Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Fc77TQVzGyGpYBdcP22fyackre0.roa
File: Fc77TQVzGyGpYBdcP22fyackre0.roa (raw, json)
Hash identifier: ImIhqQzJSNNghr9Cv50inbOLbHShFRyrXSvm09LY3hg=
Subject key identifier: 15:CE:FB:4D:05:73:1B:21:A9:60:17:5C:3F:6D:9F:C9:A7:24:AD:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Fc77TQVzGyGpYBdcP22fyackre0.roa
Signing time: Sat 14 Jun 2025 20:39:57 +0000
ROA not before: Sat 14 Jun 2025 20:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7445 (0x1d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 20:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15CEFB4D05731B21A960175C3F6D9FC9A724ADED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:d0:81:c9:8d:2f:56:1d:e8:20:07:8e:8d:
43:ea:92:31:1f:a1:cb:9a:f9:b9:6c:31:47:4f:e9:
c2:3b:27:be:dd:10:9d:ef:0e:c7:7e:c1:d3:17:66:
34:ba:cb:a1:f0:91:bb:e6:04:24:ce:75:3f:3d:7f:
f0:50:42:ef:0b:5a:f3:a1:43:23:fe:a5:61:aa:ea:
75:53:0f:c3:6f:e7:d3:bc:8a:5c:87:24:23:3e:3a:
65:21:f4:82:f7:4e:43:e6:19:84:bd:e1:4d:fc:f7:
0a:df:47:bd:6f:3b:5b:99:b5:9c:cf:de:70:32:ff:
12:2c:7e:e9:8c:32:93:0c:57:86:de:7c:29:92:09:
f3:38:ca:2f:1f:9c:c4:1c:98:05:7a:4d:27:af:00:
d2:38:4e:f6:f7:5b:f2:7f:f4:84:f4:36:ff:b7:70:
3f:f1:c3:16:b2:19:f9:b2:08:86:cd:cc:24:f9:d6:
8f:55:70:60:07:b8:4b:50:a8:ee:41:90:4e:28:b3:
a9:e1:c2:1a:06:48:b7:c3:0f:f0:27:33:44:2d:2e:
c4:ed:a9:09:b4:c0:8d:b2:7d:30:97:e4:1e:e5:f1:
74:84:bf:df:11:29:b5:db:28:d6:8e:3d:50:0b:49:
43:83:af:85:0a:c8:07:a9:ed:e8:c8:71:5b:31:9d:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:FB:4D:05:73:1B:21:A9:60:17:5C:3F:6D:9F:C9:A7:24:AD:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Fc77TQVzGyGpYBdcP22fyackre0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:a5:5d:e0:0f:e7:42:fc:d3:cc:71:f9:d6:37:bc:ab:50:68:
91:d2:51:04:11:51:13:21:25:f2:3b:f5:fe:72:32:68:78:e1:
2c:25:b3:ec:a5:d5:35:89:17:c6:2c:33:5a:6b:97:8b:0a:89:
b7:06:03:a9:38:57:6a:e8:5b:9e:c1:6e:bd:e1:3d:03:ee:03:
64:60:fd:10:35:22:d8:aa:0e:42:72:f7:fd:0e:6c:81:98:85:
94:90:85:6c:89:66:62:1c:26:ee:7e:dd:12:fa:91:f9:8a:61:
5d:76:04:cd:00:86:aa:b3:70:d8:b4:9e:f4:0c:79:9e:9c:f4:
47:89:42:f4:97:cc:84:3c:f9:39:c9:ee:2f:43:5f:80:86:9e:
21:cb:53:2d:1e:39:d0:8c:ca:82:f4:fe:58:c5:10:97:bc:e4:
12:95:81:7d:b8:24:24:94:dc:57:6b:7a:85:87:1a:2d:a4:ad:
c1:08:9b:d8:5e:db:0f:d7:46:98:e2:ad:5c:79:59:30:fd:8f:
ed:d9:99:ae:f5:b7:a8:45:86:30:66:47:09:a4:1a:01:ae:0a:
c4:63:05:d7:3e:01:85:3c:74:1c:aa:96:75:19:ad:7f:e4:ad:
84:04:ce:47:9a:7c:03:bc:1b:67:16:43:25:7d:34:7c:26:f1:
0b:f4:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:04:31 2025 by rpki-client