Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BmrM__CbCCqrNW5oI6JyYNQ1cq8.roa
File: BmrM__CbCCqrNW5oI6JyYNQ1cq8.roa (raw, json)
Hash identifier: Pbgy7VNThH7US4p4lzXg5sp8D7WQ7dbYvB+yEF9h7/A=
Subject key identifier: 06:6A:CC:FF:F0:9B:08:2A:AB:35:6E:68:23:A2:72:60:D4:35:72:AF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BF5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BmrM__CbCCqrNW5oI6JyYNQ1cq8.roa
Signing time: Fri 23 May 2025 00:38:25 +0000
ROA not before: Fri 23 May 2025 00:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3061 (0xbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 00:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=066ACCFFF09B082AAB356E6823A27260D43572AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:96:89:14:4c:8c:f3:35:92:93:8d:ff:cc:
98:0f:0d:40:cb:19:a2:73:c5:a2:89:96:88:19:f9:
d9:e3:2c:49:93:f6:1c:0f:9c:11:5b:24:e0:ce:24:
b0:e7:bd:31:cd:5a:9d:5b:84:0c:3d:3e:6d:94:03:
74:4f:ad:a7:b0:31:31:9b:b1:8c:d4:65:f5:36:6a:
7c:d2:b4:47:de:82:4d:10:d6:a7:29:ce:5a:49:0d:
83:d8:be:7e:d6:ca:3b:d8:9c:5b:15:19:49:80:a5:
1a:b4:e8:11:17:47:7f:09:df:c6:c6:7a:ad:9c:67:
d1:6e:9d:09:46:f9:c0:77:3d:6b:fb:d7:01:10:40:
dd:cc:dd:aa:47:42:5e:d4:c1:0a:73:03:18:ec:90:
6c:35:dd:5e:18:ed:ee:7b:b5:00:42:94:91:4a:cf:
a6:fd:66:fe:37:74:c7:c7:a1:9f:e8:85:9b:01:54:
22:55:1e:42:f9:a0:81:0b:6a:55:f9:2e:3f:29:b1:
1f:c7:6a:7a:c8:0e:cb:90:29:9c:3f:58:32:15:c9:
ae:43:6a:9b:4d:8a:7f:ab:c4:27:5a:cf:f8:b5:b7:
9e:27:87:4c:2c:3d:16:41:11:94:c2:7f:ce:a8:76:
4c:ce:64:ec:58:cd:71:7d:4a:d1:96:18:84:e6:ad:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:CC:FF:F0:9B:08:2A:AB:35:6E:68:23:A2:72:60:D4:35:72:AF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BmrM__CbCCqrNW5oI6JyYNQ1cq8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:a5:8c:74:6a:fb:4e:ec:2f:e9:02:a1:a9:ec:46:38:12:44:
7a:fb:df:08:50:f3:b1:e8:8a:91:1d:e0:76:7c:7b:f5:4e:8d:
47:6e:c4:77:15:4c:57:70:48:55:05:e3:09:28:aa:ef:0a:81:
25:b4:16:03:5f:90:5e:9e:22:31:16:2a:74:65:65:f5:58:f3:
55:22:af:5c:33:c9:a8:d1:ba:c5:4e:76:7a:fc:a4:88:75:be:
66:93:6a:ba:ad:40:58:96:80:67:46:bb:68:a3:5b:c9:68:54:
c4:45:6b:4f:90:2c:06:c0:41:66:03:e9:28:47:38:44:f4:0b:
73:6f:3f:e7:c1:72:1a:79:04:0e:68:e4:e9:34:20:ff:1b:0b:
c9:fb:1b:1c:ae:db:4c:09:97:8d:3b:fa:e3:09:14:a4:ce:ff:
05:32:72:50:82:0b:6f:6e:dd:32:6d:ce:9f:73:39:aa:ca:d2:
24:f5:10:d4:d6:97:e2:e7:ad:6f:7f:d2:f3:4a:26:4a:89:8c:
23:8d:01:80:d9:d8:bb:24:df:8a:d2:aa:af:7a:b7:50:5b:56:
f0:e7:a5:98:e5:2f:65:fd:27:a9:74:26:ab:3a:a5:b0:80:73:
06:39:81:c6:7d:a4:71:04:61:bb:4d:fe:bb:07:a5:6c:1f:ef:
69:4e:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:34:50 2025 by rpki-client