Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-G4rve9dVvn5Tpv-L_5-n3QyFqs.roa
File: -G4rve9dVvn5Tpv-L_5-n3QyFqs.roa (raw, json)
Hash identifier: GTXoByhDijX2xEOIGshKBf7fGGDdTazB31rBo7EBF4Q=
Subject key identifier: F8:6E:2B:BD:EF:5D:56:F9:F9:4E:9B:FE:2F:FE:7E:9F:74:32:16:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1919
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-G4rve9dVvn5Tpv-L_5-n3QyFqs.roa
Signing time: Mon 09 Jun 2025 13:09:38 +0000
ROA not before: Mon 09 Jun 2025 13:09:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6425 (0x1919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 13:09:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F86E2BBDEF5D56F9F94E9BFE2FFE7E9F743216AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:ba:37:ca:ab:bc:7a:24:dd:ed:99:1c:f7:
00:6a:02:e5:27:27:ad:83:17:64:37:cb:cb:21:8f:
8d:48:04:ce:bd:7b:48:5a:2f:1d:a8:17:f9:4a:f7:
85:ea:e4:85:34:0f:a2:8a:66:7f:2b:0f:73:c7:20:
d1:44:e0:ad:73:7d:03:bd:7c:3c:6e:c0:eb:50:3e:
90:09:94:15:93:54:73:83:19:f2:af:c4:74:50:b7:
cc:9d:90:68:57:eb:80:4c:da:a6:e2:d5:9a:e7:60:
17:a7:73:6c:fc:2d:dc:b0:d8:84:49:7a:3f:c7:c5:
06:01:c7:c6:24:e5:86:7a:13:a7:09:43:8c:d1:be:
51:18:c0:49:8e:e7:2e:ee:56:1f:fd:c6:90:ca:cf:
6e:44:7b:d5:b5:aa:d0:e4:00:51:4d:93:e8:ca:bf:
6c:e9:03:11:f3:8d:c0:fd:d9:e5:4e:e8:07:4d:d3:
83:34:38:29:10:10:84:af:fd:5a:ba:43:5d:13:5d:
f3:e8:f0:e5:30:6c:9b:48:1b:9f:2d:ba:ee:53:56:
2c:ea:65:d0:a5:c6:f4:36:83:40:5b:65:d2:96:70:
98:94:65:21:25:21:78:ed:34:61:f4:5e:30:db:b6:
3c:6e:f5:8c:6b:4d:ca:ae:b2:3c:02:e2:78:8e:93:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:2B:BD:EF:5D:56:F9:F9:4E:9B:FE:2F:FE:7E:9F:74:32:16:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-G4rve9dVvn5Tpv-L_5-n3QyFqs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:dd:0f:84:1b:73:37:93:9c:8c:2e:0c:f1:0a:19:fa:df:9c:
86:75:75:05:a9:0c:e3:9a:e4:38:8e:fe:11:21:1a:f2:0d:13:
de:dd:83:e1:76:1d:f4:07:e3:eb:38:14:2d:63:79:dd:6c:b4:
19:53:81:82:b3:5e:51:92:5b:0e:3f:20:59:f2:d5:1d:be:f5:
b0:87:c3:12:00:93:fc:ae:27:8d:a0:ab:61:ba:d8:e7:43:f8:
a3:12:25:39:5e:92:0f:95:21:86:17:79:00:9e:b5:49:37:71:
a5:89:e6:33:75:a5:83:ab:c0:15:1f:34:16:a1:9c:e8:a6:52:
52:9e:c2:3e:4f:71:6a:2c:23:4a:3d:14:83:01:5e:84:dc:e2:
1b:ea:8b:7c:7b:c7:11:88:6e:a7:b1:1c:e1:58:b1:c5:af:5f:
f1:b7:98:dc:ac:53:ea:6b:1c:4e:78:fb:5d:38:53:b1:72:c2:
fd:b6:6a:eb:41:ff:23:d2:f1:4c:b9:84:34:40:d2:cc:7f:63:
aa:1e:f3:7b:7f:a5:05:47:d3:91:50:c0:cf:c6:72:c4:5d:e4:
ea:7b:aa:32:e2:a1:50:fc:72:73:39:14:82:98:ee:32:45:18:
37:c7:15:c8:8c:b3:ce:6d:9e:9a:20:f1:79:e5:41:66:ce:b3:
b5:19:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:43:52 2025 by rpki-client