Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/q1hW_ZFQY_uZmPgHr0SGykVhyjE.roa
File: q1hW_ZFQY_uZmPgHr0SGykVhyjE.roa (raw, json)
Hash identifier: KuE2UZD5T40d2JjBtfZop/4z3scKFeqDgtazGfFRnu8=
Subject key identifier: AB:58:56:FD:91:50:63:FB:99:98:F8:07:AF:44:86:CA:45:61:CA:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07C5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q1hW_ZFQY_uZmPgHr0SGykVhyjE.roa
Signing time: Sat 17 May 2025 10:38:08 +0000
ROA not before: Sat 17 May 2025 10:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989 (0x7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 10:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AB5856FD915063FB9998F807AF4486CA4561CA31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:13:3c:40:54:fe:8d:c7:ee:99:50:d5:14:
f6:90:e9:ff:e7:64:67:f6:d7:44:4e:40:80:ee:8c:
77:ab:b8:29:3c:8d:7b:5d:da:48:ff:dd:a9:e0:ed:
54:d2:d0:c8:74:49:68:d7:9c:96:c6:0b:b8:f1:aa:
95:7d:14:01:2e:0d:8f:50:b2:3b:17:c5:0a:70:11:
8e:57:c3:62:bc:e0:52:92:50:c7:a5:cd:e3:53:db:
7d:1f:74:7d:a5:5a:ed:06:a5:6f:2a:06:da:8f:6b:
7a:48:bd:78:7d:4e:e9:1e:a2:0a:58:04:6a:29:00:
0c:12:54:b2:70:f9:80:a0:a6:30:49:79:bc:9f:89:
f4:22:21:22:a1:3b:ed:0c:bd:c0:59:ff:06:1e:c5:
21:41:dc:60:e6:0c:fc:c0:e9:6e:a1:b2:b1:c9:17:
7d:c9:73:e8:8b:16:43:71:d5:19:87:2a:f2:21:82:
90:5c:21:9a:60:81:0c:12:10:ed:44:97:58:d1:72:
14:eb:56:0c:87:37:6e:32:ea:54:67:c9:b5:82:a0:
8f:19:41:a8:6c:41:02:3e:60:d4:9c:81:e1:28:ee:
68:13:99:6b:c5:af:52:d3:69:d2:0e:b0:53:96:b5:
2a:de:a0:03:da:70:6f:b3:bc:4c:91:92:17:6d:64:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:56:FD:91:50:63:FB:99:98:F8:07:AF:44:86:CA:45:61:CA:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q1hW_ZFQY_uZmPgHr0SGykVhyjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:a4:a4:b9:66:85:05:ba:34:d7:6c:d0:36:e4:4c:36:10:5d:
97:4c:c1:c2:72:f4:c5:5d:1d:98:ef:ab:f0:a0:b2:52:b8:f8:
c5:fa:38:f7:28:00:9b:4e:79:b9:29:4f:ce:0f:17:f9:1e:dd:
f7:c6:32:12:b7:9d:ab:fc:ee:40:1a:ed:e0:a6:a7:8a:17:44:
56:06:c5:a8:da:df:13:4d:fd:57:3e:75:30:94:7c:b0:16:84:
8f:1c:e3:2e:e9:04:d8:a7:c1:3f:ae:16:06:76:4c:47:4b:7f:
00:84:7a:94:f0:fc:2a:08:8a:43:d8:58:6b:e0:38:a0:28:4f:
dd:6f:e3:30:03:0d:cc:0a:10:d8:d2:9d:07:7a:18:a4:b7:a3:
ac:67:8e:c1:f9:5b:0d:a9:6e:0b:3b:79:91:79:2d:f1:1b:95:
24:cd:35:f1:b7:2a:d7:7e:4a:52:ed:d9:b9:ed:b2:2a:d6:61:
68:43:75:7d:88:20:3f:c6:fc:75:2f:84:b2:f5:32:b0:db:e3:
29:d0:dc:4d:39:be:88:2d:a2:41:ad:0e:4d:4d:e4:42:b3:58:
88:32:7f:76:d3:37:8e:4c:3c:57:41:ac:35:79:32:9b:9b:df:
24:5b:5f:05:6c:b1:8c:c5:34:9c:38:d8:0b:08:2b:16:cc:2c:
71:a6:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:47:13 2025 by rpki-client