Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8C80Hg9vjG4Q-IektHYH_IKin38.roa
File: 8C80Hg9vjG4Q-IektHYH_IKin38.roa (raw, json)
Hash identifier: MHrSTJJo7xRwpOHgvxpiu5iHGf59SBsXWphln40kSTI=
Subject key identifier: F0:2F:34:1E:0F:6F:8C:6E:10:F8:87:A4:B4:76:07:FC:82:A2:9F:7F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B5D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8C80Hg9vjG4Q-IektHYH_IKin38.roa
Signing time: Thu 22 May 2025 05:38:35 +0000
ROA not before: Thu 22 May 2025 05:38:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2909 (0xb5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 05:38:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F02F341E0F6F8C6E10F887A4B47607FC82A29F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:a6:c3:c9:0c:87:ff:ea:e5:14:bf:50:d0:
bb:c2:cf:d4:06:f7:66:9f:ae:6b:3e:ec:18:56:a6:
3d:9b:a4:6f:f3:b6:6b:3f:c2:2a:19:e3:d3:88:b5:
4e:7e:9c:1a:53:4e:cc:cd:0d:59:50:e2:51:10:a0:
eb:bf:80:61:45:1a:2d:6d:eb:fc:5c:23:35:6e:91:
1d:53:ed:04:fe:4d:3b:5c:79:89:b0:06:48:a5:c8:
7b:3a:f3:99:37:c5:04:a0:75:1a:66:4b:3f:f2:cd:
57:b3:e2:d6:f5:46:5b:d3:b3:ec:69:e5:c8:9f:93:
77:fe:d7:67:4c:3f:95:47:ff:1b:1a:95:71:24:51:
12:0e:46:dc:b1:77:7d:7c:da:58:b3:5c:d1:05:73:
9e:80:3b:af:89:11:5b:c9:88:8d:ba:64:2c:3d:bd:
46:fa:db:ee:3c:0a:43:3a:02:c4:09:b6:03:70:4b:
06:d2:69:f7:ef:b8:1d:5b:f2:28:4e:2c:ee:54:e4:
3b:8c:df:ec:c2:b0:8e:0e:f1:f6:11:66:fe:af:0b:
a1:f5:1a:01:f2:4d:92:d0:17:a2:e6:db:62:6d:19:
2e:8d:f7:37:90:ad:87:ba:7a:27:55:c3:e8:22:c9:
eb:53:c2:d9:71:6e:4f:e7:41:ec:f9:53:5c:26:c8:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:34:1E:0F:6F:8C:6E:10:F8:87:A4:B4:76:07:FC:82:A2:9F:7F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8C80Hg9vjG4Q-IektHYH_IKin38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:f1:3c:f5:ab:7f:96:22:a1:24:90:03:cd:3d:6e:38:92:3f:
95:53:e9:a3:ca:cd:bd:27:fd:f7:2b:a5:0a:04:34:a5:e5:4f:
85:44:63:21:19:b7:12:1f:87:30:ff:b1:ae:83:3c:30:01:64:
89:b3:1a:63:8b:46:1a:da:59:55:62:86:7d:0c:86:b8:78:f1:
ca:e9:5d:c4:09:c1:26:3f:ce:99:36:85:c9:d8:56:26:e7:f2:
00:d2:b4:46:39:31:c9:8c:88:84:57:0f:b6:3d:ed:45:a9:1b:
bb:9b:ce:a9:d2:26:6e:b7:d5:9a:93:c0:66:00:fc:04:90:62:
01:ee:f3:22:e4:f8:57:0d:42:93:64:50:08:74:1a:48:7c:48:
aa:a3:aa:3f:47:7e:cb:37:70:a5:db:b6:6a:91:c8:83:da:f5:
90:e0:1d:36:f8:dd:2b:93:f1:03:3d:fa:73:fe:ce:53:1e:7b:
fd:eb:ba:9b:a2:05:2e:eb:b0:e4:a6:a7:cb:9b:03:7f:72:a0:
a3:17:a6:cb:9c:b4:a6:b0:43:89:14:08:ee:9c:94:b1:00:86:
a3:ab:65:fb:62:a0:c8:79:34:21:b3:61:3c:ee:a7:2c:a4:9b:
2b:b1:d7:17:26:f3:44:85:65:e8:b4:57:d8:94:83:55:fe:8c:
7a:72:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:33:06 2025 by rpki-client