Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JOV97iuXnPg5biDG3lvR-oCPAes.roa
File: JOV97iuXnPg5biDG3lvR-oCPAes.roa (raw, json)
Hash identifier: ptyZh4G4ezKrLdj6kcICRt+yiF2FxEBkB4NYBf4sekI=
Subject key identifier: 24:E5:7D:EE:2B:97:9C:F8:39:6E:20:C6:DE:5B:D1:FA:80:8F:01:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 194D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JOV97iuXnPg5biDG3lvR-oCPAes.roa
Signing time: Mon 09 Jun 2025 19:39:41 +0000
ROA not before: Mon 09 Jun 2025 19:39:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6477 (0x194d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 19:39:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=24E57DEE2B979CF8396E20C6DE5BD1FA808F01EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:2f:df:39:aa:4f:19:c4:8f:91:11:c5:ca:
6c:91:e3:87:4a:b7:29:76:80:4a:cb:2e:fa:06:e9:
9b:01:9c:67:84:75:35:24:12:61:9d:87:41:36:6d:
87:f0:e7:30:21:ba:ef:d1:c1:46:38:80:fa:34:80:
83:64:82:b0:89:b4:53:8a:9e:a4:6c:a7:24:64:71:
12:8c:5b:01:dc:ed:0e:b4:8e:30:e4:24:d7:d3:48:
a7:3b:d5:14:c4:66:ec:35:9b:64:69:63:0d:41:12:
66:02:f1:0e:be:3f:ec:bd:5c:ee:78:18:97:75:13:
5a:bc:46:aa:09:78:77:ff:e3:eb:73:80:9f:2c:0b:
40:82:da:dd:a2:a3:9d:af:9c:71:60:fd:86:78:37:
82:d4:38:5b:1e:7e:8d:f0:48:f1:e7:9c:9f:da:35:
83:56:48:f9:69:72:f2:23:cb:c1:2f:b4:36:0b:a1:
93:fe:5c:2c:09:cc:8c:a1:d0:d3:7f:64:06:4c:6a:
e6:04:7e:6f:1f:ea:2a:6e:6e:f9:4b:07:89:1b:57:
7d:af:1c:8c:e9:fa:aa:b7:7e:cc:9e:5b:5f:59:32:
63:41:c0:c1:bf:d8:11:ef:4f:5d:c5:c1:63:fa:35:
2e:ac:0a:31:76:c0:0a:6d:f9:75:a6:6d:96:c7:ef:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:7D:EE:2B:97:9C:F8:39:6E:20:C6:DE:5B:D1:FA:80:8F:01:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JOV97iuXnPg5biDG3lvR-oCPAes.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:75:18:01:5e:37:a6:4f:aa:ce:ed:d1:15:39:9c:fa:da:57:
84:7d:a7:8f:ed:7c:09:96:29:5e:67:e1:12:01:35:0a:b3:12:
e8:92:eb:7d:de:10:d6:5d:11:43:70:13:bf:c1:41:2a:03:14:
f3:b6:d4:46:4b:c2:ac:41:39:0c:1e:d9:f2:c7:5f:f3:47:07:
f3:a5:22:60:02:5d:73:41:10:3d:4f:09:06:83:fa:df:83:ad:
ef:d9:da:c7:4e:f1:c3:80:a5:8e:88:3a:a0:81:66:bb:c6:86:
bc:8d:f7:cf:59:74:f5:84:da:2c:fc:03:f7:cb:f4:71:de:d7:
4c:5c:5f:cf:0a:1b:ad:1f:b1:7f:86:3f:52:e7:cb:94:7e:0a:
c9:84:35:f7:07:33:86:85:3f:5f:1c:73:57:19:18:cb:28:36:
7c:9a:e4:0a:19:45:71:02:f2:81:69:6e:a7:e8:38:a4:da:2e:
df:d4:75:72:1c:ec:8f:1f:c1:cc:51:18:d3:61:66:18:09:ca:
46:f4:27:03:ac:0f:2b:62:b7:54:0c:1c:57:34:1e:c0:c2:dd:
b7:b8:f1:64:ea:34:0e:2c:83:ac:27:fc:e7:39:17:aa:bd:5b:
35:0e:58:fe:d5:d8:17:93:4e:ea:df:1d:79:13:60:7d:f9:57:
98:24:27:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:36:32 2025 by rpki-client