Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/csmY47-OF2zJTcH9H35iIX7wMIY.roa
File: csmY47-OF2zJTcH9H35iIX7wMIY.roa (raw, json)
Hash identifier: /Hr0AqRw42sqDrtgpGmAA8wxGGbTAaGtybc5SSgWsyE=
Subject key identifier: 72:C9:98:E3:BF:8E:17:6C:C9:4D:C1:FD:1F:7E:62:21:7E:F0:30:86
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02F1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/csmY47-OF2zJTcH9H35iIX7wMIY.roa
Signing time: Sun 11 May 2025 00:07:51 +0000
ROA not before: Sun 11 May 2025 00:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 00:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=72C998E3BF8E176CC94DC1FD1F7E62217EF03086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:58:b8:55:14:b2:18:a8:f4:cd:e3:ca:ae:
34:bf:e4:9b:a9:29:ce:38:80:55:f4:20:91:72:2f:
39:4b:06:ad:37:97:44:84:e4:8a:2f:88:b2:2e:b2:
fc:be:06:a6:0b:ba:3d:e7:b5:76:21:7a:2b:6e:f4:
a0:97:68:a1:80:02:62:80:a4:e4:b2:06:c5:fa:86:
7a:01:fa:e6:22:6c:3a:f7:a0:43:5e:8b:29:6a:ef:
40:1d:96:b3:23:13:af:7d:e3:8f:20:5d:ea:3d:cf:
43:b9:4d:76:59:29:ac:c7:14:34:1e:4b:a4:49:ca:
01:2a:c4:0e:61:dc:30:52:a1:7d:0c:1e:a0:91:86:
af:9c:87:27:5f:cf:45:09:28:c3:69:f1:97:8c:1a:
f3:45:95:42:05:91:e6:cc:6f:da:bd:23:be:bc:54:
54:b2:a9:26:79:15:e7:02:5f:0c:96:bd:32:23:7d:
55:04:54:78:14:54:19:4f:b7:e8:4b:00:c2:2e:ef:
67:50:52:dc:74:a5:b0:06:4d:27:9b:49:8f:35:50:
fc:36:00:41:85:9e:8c:20:e9:bb:61:98:a7:a8:73:
d7:13:46:8c:87:fb:a8:3b:9c:36:f8:af:cb:5c:8b:
14:e7:80:55:cd:e0:7a:cc:5f:aa:20:30:70:47:5a:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:98:E3:BF:8E:17:6C:C9:4D:C1:FD:1F:7E:62:21:7E:F0:30:86
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/csmY47-OF2zJTcH9H35iIX7wMIY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:16:f4:1a:3c:94:0e:b2:3d:e0:7e:2a:07:e5:26:ad:df:40:
7d:2d:b2:58:4e:47:4a:50:ff:2d:52:2e:a3:a1:13:4f:7a:3f:
13:f9:17:7d:b1:a1:02:ab:4b:53:0d:6c:e4:ec:f5:d7:14:f7:
85:c2:20:62:70:25:60:f5:e9:81:92:d5:c5:6a:bd:52:a4:7e:
56:4f:6f:6b:e6:3a:8b:87:8b:db:e0:d8:d4:f6:ed:3e:35:e2:
3a:ff:23:f5:ee:39:ac:c5:53:eb:d5:25:83:0b:cf:56:de:4a:
35:3e:4a:af:90:b1:7e:20:b6:99:96:41:17:10:2f:fd:69:15:
8a:87:b3:cc:2f:54:8c:4c:0b:14:0d:7a:7b:df:1a:6c:d7:25:
65:a2:66:2e:3f:78:e0:34:58:d7:e8:28:7b:38:6c:bb:48:c6:
7b:56:ac:7d:2a:10:1a:c4:14:61:aa:f1:03:84:f1:36:d9:e8:
06:4a:af:d9:64:86:a9:be:c5:0a:e8:38:55:38:f4:05:13:63:
17:b4:a7:4e:00:77:8e:ee:02:5c:e2:fb:5f:ac:08:b5:84:be:
75:0f:08:02:59:d6:21:69:1d:2e:a8:14:2b:c1:a2:87:43:20:
39:e0:92:40:68:16:af:0d:f0:9b:98:22:9b:18:3a:8d:94:40:
da:54:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:13:11 2025 by rpki-client