Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RorRPSP--9Y9bVBGORatgZExQ10.roa
File: RorRPSP--9Y9bVBGORatgZExQ10.roa (raw, json)
Hash identifier: TZR+frAqTG0ZRXVbgks25hv+3ZFxNj7NFanm35Z4haQ=
Subject key identifier: 46:8A:D1:3D:23:FE:FB:D6:3D:6D:50:46:39:16:AD:81:91:31:43:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0459
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RorRPSP--9Y9bVBGORatgZExQ10.roa
Signing time: Mon 12 May 2025 21:07:57 +0000
ROA not before: Mon 12 May 2025 21:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 21:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=468AD13D23FEFBD63D6D50463916AD819131435D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:70:c5:08:e6:ef:79:9f:bf:19:8c:9e:00:
8d:99:0a:69:e2:b1:8a:8a:9a:d6:85:53:ab:bc:12:
67:5a:7d:df:55:60:4a:b9:fa:36:40:d6:d1:47:2f:
0f:6f:37:75:fc:48:c9:4f:72:5e:a3:34:2b:32:34:
ab:75:ff:61:22:92:5a:60:2c:4d:d7:de:59:0f:9d:
32:0b:9c:be:75:46:69:6d:be:37:d5:0a:11:0a:b9:
19:1c:e9:a7:5c:83:e0:8d:57:b2:ef:38:2c:2a:0b:
da:7f:15:c1:5a:02:32:c6:3b:58:7b:d3:8b:7f:c8:
a5:2c:7f:ef:50:30:d0:7a:e9:af:ae:81:2f:8b:00:
05:45:69:80:2d:6d:ae:bc:67:9d:92:81:2c:a9:13:
05:10:e3:08:24:72:89:cc:e5:01:bb:bd:2c:e2:5b:
9f:fa:8d:ea:9e:27:69:75:f1:aa:3c:78:d1:40:a1:
71:20:2a:d0:dc:5c:94:e4:51:1a:da:d6:66:9a:fe:
c3:64:13:56:ec:99:03:7e:c7:39:91:68:8f:2a:2e:
cd:fa:c2:f9:ab:e9:0e:56:b0:5a:b4:3d:6b:70:c6:
02:32:09:cd:a9:29:81:0c:93:d2:d9:77:ab:0b:49:
1a:3f:be:51:6b:b0:48:34:89:09:a0:c3:48:06:6f:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:D1:3D:23:FE:FB:D6:3D:6D:50:46:39:16:AD:81:91:31:43:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RorRPSP--9Y9bVBGORatgZExQ10.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:a9:7b:db:5c:f3:a4:30:5d:b9:d5:d7:e3:d2:22:fa:02:de:
ec:b8:a0:cf:cb:51:b1:81:f7:dc:12:5d:a4:c0:35:23:40:b3:
48:9b:0d:81:42:86:cf:30:0e:61:28:8c:89:fd:af:b3:75:87:
70:48:dc:52:21:dd:1c:80:f8:53:e4:2b:2a:3c:92:15:9f:ad:
4d:55:1a:7c:a0:6e:4d:80:8a:eb:09:f8:88:30:f1:b0:a5:38:
be:62:d5:f9:cb:23:a3:2e:56:69:c9:c1:69:3d:d2:b1:ea:9b:
ab:72:91:7a:bb:6a:f2:f8:23:e5:56:66:14:d2:4a:38:34:1e:
28:f0:7a:fa:a0:31:78:b2:16:4c:8b:c7:4e:7b:36:24:73:25:
b8:88:38:53:47:60:6c:00:c7:f1:99:45:b8:f4:90:30:fe:c9:
f1:a9:ed:8b:50:02:da:57:f3:92:8d:89:91:af:7f:59:4b:89:
ef:ac:76:9d:fa:6c:1b:51:c6:9b:47:d7:c8:f2:0d:eb:7d:e9:
8e:fe:f1:ab:b3:51:6f:f1:14:15:b9:f4:3a:39:00:b5:a1:f4:
62:96:4b:2b:9e:68:fd:d0:1b:b3:82:6e:74:09:19:e0:29:b1:
22:66:39:2c:c9:a2:4b:06:28:9a:6f:0b:8f:3a:5c:6b:eb:fc:
2f:2d:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:57:53 2025 by rpki-client