Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/InQAle2Jup3d_Up10yBCo7CJcMk.roa
File: InQAle2Jup3d_Up10yBCo7CJcMk.roa (raw, json)
Hash identifier: sYD1DYNdOWHYdfYsZ7xLG060IPU889urGuqUZWgUfQo=
Subject key identifier: 22:74:00:95:ED:89:BA:9D:DD:FD:4A:75:D3:20:42:A3:B0:89:70:C9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1305
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/InQAle2Jup3d_Up10yBCo7CJcMk.roa
Signing time: Sun 01 Jun 2025 10:39:11 +0000
ROA not before: Sun 01 Jun 2025 10:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4869 (0x1305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 10:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=22740095ED89BA9DDDFD4A75D32042A3B08970C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:00:cd:0f:d5:d2:9e:08:e9:f3:04:a1:f6:
ba:ad:9d:0b:65:a7:73:c7:ac:20:78:59:ea:6f:75:
8b:d9:ea:36:b9:99:55:8e:72:4c:bd:a8:e6:d3:ea:
56:d6:eb:4f:97:64:59:ea:2d:5d:ef:00:e4:5f:4d:
79:ce:42:3f:13:c2:bc:3c:46:31:53:41:8d:45:ca:
18:57:90:3d:0d:13:44:4c:79:14:43:ed:1c:90:82:
27:5a:1f:17:13:04:87:ae:cd:28:e6:55:93:72:e8:
a2:22:7e:cb:1e:7d:a7:35:04:5d:3d:c4:9c:83:aa:
24:cc:62:87:fb:f9:fa:ed:77:76:8a:11:62:eb:e9:
0f:56:3e:ed:30:43:5b:36:e8:0a:4e:94:13:2b:45:
52:2d:a1:45:4b:c6:1d:14:72:bd:a0:13:68:f2:06:
63:c2:af:12:3b:b5:45:ba:13:ea:00:88:fc:1c:12:
7f:02:db:d5:8b:62:ba:c2:ea:0d:29:9a:1c:af:a9:
76:c9:ad:c9:2a:33:ad:f9:42:8e:c4:44:c5:04:13:
81:a2:34:fd:05:a6:9c:fd:56:81:2f:36:d7:57:33:
4b:79:3c:41:04:b6:2d:7c:6b:c1:81:5c:05:86:e1:
97:95:43:95:fe:bd:15:49:3f:72:bb:55:76:14:b7:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:00:95:ED:89:BA:9D:DD:FD:4A:75:D3:20:42:A3:B0:89:70:C9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/InQAle2Jup3d_Up10yBCo7CJcMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:5b:c1:63:21:bd:cf:e8:6d:4f:66:85:c1:9e:53:86:e6:67:
a8:69:c5:f8:62:4d:02:24:5f:be:9e:42:3f:75:a8:62:f7:42:
bb:81:af:d9:9d:12:4a:1e:49:91:96:b8:09:01:1e:e0:3e:66:
84:26:70:34:cc:e2:a6:74:dc:d6:e8:96:30:86:ca:79:26:5c:
bb:51:4a:e8:68:9d:19:b8:3e:5a:ec:f5:29:51:69:f2:7c:4f:
a1:70:c2:75:9c:44:92:38:f6:bf:2d:bf:fb:ed:93:84:17:98:
fe:c0:f6:75:49:79:54:c2:25:50:13:46:2c:0c:dd:c8:f4:46:
e0:6f:d3:11:56:7a:e8:6c:5f:c8:0e:c5:af:b0:8a:7f:64:a5:
7c:41:36:e6:cd:f4:9b:b0:9e:ec:08:1f:65:c1:83:90:75:25:
f9:c8:21:df:4d:14:74:35:a9:cf:a1:18:a1:db:e6:43:00:2a:
ec:0a:3f:84:98:f3:8b:19:71:bf:cc:47:3b:46:43:52:99:03:
7f:46:0a:9b:42:d4:46:a0:ed:34:b7:19:3c:74:ec:81:f5:c4:
01:0e:27:03:c0:3d:99:f2:53:0c:57:fd:e9:32:e1:1f:e3:28:
d0:79:b9:e6:a8:55:aa:ed:41:d3:09:49:fa:43:4a:f4:dc:e1:
40:8e:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:29:41 2025 by rpki-client