Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Dv_e-denjYL5SmRH9AUCCQMhNV4.roa
File: Dv_e-denjYL5SmRH9AUCCQMhNV4.roa (raw, json)
Hash identifier: trWkC21N/Rs3QOsGubmF+gNwhsXKQKqQqo6eRUifwQs=
Subject key identifier: 0E:FF:DE:F9:D7:A7:8D:82:F9:4A:64:47:F4:05:02:09:03:21:35:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 042D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Dv_e-denjYL5SmRH9AUCCQMhNV4.roa
Signing time: Mon 12 May 2025 15:38:00 +0000
ROA not before: Mon 12 May 2025 15:38:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 15:38:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0EFFDEF9D7A78D82F94A6447F40502090321355E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:5e:53:36:e7:1d:80:7f:23:68:6d:ec:7d:
62:ff:33:32:cd:26:d7:31:42:dc:33:ca:a5:49:5d:
78:95:a9:44:75:d2:fb:6a:3b:64:f6:c1:e5:00:1f:
2a:84:b8:98:32:a4:1d:50:21:dc:b6:d9:ac:01:29:
20:8d:ed:7d:e8:b9:3f:37:fe:d2:80:6d:c6:92:66:
81:46:8d:2f:ef:bc:de:6d:92:45:09:55:fa:f8:82:
6e:d2:bf:b1:22:36:b2:6e:c0:de:3e:6c:25:07:63:
5f:2b:86:da:4d:a8:f8:cf:3a:4e:02:1a:b4:97:8e:
f2:e7:e2:1d:25:c0:5a:6f:eb:16:bc:00:be:52:4d:
ba:29:f5:58:3e:7c:6f:b7:aa:f5:b2:c9:1a:a0:b0:
ec:6d:69:92:ff:c3:61:ca:1f:d5:e7:c8:01:8b:96:
91:0c:41:0b:7d:4d:c9:b2:f5:3a:06:87:1a:21:1f:
d3:45:4d:d4:01:02:55:df:36:8f:3c:e9:18:78:99:
cc:9c:4e:82:8f:b6:ab:58:b7:dc:d4:e0:eb:4e:ce:
58:d7:f1:fa:82:00:0b:f2:2f:8a:f0:a5:e7:16:43:
46:f5:76:53:2d:bc:25:11:65:f9:4f:77:a4:3c:7b:
5a:24:e1:1d:d1:42:67:89:6e:9c:88:f7:b5:db:de:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FF:DE:F9:D7:A7:8D:82:F9:4A:64:47:F4:05:02:09:03:21:35:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Dv_e-denjYL5SmRH9AUCCQMhNV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:2b:e4:e4:c9:84:1b:86:e6:3d:70:63:f0:5a:1d:83:a0:1a:
d6:78:7b:8a:ee:94:6b:56:da:f8:9b:a3:82:5a:9c:96:1d:b5:
ed:ac:5b:6c:16:ee:ba:08:26:20:29:65:00:fc:c4:2a:fd:d4:
79:c6:82:51:8c:12:5d:70:1d:3d:79:d1:f8:bf:92:db:7a:2b:
46:f2:9b:bd:76:9f:49:89:d7:70:42:46:b8:1e:57:e5:23:b8:
f6:29:1d:0e:9d:20:5b:b0:52:9b:c9:48:e0:67:71:dc:09:6c:
1d:f1:2f:db:4c:de:ce:af:5c:0c:65:9e:2d:31:3a:9f:67:78:
7e:ea:32:b9:4f:12:00:87:03:1c:a6:d4:71:6d:21:e3:21:81:
29:c5:41:79:cd:88:b7:c3:b6:4c:8e:66:91:1b:ee:91:88:d1:
09:53:2c:be:af:b6:ac:38:98:28:84:14:f4:29:3a:1f:38:e7:
bc:77:15:a3:60:af:75:c9:a6:db:b1:26:7a:5e:8b:01:0c:34:
a7:a5:71:51:db:09:5d:a5:59:96:69:4e:f0:b2:32:cf:99:f7:
d9:4f:5c:f5:6d:2e:47:95:03:77:62:da:6b:e9:79:ec:c1:19:
4e:c3:25:e5:3e:15:4a:2b:63:59:e1:2e:d6:3c:f6:45:6a:62:
d4:dd:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:52:50 2025 by rpki-client