Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7CW4VLMLWl-BwAdYgeaM91pfBmE.roa
File: 7CW4VLMLWl-BwAdYgeaM91pfBmE.roa (raw, json)
Hash identifier: KdRFCzjIHuNRtHj5Bm8UNmWiooMI9epMaQZc/shZd9M=
Subject key identifier: EC:25:B8:54:B3:0B:5A:5F:81:C0:07:58:81:E6:8C:F7:5A:5F:06:61
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1401
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7CW4VLMLWl-BwAdYgeaM91pfBmE.roa
Signing time: Mon 02 Jun 2025 18:09:24 +0000
ROA not before: Mon 02 Jun 2025 18:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5121 (0x1401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 18:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EC25B854B30B5A5F81C0075881E68CF75A5F0661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:74:68:21:7f:43:0d:57:be:66:fa:6b:37:
67:97:47:05:77:fa:21:ac:9f:c3:12:7a:34:cb:06:
fa:81:1c:fe:96:f1:81:77:f4:86:0a:97:be:23:30:
89:f9:f4:66:16:f7:97:e7:3d:f7:3e:10:a8:45:6b:
1d:57:f4:83:8c:a0:3a:38:e0:86:8b:71:8e:a4:6b:
ab:67:61:b7:54:10:27:ef:c9:3d:f4:dd:f7:f0:33:
b5:28:41:5f:bc:8a:de:76:72:e6:97:3f:4f:fc:be:
5c:48:05:9f:6c:ab:47:2c:b3:e1:e0:c7:c0:a8:2c:
80:9d:45:56:c7:1c:1e:ee:d5:72:21:06:ef:ec:2e:
d4:69:30:a9:f1:f6:38:fb:77:7e:23:07:30:7f:44:
89:5d:99:f8:79:ed:c5:13:eb:47:4e:c0:c2:25:62:
1d:77:b0:15:fd:4e:0d:77:3f:ea:89:20:a9:38:68:
5b:c9:85:cf:6b:87:f3:c9:98:78:14:f7:97:27:a1:
cf:1e:08:be:cb:4c:a9:73:b9:5e:9c:d3:8a:41:a7:
5a:b9:3b:84:48:ad:53:71:8c:c2:03:56:75:45:96:
9b:ed:c4:60:13:2d:50:aa:50:4b:3d:8c:24:ff:e2:
99:e4:5b:47:65:3c:c2:63:d3:bc:91:36:c8:ac:27:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:B8:54:B3:0B:5A:5F:81:C0:07:58:81:E6:8C:F7:5A:5F:06:61
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7CW4VLMLWl-BwAdYgeaM91pfBmE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:f9:9d:cd:3e:7a:2f:91:e8:8a:9f:02:57:53:55:34:bc:c7:
8c:e5:39:2f:79:99:b8:51:80:a0:c5:56:6a:19:f0:b4:aa:f6:
a7:22:7c:9e:a0:e3:86:36:9d:0a:24:d7:67:ff:27:1e:6e:7f:
1f:2d:4b:c5:1b:aa:d8:c8:93:0c:c8:10:54:6d:c5:84:8f:b0:
d1:52:2d:52:fc:28:3f:ec:c7:53:95:67:e7:a4:e4:ff:28:5d:
4a:fb:24:30:79:f1:76:d0:35:6f:9c:dd:e4:bd:93:b8:a8:83:
af:66:8f:2b:8f:ad:be:02:ca:ee:45:a5:77:0d:27:44:84:e5:
fd:a9:b6:34:e4:b6:8c:7c:8f:f0:79:22:5a:dc:cc:f7:f7:b9:
9d:99:1f:6a:44:21:b1:ac:06:77:f6:37:89:4d:d8:38:6f:99:
24:fc:a5:7f:cb:06:80:61:11:25:ac:ba:9b:a9:60:0a:ef:6d:
f9:e3:3d:5c:3b:4e:65:81:1b:7f:1d:2b:7f:98:16:2a:10:76:
ff:ee:fe:fc:19:90:52:07:fb:c0:fc:20:10:e4:c7:9d:21:f2:
d4:ec:d3:02:5d:aa:ab:95:6d:09:e9:20:ea:82:7a:7b:49:d8:
6c:d1:10:f2:5e:be:02:03:78:77:cd:06:1d:ab:88:1a:b8:f4:
cf:f3:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:08:37 2025 by rpki-client