Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pnxZ8AmEEo1Lo6zlb9XaVibna2A.roa
File: pnxZ8AmEEo1Lo6zlb9XaVibna2A.roa (raw, json)
Hash identifier: b+3/Ay0z24Wbhg1zH2OmP08UurshgE9GbI94xGUFiWw=
Subject key identifier: A6:7C:59:F0:09:84:12:8D:4B:A3:AC:E5:6F:D5:DA:56:26:E7:6B:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03C5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pnxZ8AmEEo1Lo6zlb9XaVibna2A.roa
Signing time: Mon 12 May 2025 02:37:59 +0000
ROA not before: Mon 12 May 2025 02:37:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965 (0x3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 02:37:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A67C59F00984128D4BA3ACE56FD5DA5626E76B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:8a:f2:55:8b:a6:88:12:ab:bc:43:e3:7c:
1a:86:e9:92:e9:d5:9c:70:06:9c:5e:fd:80:1e:bb:
7b:e3:5a:73:ec:ba:00:a7:b2:74:0b:d0:0e:79:f0:
16:43:91:e5:bf:31:94:be:f1:41:4f:c0:49:34:4e:
6e:95:42:60:e0:e4:6d:d2:80:a2:f8:68:9c:41:0c:
7e:b2:86:8c:25:b6:74:51:24:26:18:eb:01:76:b2:
64:5a:9b:17:86:d9:66:7c:ce:fb:5d:f9:a7:f7:d0:
9a:86:49:8d:75:02:86:f7:6f:a1:d8:f8:c7:70:d1:
42:53:08:ce:89:3f:30:d8:42:2e:83:3e:17:71:4c:
65:f8:50:0d:34:d0:41:b0:81:f5:fc:88:7a:d5:6d:
e6:94:01:d6:c1:ff:1e:15:68:6e:12:87:7d:39:54:
f0:d1:28:65:f8:95:27:c1:b7:30:45:c6:53:88:37:
30:0a:4a:b8:ad:5d:c5:aa:c6:50:fc:72:d4:b6:a0:
d7:f6:21:f1:e6:11:c6:46:2e:3a:34:c1:ff:13:a0:
26:77:0b:86:11:0b:da:b7:08:00:2d:d9:61:98:13:
2a:36:3e:e2:71:eb:74:b6:2c:bf:e8:8d:35:79:60:
3e:64:c0:65:b2:30:3f:b1:4f:a4:57:01:13:18:01:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:59:F0:09:84:12:8D:4B:A3:AC:E5:6F:D5:DA:56:26:E7:6B:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pnxZ8AmEEo1Lo6zlb9XaVibna2A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:8f:1e:66:2e:75:18:c6:fe:10:24:59:32:2c:ed:4d:8b:8e:
92:6d:7e:78:07:be:af:0d:c3:8a:1f:8c:3c:98:ba:42:a5:0c:
51:68:dc:6c:cf:61:54:23:54:25:c3:a0:5d:60:a0:ed:a1:b4:
a4:81:8e:39:09:e9:e4:04:07:21:cf:49:d5:78:b3:9a:3e:45:
e5:20:49:da:42:f9:a9:b2:db:66:5f:b9:89:a0:ec:53:ac:db:
60:9c:d8:44:f3:2a:2e:4a:7e:9b:3d:c2:65:0d:b7:77:d8:fa:
8a:85:98:c9:db:67:4b:25:4f:dc:41:b4:14:52:27:26:8d:c2:
4b:88:1c:d9:c5:48:41:86:cf:2a:27:0a:58:f3:26:f1:16:5f:
d6:ab:e1:e8:6a:ce:2a:e5:b6:b4:10:76:47:96:e6:40:1d:f3:
68:18:f8:7b:f6:1f:dc:8b:68:50:9f:ad:e2:06:e5:39:1a:00:
98:6a:2f:15:42:a3:59:74:33:f0:92:e5:6e:43:d9:5a:4c:5e:
b3:84:ef:95:91:26:2a:ae:18:3c:34:45:04:2e:f6:d5:28:f4:
8a:64:a9:f4:13:d3:18:8d:19:73:ab:96:d7:1f:cf:71:f4:ac:
d6:be:6c:6b:25:5d:f2:37:e6:8e:e4:46:af:6d:4f:39:e6:2d:
a3:68:9c:bc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIw
MjM3NTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE2N0M1OUYwMDk4NDEy
OEQ0QkEzQUNFNTZGRDVEQTU2MjZFNzZCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbgIryVYumiBKrvEPjfBqG6ZLp1ZxwBpxe/YAeu3vjWnPsugCn
snQL0A558BZDkeW/MZS+8UFPwEk0Tm6VQmDg5G3SgKL4aJxBDH6yhowltnRRJCYY
6wF2smRamxeG2WZ8zvtd+af30JqGSY11Aob3b6HY+Mdw0UJTCM6JPzDYQi6DPhdx
TGX4UA000EGwgfX8iHrVbeaUAdbB/x4VaG4Sh305VPDRKGX4lSfBtzBFxlOINzAK
SritXcWqxlD8ctS2oNf2IfHmEcZGLjo0wf8ToCZ3C4YRC9q3CAAt2WGYEyo2PuJx
63S2LL/ojTV5YD5kwGWyMD+xT6RXARMYAd87AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpnxZ8AmEEo1Lo6zlb9XaVibna2AwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wbnhaOEFtRUVvMUxvNnps
YjlYYVZpYm5hMkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFOPHmYudRjG/hAkWTIs7U2LjpJtfngHvq8N
w4ofjDyYukKlDFFo3GzPYVQjVCXDoF1goO2htKSBjjkJ6eQEByHPSdV4s5o+ReUg
SdpC+amy22ZfuYmg7FOs22Cc2ETzKi5Kfps9wmUNt3fY+oqFmMnbZ0slT9xBtBRS
JyaNwkuIHNnFSEGGzyonCljzJvEWX9ar4ehqzirltrQQdkeW5kAd82gY+Hv2H9yL
aFCfreIG5TkaAJhqLxVCo1l0M/CS5W5D2VpMXrOE75WRJiquGDw0RQQu9tUo9Ipk
qfQT0xiNGXOrltcfz3H0rNa+bGslXfI35o7kRq9tTznmLaNonLw=
-----END CERTIFICATE-----
Generated at Sun May 18 06:16:34 2025 by rpki-client