Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1rM3QT3wJGzDvgesp2jNnXg91Eg.roa
File: 1rM3QT3wJGzDvgesp2jNnXg91Eg.roa (raw, json)
Hash identifier: L0n+d9uqA72i/zIfaooZJ/zd4x+F4d81JaHL2H198gc=
Subject key identifier: D6:B3:37:41:3D:F0:24:6C:C3:BE:07:AC:A7:68:CD:9D:78:3D:D4:48
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A61
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1rM3QT3wJGzDvgesp2jNnXg91Eg.roa
Signing time: Wed 11 Jun 2025 06:09:50 +0000
ROA not before: Wed 11 Jun 2025 06:09:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6753 (0x1a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 06:09:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D6B337413DF0246CC3BE07ACA768CD9D783DD448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:90:9f:58:76:d0:12:25:02:9c:17:52:b0:
60:97:5f:ca:2a:11:66:69:7c:c4:fc:9d:c6:d0:a6:
f3:b6:2e:88:53:5d:77:af:eb:a7:a2:8f:7e:58:5f:
dc:63:8e:c6:ab:6c:f7:73:11:1e:77:b3:e8:ae:3b:
97:7b:2e:1a:14:e9:c3:23:52:99:3a:92:9b:92:1e:
e8:e7:b9:2a:93:83:97:07:03:72:20:1f:a8:49:36:
75:f2:f9:59:fe:cc:dd:fa:15:bc:6d:09:97:76:7d:
5d:b0:85:03:20:25:75:dd:a8:ab:d4:8b:02:75:f2:
8b:30:7c:51:0c:1c:d1:5f:08:52:58:fe:bf:24:18:
8a:be:7d:0a:22:e1:f5:ce:7a:5e:1c:df:cd:65:ce:
ad:a9:14:d6:15:32:9d:ba:a1:0e:86:9b:d0:4e:1b:
15:45:ae:92:40:2b:8f:60:4d:5d:65:c8:ef:dd:5d:
58:79:61:47:39:a4:b9:70:57:3c:97:8d:e3:79:58:
6d:15:80:d7:6d:35:a4:33:ec:c8:90:01:98:0a:f9:
7a:f8:45:ae:cc:44:66:b8:e5:cd:4b:bd:c4:fc:dc:
73:29:3e:7f:0f:9a:3c:7f:05:10:92:04:9a:2a:81:
bb:ab:77:5c:64:e4:c5:23:be:e1:ed:71:63:ba:3a:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:37:41:3D:F0:24:6C:C3:BE:07:AC:A7:68:CD:9D:78:3D:D4:48
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1rM3QT3wJGzDvgesp2jNnXg91Eg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:4d:a2:85:ae:e4:83:79:08:e7:8f:62:89:1e:90:9c:b2:52:
d0:2e:7b:90:cb:8a:28:7a:b5:e5:8d:5a:3f:eb:8c:62:0a:19:
93:0f:8a:9a:bf:30:7a:91:7f:84:f1:d0:7d:c8:0a:f1:a4:05:
e4:f3:b4:69:e7:ef:43:e8:c0:64:77:8e:fa:36:a5:23:84:57:
71:b4:0c:8c:6a:75:1b:1e:a7:8e:2c:ac:4d:6f:2c:24:a9:6a:
99:a7:60:32:dd:43:85:5b:84:15:b4:7e:71:96:18:aa:48:40:
12:85:d3:9f:dd:fc:ec:39:da:9d:83:69:35:5a:e3:b1:e4:97:
e7:fd:52:a8:1d:e8:eb:d2:b9:b2:63:17:0a:06:d5:78:9c:51:
81:3f:9f:a0:27:7f:dd:15:4a:db:01:9b:39:0d:c6:cf:99:05:
53:15:38:61:6f:5b:df:6d:58:94:c7:1d:0e:06:54:9a:4f:64:
4b:17:cb:10:b1:45:cd:44:53:58:81:76:76:80:df:24:c8:2a:
41:45:e4:26:d9:25:e3:ef:b4:ae:d3:bd:71:a1:68:50:7c:20:
55:e0:80:79:1b:2d:34:90:80:63:c4:d6:05:36:11:9f:7d:e8:
88:72:e4:eb:f6:82:58:78:a1:e1:3e:b3:f7:ae:7e:e1:48:36:
c0:ca:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:31 2025 by rpki-client