Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dTGx5EdolLNdzePuPcRIXV_Xm58.roa
File: dTGx5EdolLNdzePuPcRIXV_Xm58.roa (raw, json)
Hash identifier: QEr0RIygB9pGCIWsWBKyDR2dADUl2mfZO3RohmoFsFY=
Subject key identifier: 75:31:B1:E4:47:68:94:B3:5D:CD:E3:EE:3D:C4:48:5D:5F:D7:9B:9F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06ED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dTGx5EdolLNdzePuPcRIXV_Xm58.roa
Signing time: Fri 16 May 2025 07:38:46 +0000
ROA not before: Fri 16 May 2025 07:38:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 07:38:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7531B1E4476894B35DCDE3EE3DC4485D5FD79B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:a7:57:cd:90:3b:80:f2:82:c5:aa:19:d9:
7e:ab:f0:54:b8:a5:ce:e0:cb:2f:d3:5b:56:6c:90:
3f:b3:34:2d:bb:4d:00:3c:ee:5e:e8:28:04:9a:47:
90:d8:ec:51:b5:34:37:af:21:38:45:21:ae:d7:bb:
ce:e5:cc:37:07:05:7e:b4:e2:a0:5a:ed:b6:ee:ef:
3b:b6:75:1a:55:72:7e:a8:50:ea:bc:a5:72:b5:c9:
22:47:64:bb:c5:c3:07:2a:74:27:c7:53:d1:32:0b:
20:1d:c3:75:19:83:fc:c6:a3:f3:02:32:0b:9c:7e:
1d:df:e0:c9:52:af:97:37:69:3b:2c:74:03:b2:02:
62:46:cf:1c:91:0a:ce:63:9f:21:08:49:53:a1:71:
32:7f:ad:22:b4:b2:ba:f6:1d:98:82:f3:8b:d8:b2:
9b:3b:9b:5b:2e:9d:24:ac:e8:2f:75:1d:46:ad:d9:
7e:26:3e:e3:74:50:a4:9f:ee:04:fe:9d:c0:9a:e2:
00:54:5e:3e:72:69:6e:6d:0e:11:54:d0:5b:d3:65:
98:2a:6a:52:d4:b5:a1:f0:ec:4f:1d:c8:3d:4c:10:
f8:a3:6c:f1:f3:45:a1:63:b4:7b:ff:f9:4e:82:cc:
02:83:c2:91:7e:94:fb:50:34:51:6a:ab:bc:9c:ef:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:B1:E4:47:68:94:B3:5D:CD:E3:EE:3D:C4:48:5D:5F:D7:9B:9F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dTGx5EdolLNdzePuPcRIXV_Xm58.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:ac:52:be:dd:49:9a:96:a2:b4:f2:2a:73:5a:c1:53:cc:76:
11:f8:42:72:e5:d6:cb:eb:7b:7a:99:2a:ac:55:b1:de:4a:cf:
13:7c:78:be:04:ee:91:3b:e1:33:e3:8a:d1:fd:29:d3:dd:0e:
ed:06:1e:a9:25:37:b7:13:42:13:0f:94:28:56:5e:c5:11:5d:
74:d0:4b:98:84:3a:80:eb:83:02:b5:c5:4e:14:37:a0:6d:90:
96:4c:a9:07:42:ca:79:14:95:b1:8d:61:be:59:d1:d2:15:04:
82:23:cf:20:1f:15:3e:14:37:b1:45:52:b7:bf:63:93:1e:8a:
da:91:cd:cd:32:1d:34:69:01:18:bc:75:bb:38:78:8f:54:cb:
4e:36:8c:f2:61:e8:a2:39:56:70:70:0d:21:83:aa:a2:4d:6e:
d9:1d:fe:49:4a:c2:d4:83:09:a4:fb:df:28:fd:8d:63:e2:cb:
c5:0d:b4:b1:54:a2:89:4d:f1:49:7d:90:bf:ee:a2:c8:49:26:
1b:91:2f:d5:cd:2e:cd:02:7d:00:35:da:00:05:6d:0d:32:02:
c9:1a:a9:f4:bc:97:f6:8a:24:4a:a1:f6:1c:97:5a:7e:bc:c0:
73:92:db:68:af:68:e8:c8:d4:8c:63:91:dc:5d:00:8c:fd:93:
ff:38:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:14:19 2025 by rpki-client