a4:73:c3:f5:4e:8d:25:cc:ac:e4:3e:22:74:b3:fa:44:27:
a8:ed:4d:c9:1d:3d:79:e9:cc:30:6f:1b:3f:22:90:47:57:c8:
93:b9:ec:4b:14:6f:f1:26:ab:e9:12:60:eb:17:04:35:ad:84:
a8:6f:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:57:47 2025 by rpki-client