Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1Rpq23PhCbun5RAVzdAHGB4ZaWk.roa
File: 1Rpq23PhCbun5RAVzdAHGB4ZaWk.roa (raw, json)
Hash identifier: mplCfjIYC6H8+PY0lzBgbD7eE8xyeohX7BhMiPiKYls=
Subject key identifier: D5:1A:6A:DB:73:E1:09:BB:A7:E5:10:15:CD:D0:07:18:1E:19:69:69
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1801
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1Rpq23PhCbun5RAVzdAHGB4ZaWk.roa
Signing time: Sun 08 Jun 2025 02:09:32 +0000
ROA not before: Sun 08 Jun 2025 02:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6145 (0x1801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 02:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D51A6ADB73E109BBA7E51015CDD007181E196969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:fe:a7:51:ae:46:08:b6:eb:d1:b0:18:4c:
67:71:5e:18:bf:5f:f5:d1:2b:f4:d9:c7:ec:4e:d8:
0d:f8:df:63:dd:b9:cb:c0:ce:ca:b7:d5:c0:61:2b:
11:73:f6:e7:6f:f0:90:ef:da:47:35:ad:b9:e7:9e:
5f:d5:55:da:da:3a:92:00:39:96:b8:c3:54:3c:b3:
23:18:d5:ec:10:b8:ca:04:f3:43:13:d0:47:09:85:
09:7c:8e:88:9c:9c:13:10:c7:42:5f:b8:4b:b9:89:
a3:d1:73:8c:7e:d2:11:7e:c7:50:b0:11:f6:70:44:
32:2a:bf:ac:5e:0e:72:9f:1b:8c:78:04:dd:99:a1:
e3:c7:2e:72:0d:54:55:d3:36:a5:51:dd:af:b9:5f:
2d:88:86:ab:11:f7:2e:5d:23:46:9d:ee:bd:48:c0:
9c:f1:f4:2a:14:a1:8c:cf:3c:32:c4:15:92:7e:a9:
c6:20:a3:2e:98:55:32:c5:1e:a7:7e:5a:c7:7a:9d:
eb:74:9e:89:f9:ad:c9:df:5f:86:73:3a:b0:35:07:
08:1e:be:18:03:a9:1b:ca:a0:c1:0e:69:6c:e6:07:
1e:f0:06:18:98:79:d4:ec:af:a9:02:fd:cd:95:98:
e7:11:90:82:92:95:f6:77:57:b4:13:c0:88:c2:59:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:6A:DB:73:E1:09:BB:A7:E5:10:15:CD:D0:07:18:1E:19:69:69
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1Rpq23PhCbun5RAVzdAHGB4ZaWk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:91:3f:2a:de:23:2f:fe:ff:8b:d7:7e:09:cc:79:68:97:7c:
af:b8:1b:10:74:9c:6a:09:7a:5b:3e:1f:85:ad:70:fb:d9:8d:
6a:9e:4f:0a:98:8e:b0:bf:e7:77:dc:d9:b0:29:2e:6c:55:bb:
5b:0c:b5:09:c0:62:c2:64:6f:21:04:62:84:e8:3a:dc:05:1d:
d6:33:09:1e:c8:ad:8f:a5:15:a5:e0:d4:56:d8:5e:7f:0e:a9:
e5:4c:10:1b:26:dc:c9:1e:62:86:e4:b2:a7:c6:fa:26:37:69:
b0:11:bf:e7:90:80:5f:ff:4a:6f:09:32:77:59:c4:3f:2c:d2:
c3:85:20:7c:a8:fc:ca:1f:f9:c4:eb:a7:29:d8:90:5d:92:b6:
a6:7a:a3:4b:de:6d:6c:65:d1:28:a4:7d:1c:31:7c:60:34:8b:
71:0b:41:d6:40:fa:a7:a2:97:0a:44:1b:a7:64:f9:8a:21:12:
73:27:45:76:ed:e4:ea:46:16:7f:f0:52:ad:5f:f5:c3:7a:78:
a1:e9:e3:c4:ca:54:cf:12:3c:b5:7f:88:8b:a2:8c:69:56:ca:
90:d7:f0:af:73:82:c8:04:33:66:2c:c1:ee:0a:0b:f1:71:a5:
85:f9:c3:89:b7:63:8a:ea:41:b9:d0:8d:32:e2:5b:98:e2:c7:
d1:94:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:33:08 2025 by rpki-client