Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cR8IwsQGrTJqpF-uytp3Rr9gcF4.roa
File: cR8IwsQGrTJqpF-uytp3Rr9gcF4.roa (raw, json)
Hash identifier: NYikFa0XmTx0/qUFUE/kun7Ki2KL1ZoaeV4s/lkZ4Fg=
Subject key identifier: 71:1F:08:C2:C4:06:AD:32:6A:A4:5F:AE:CA:DA:77:46:BF:60:70:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0859
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cR8IwsQGrTJqpF-uytp3Rr9gcF4.roa
Signing time: Sun 18 May 2025 05:08:09 +0000
ROA not before: Sun 18 May 2025 05:08:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 05:08:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=711F08C2C406AD326AA45FAECADA7746BF60705E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:78:e4:b9:e3:bd:05:80:68:4b:c1:aa:2e:
1b:0b:be:d6:02:b9:e1:a1:c3:5a:ab:bc:5e:73:11:
97:e0:69:e3:9c:03:c8:84:c4:41:12:48:f6:03:1d:
0f:1c:64:91:a6:1e:73:5a:2e:a6:55:e0:66:f8:9b:
e1:fb:1e:fe:79:3b:ca:e6:b4:ab:d3:82:23:0e:ea:
e5:f3:be:42:71:b9:de:40:21:0b:45:81:bc:f1:22:
04:ba:bd:43:1e:8e:7a:92:f0:84:d7:6b:63:ce:15:
53:28:4e:8c:da:7e:25:ec:28:dd:34:77:c7:01:7f:
d6:5f:14:06:72:1d:9d:8a:17:7a:7b:f9:ea:0c:58:
3d:a3:76:44:9a:39:82:bd:13:c6:49:92:bc:bf:08:
a6:39:36:3d:04:2b:b2:dd:97:70:bf:48:96:fc:05:
3f:99:b2:ca:50:d5:db:f6:9f:2e:46:e3:91:3a:83:
63:65:ce:1e:77:c5:05:13:c1:7d:a8:6f:21:00:c0:
08:e8:59:36:26:82:2f:57:66:b3:7f:cb:10:82:4b:
65:a9:14:28:72:c2:8c:e2:b5:0b:82:44:a6:eb:b8:
1b:a2:ee:8f:13:81:56:0f:f6:40:ec:25:4b:92:d4:
fa:40:9c:e9:b6:d0:6d:64:ff:10:1c:b5:2b:12:42:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:08:C2:C4:06:AD:32:6A:A4:5F:AE:CA:DA:77:46:BF:60:70:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cR8IwsQGrTJqpF-uytp3Rr9gcF4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:8c:82:0c:57:3e:f4:9e:3a:66:c7:76:aa:dc:eb:88:60:8e:
09:9c:d7:f8:f7:03:77:52:e8:f5:45:3c:87:93:23:5f:ba:3b:
7e:ab:f6:cb:b2:07:d5:2c:3f:76:6a:61:d0:82:ec:80:df:99:
aa:44:1a:66:ae:3d:93:a3:f0:9e:af:70:10:33:48:f6:ce:d5:
7d:9b:c1:11:77:f6:9b:84:55:82:c0:49:52:76:da:1d:1d:60:
91:15:ab:d8:f5:25:02:2c:bb:00:69:fd:9b:a4:ec:bb:16:4a:
ad:fe:04:fc:44:89:1f:e8:6b:72:59:bd:77:2c:35:f0:1c:c5:
63:1e:97:a7:2e:92:83:3a:38:9c:3a:c4:7a:b0:2d:52:30:16:
5e:c3:8e:04:47:9f:e3:43:50:75:e6:1f:a4:d4:00:01:9b:4a:
66:7c:22:c8:86:f1:5d:39:8c:02:7d:e4:ef:73:e5:98:1f:40:
65:ea:3b:81:cc:e9:ef:51:87:26:56:4e:d1:02:30:73:98:5b:
a6:07:86:d2:bb:6d:78:f5:ea:67:9b:c1:28:04:b6:85:1c:f9:
91:6d:bf:1f:1a:9c:4b:32:2f:04:b9:5b:1a:74:aa:45:81:01:
f2:f5:59:22:94:3e:67:26:7a:da:46:07:2d:63:ff:e4:f6:f4:
49:dc:e6:e1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgw
NTA4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcxMUYwOEMyQzQwNkFE
MzI2QUE0NUZBRUNBREE3NzQ2QkY2MDcwNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/o3jkueO9BYBoS8GqLhsLvtYCueGhw1qrvF5zEZfgaeOcA8iE
xEESSPYDHQ8cZJGmHnNaLqZV4Gb4m+H7Hv55O8rmtKvTgiMO6uXzvkJxud5AIQtF
gbzxIgS6vUMejnqS8ITXa2POFVMoTozafiXsKN00d8cBf9ZfFAZyHZ2KF3p7+eoM
WD2jdkSaOYK9E8ZJkry/CKY5Nj0EK7Ldl3C/SJb8BT+ZsspQ1dv2ny5G45E6g2Nl
zh53xQUTwX2obyEAwAjoWTYmgi9XZrN/yxCCS2WpFChywozitQuCRKbruBui7o8T
gVYP9kDsJUuS1PpAnOm20G1k/xActSsSQogjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcR8IwsQGrTJqpF+uytp3Rr9gcF4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jUjhJd3NRR3JUSnFwRi11
eXRwM1JyOWdjRjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADuMggxXPvSeOmbHdqrc64hgjgmc1/j3A3dS
6PVFPIeTI1+6O36r9suyB9UsP3ZqYdCC7IDfmapEGmauPZOj8J6vcBAzSPbO1X2b
wRF39puEVYLASVJ22h0dYJEVq9j1JQIsuwBp/Zuk7LsWSq3+BPxEiR/oa3JZvXcs
NfAcxWMel6cukoM6OJw6xHqwLVIwFl7DjgRHn+NDUHXmH6TUAAGbSmZ8IsiG8V05
jAJ95O9z5ZgfQGXqO4HM6e9RhyZWTtECMHOYW6YHhtK7bXj16mebwSgEtoUc+ZFt
vx8anEsyLwS5Wxp0qkWBAfL1WSKUPmcmetpGBy1j/+T29Enc5uE=
-----END CERTIFICATE-----
Generated at Sun May 18 10:52:47 2025 by rpki-client