Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RbKiSvjIfY7qFgNlxxMYG1-2Nig.roa
File: RbKiSvjIfY7qFgNlxxMYG1-2Nig.roa (raw, json)
Hash identifier: iZYrECUEQL7EGZimT5wgS1VPwT5tCa0BwowrWVmUxAE=
Subject key identifier: 45:B2:A2:4A:F8:C8:7D:8E:EA:16:03:65:C7:13:18:1B:5F:B6:36:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 015D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RbKiSvjIfY7qFgNlxxMYG1-2Nig.roa
Signing time: Thu 08 May 2025 21:37:45 +0000
ROA not before: Thu 08 May 2025 21:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 21:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=45B2A24AF8C87D8EEA160365C713181B5FB63628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:b0:0c:da:34:3b:ae:11:9c:77:c6:e9:ee:
ab:72:d6:33:69:f0:40:26:94:4e:d2:54:bd:c2:dc:
18:2e:1c:78:e2:4e:89:8e:9d:c6:53:16:86:be:db:
0b:c9:6f:8e:36:2e:b1:77:46:2d:2a:07:35:20:80:
8a:67:4e:13:67:15:55:95:80:65:f3:06:c7:bb:c0:
92:32:ab:fc:c7:2e:2c:45:15:31:c1:cc:0f:4d:ae:
e4:d6:5d:9b:01:44:bc:a8:07:79:75:82:4a:d0:0a:
f6:5a:2e:8d:22:7d:12:af:1f:cc:c2:8a:cd:03:3e:
99:d4:f7:13:41:42:d8:a2:f8:88:ec:52:41:8e:f2:
f6:79:96:eb:61:00:23:e6:fc:ae:28:44:1b:5e:69:
00:77:b6:3f:06:24:f7:81:38:38:3f:b9:da:63:5b:
ef:93:74:8c:14:bd:1f:5b:2a:bc:20:20:d4:a5:0a:
a9:6a:fb:8e:07:cf:a4:c4:3e:41:1f:74:4f:6d:69:
f7:8b:c2:df:e1:40:34:a3:45:fb:bf:ae:de:51:58:
aa:19:86:e3:b3:78:fd:23:9a:fa:e1:fe:7c:f8:2d:
be:73:97:71:86:c5:79:69:a5:cc:27:25:a9:dd:9a:
49:e1:00:60:d1:8f:24:e3:4f:c6:4c:6c:f2:73:a5:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:A2:4A:F8:C8:7D:8E:EA:16:03:65:C7:13:18:1B:5F:B6:36:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RbKiSvjIfY7qFgNlxxMYG1-2Nig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:0f:da:0a:98:a4:06:3d:d6:a1:ff:59:21:f5:d1:26:50:ee:
e0:28:2c:1a:54:a8:e5:de:44:80:66:a3:52:e1:58:8d:59:3c:
fd:28:54:45:c8:79:7c:69:ce:18:a8:c3:fb:7f:ef:d5:38:e6:
83:19:bf:c2:8c:a7:a9:ec:ed:1a:3e:11:c0:2c:87:9c:1c:3b:
fc:4a:d7:f3:63:95:7a:8b:d7:e0:48:0f:a8:eb:1b:9b:31:7b:
86:d9:21:a2:b3:1d:b3:b8:e1:32:12:06:57:2b:23:21:c9:e2:
3f:34:ec:cd:bc:dc:65:79:6d:8b:ec:5d:6e:15:ee:d1:3e:0c:
65:da:6a:3c:0c:a6:e1:cc:ce:2b:81:0d:57:4d:cc:de:33:d8:
e8:d9:51:fc:42:4d:5b:ce:8f:31:6d:3d:9d:d5:97:84:f5:44:
89:05:89:80:4e:b5:75:87:9f:95:63:dc:39:97:c7:09:ac:06:
e6:31:60:a1:9b:41:b6:2b:1d:f0:58:ee:79:9a:16:b4:e6:41:
6b:5b:d4:c8:52:ca:53:67:57:2c:6a:5d:98:ff:cc:5e:8d:bc:
4f:8f:d0:8f:60:71:d6:3a:d0:4f:24:4d:d2:bb:f9:d4:95:b6:
fd:77:62:77:ff:31:bc:ce:8b:bd:0b:40:ff:c2:5a:fe:28:d4:
58:a7:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:35:13 2025 by rpki-client