Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/16svkRCPGxtsDDs7sHYGkVZ2nzw.roa
File: 16svkRCPGxtsDDs7sHYGkVZ2nzw.roa (raw, json)
Hash identifier: pD4D+/PvCXn0G4mGmuckeybJ2e+QY5fdjpBNcBpxXr8=
Subject key identifier: D7:AB:2F:91:10:8F:1B:1B:6C:0C:3B:3B:B0:76:06:91:56:76:9F:3C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/16svkRCPGxtsDDs7sHYGkVZ2nzw.roa
Signing time: Mon 09 Jun 2025 00:39:34 +0000
ROA not before: Mon 09 Jun 2025 00:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6325 (0x18b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 00:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D7AB2F91108F1B1B6C0C3B3BB076069156769F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:c0:72:f9:1c:1b:85:fc:6a:4f:ee:bd:55:
66:42:6c:2b:fc:d1:0f:d1:fb:44:4f:3a:5d:5f:d4:
ac:13:81:46:6e:f0:df:44:e8:b4:f0:e3:37:a8:aa:
3c:40:c4:a6:00:14:e1:fc:36:d5:76:67:d9:8b:7c:
b7:35:ac:f2:11:18:61:38:fd:6d:25:7a:eb:50:58:
93:a3:6b:72:25:99:82:e9:c5:44:3d:1f:aa:54:51:
a6:77:e2:a1:c1:6b:47:7e:45:58:cb:5e:2c:28:e8:
47:9e:c6:66:41:29:49:fc:66:48:b2:51:6d:57:46:
ba:39:04:55:ea:85:0f:0b:7e:f9:ad:ad:85:e1:c7:
57:2c:11:9b:94:c1:dc:80:4c:4b:81:65:53:dc:d6:
a6:d9:52:f7:2f:5f:94:cc:35:cf:a1:d1:dc:4d:05:
bf:84:8f:6a:1d:ea:05:a1:50:03:e4:9f:d0:e8:ca:
9a:74:42:34:ff:89:0b:94:00:7e:7a:14:2f:37:79:
71:06:ad:5a:5b:79:49:5d:5a:0f:af:58:e9:06:c0:
7a:73:86:ac:cf:29:13:05:e3:5c:5a:fc:b5:ad:64:
da:c5:c2:6d:f5:35:23:2c:8d:e0:ea:63:32:80:1c:
b6:50:d3:4d:1f:f9:cf:a8:ae:e0:b8:9a:4a:2d:a2:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:2F:91:10:8F:1B:1B:6C:0C:3B:3B:B0:76:06:91:56:76:9F:3C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/16svkRCPGxtsDDs7sHYGkVZ2nzw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:ce:7e:18:14:42:29:ae:eb:37:e3:0b:aa:4d:5b:1b:28:e4:
01:b8:1b:18:e4:d6:f9:be:cf:8e:3b:07:16:56:19:22:e8:0d:
e4:66:34:14:10:f9:33:1c:22:e4:5e:31:7a:cb:2e:f1:4a:b9:
f6:5e:a2:f5:b6:9f:75:1d:d4:c8:f0:46:d7:e7:60:ba:b9:e0:
33:a9:7b:08:a7:ef:4d:45:5a:03:b9:99:89:b3:e9:55:eb:7e:
10:24:29:84:8a:0c:e9:af:0b:6a:56:62:7a:07:2b:8e:df:9c:
07:6c:d4:50:77:ae:38:e5:69:be:6e:a0:ae:dd:c0:3b:2c:fc:
ff:83:9d:fb:0c:a5:68:69:97:43:36:bb:a7:d3:d5:0a:82:23:
a3:d8:ec:f7:36:22:4e:01:79:fd:a9:fa:9d:d4:60:fc:c8:97:
e8:20:0d:72:09:07:82:e6:59:36:1c:ab:6e:83:58:45:c2:39:
49:df:96:10:2c:17:f0:2f:cd:11:fc:e9:5d:bd:92:35:54:bf:
9a:32:46:40:22:3b:58:be:e8:9c:f5:1b:0f:4e:dc:2f:81:d5:
87:2b:42:8b:d9:8e:7c:74:b8:49:16:7d:d9:c4:42:a7:90:a6:
e7:07:3e:6e:c8:70:e0:3b:31:31:f0:50:81:d4:7e:d0:b7:8a:
13:9b:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:10:42 2025 by rpki-client