Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5JG0jeIDTzR2t_gffca6Wx93gCg.roa
File: 5JG0jeIDTzR2t_gffca6Wx93gCg.roa (raw, json)
Hash identifier: nup0kcNZjmaqIxslqidIoLi6x3Aqi2QkpuQtOIZ0d80=
Subject key identifier: E4:91:B4:8D:E2:03:4F:34:76:B7:F8:1F:7D:C6:BA:5B:1F:77:80:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B91
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5JG0jeIDTzR2t_gffca6Wx93gCg.roa
Signing time: Thu 12 Jun 2025 20:09:52 +0000
ROA not before: Thu 12 Jun 2025 20:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7057 (0x1b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 20:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E491B48DE2034F3476B7F81F7DC6BA5B1F778028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:73:32:40:64:51:1d:3d:c6:a6:4c:7c:76:
63:68:79:80:0e:85:82:a5:9e:17:7f:4f:4e:22:ee:
e6:44:0b:68:a6:68:df:60:0b:65:d7:f5:e7:24:81:
89:b3:99:dd:98:18:69:77:ff:79:32:a1:4c:36:36:
3b:3b:b2:ed:90:b8:21:d5:42:84:5e:47:c8:27:19:
ff:3d:1a:c9:af:f3:2c:01:fa:5d:41:d7:fd:ee:68:
a4:33:36:61:73:5f:78:f7:03:1b:5f:ab:8a:a9:49:
fa:ab:1e:5c:d8:5e:3d:d5:2f:b9:25:1e:a2:f4:e7:
18:bf:7b:5a:f6:b5:a5:97:04:f3:4a:cc:00:4b:a0:
7e:ec:10:a2:68:11:d3:50:e7:98:86:17:1c:62:15:
8d:e8:47:de:42:74:2e:2b:96:71:5e:5a:0a:e6:60:
02:70:f3:7e:09:b5:f1:02:f7:4a:0c:79:fa:18:c0:
28:fc:f4:79:40:d0:7f:c7:c7:5a:49:8c:21:c2:9f:
93:d6:6e:eb:12:89:85:d4:91:af:03:10:72:87:b4:
0a:3b:75:b5:22:c2:0f:ba:4f:d5:af:76:bd:a2:a8:
98:14:ae:d1:aa:8d:36:d2:c7:0d:39:dd:98:02:5d:
5f:22:bd:e9:09:fa:bf:ea:75:fd:75:b6:66:6e:72:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:B4:8D:E2:03:4F:34:76:B7:F8:1F:7D:C6:BA:5B:1F:77:80:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5JG0jeIDTzR2t_gffca6Wx93gCg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:ec:ea:aa:95:1c:1a:0b:ea:08:23:b2:2b:64:c3:b0:5b:a7:
1e:38:05:c0:98:a8:dc:82:05:be:14:d5:59:11:fd:a0:73:16:
95:03:07:98:be:2f:79:ec:a1:4d:71:af:3c:d8:26:fc:d5:70:
aa:de:42:75:1e:d2:ac:f8:ab:5a:51:dd:e4:78:5b:ee:ad:ae:
a1:9c:d7:8d:9e:89:2c:ed:50:75:32:4a:df:08:fa:93:3a:f2:
f4:65:3d:61:fa:6f:1f:0f:f9:63:08:c0:7c:d6:79:5c:07:5f:
3e:1d:ef:77:95:b8:bb:44:76:2c:a8:57:35:15:ef:62:a5:67:
61:dd:c2:c2:1f:92:c7:94:27:ac:c0:0f:2e:f1:ab:ae:02:f6:
dd:2a:15:31:f7:96:77:5c:86:4f:84:54:24:0b:d1:fb:bc:ef:
5d:df:08:58:68:f9:5b:27:57:bb:53:37:be:5c:53:2e:39:b2:
96:a4:7e:e1:a0:67:d4:1a:9b:ec:ba:89:c9:c8:93:fa:42:59:
a0:b4:1c:b5:7a:67:84:1e:92:8a:11:93:a3:55:11:37:c4:fa:
f8:61:50:80:13:55:9b:c5:8a:08:12:fe:ce:57:40:81:53:77:
a6:5b:96:e4:3b:a0:dc:8a:6a:06:22:2f:bd:55:cd:39:c9:5d:
e3:46:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:59:49 2025 by rpki-client