Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JX-yxw0QuZyiOnqN2iOloHcE5lo.roa
File: JX-yxw0QuZyiOnqN2iOloHcE5lo.roa (raw, json)
Hash identifier: HnKwzkHyHTqMWDSeBF2Wxg13lWA6M3syOO/0LlB9EcU=
Subject key identifier: 25:7F:B2:C7:0D:10:B9:9C:A2:3A:7A:8D:DA:23:A5:A0:77:04:E6:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 133D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JX-yxw0QuZyiOnqN2iOloHcE5lo.roa
Signing time: Sun 01 Jun 2025 17:39:10 +0000
ROA not before: Sun 01 Jun 2025 17:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 17:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=257FB2C70D10B99CA23A7A8DDA23A5A07704E65A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:50:05:7e:6c:f4:a0:2d:fb:15:14:dc:4c:
f9:68:ad:e0:95:4b:ca:6e:8e:5c:37:cb:84:48:48:
a7:d8:96:df:81:72:6c:7e:fa:82:0e:3f:84:44:1f:
32:e9:f4:34:96:11:e4:76:73:24:62:3e:94:d6:4e:
db:60:96:7e:2f:67:89:d9:46:89:7f:a6:b9:f4:fa:
f2:5e:e1:18:a6:3c:c8:54:b1:21:5c:8f:63:b5:9f:
97:5c:2e:5b:9e:9b:95:80:86:ad:2c:c8:e0:ed:f9:
f9:14:a9:92:98:bb:50:63:63:60:32:9e:f1:29:56:
c3:b1:10:c6:ad:af:84:10:f1:e6:5d:7e:e4:b3:5a:
c4:e2:d0:49:26:1b:50:f7:a8:f4:9e:b5:28:2c:0c:
3c:bd:a1:26:a5:f8:f1:1e:c1:d3:8b:ae:f0:b8:cb:
11:e1:b2:82:64:f1:46:f0:e9:8a:3d:00:dc:dd:47:
7d:2b:2a:b9:79:df:05:14:51:fc:e5:66:de:0b:c6:
fc:1d:05:9f:34:2b:25:e5:15:52:c6:33:63:d9:d0:
a6:dc:b0:31:52:21:71:8a:0e:51:b6:f1:83:7b:a7:
56:d5:fe:32:9c:b1:83:b8:d2:c6:44:85:f6:d7:b6:
a0:90:b9:51:6f:fc:a9:5b:ee:af:20:81:65:77:c0:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:B2:C7:0D:10:B9:9C:A2:3A:7A:8D:DA:23:A5:A0:77:04:E6:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JX-yxw0QuZyiOnqN2iOloHcE5lo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:1b:4c:d1:95:9d:f5:43:28:b2:67:08:b9:3a:e9:3d:e2:3c:
30:f5:c4:8a:9d:05:03:07:42:4e:b9:94:f0:4a:81:d6:e5:bf:
b2:07:4a:a7:08:94:ba:c1:94:ae:e3:e6:f7:21:2a:d7:7f:96:
1b:0a:72:72:42:4a:1c:1e:c9:92:86:30:55:14:fa:92:56:33:
85:47:a6:24:5b:f7:40:0f:6a:8b:25:f2:46:d4:de:ea:f7:a8:
f0:1f:59:1a:9c:37:8d:1e:0a:03:d6:df:3e:1c:07:eb:98:74:
0e:29:f7:ad:3b:3f:89:57:84:7e:44:35:da:70:1a:f6:e4:56:
31:47:01:b8:11:da:5b:6b:38:d1:32:bd:8f:3e:e7:3a:07:b7:
0a:b6:36:7a:b4:91:46:98:32:8f:25:2a:a6:79:46:db:1b:2c:
21:d4:d1:7a:d2:92:28:d5:61:87:00:bb:48:17:41:42:b7:50:
00:4e:92:25:92:9c:c5:e9:22:47:ec:98:cf:3e:3e:0c:1a:8a:
5c:e0:4d:ba:3b:c8:76:54:55:00:af:ee:5c:a8:e9:fc:9e:52:
90:72:06:50:27:c1:e5:12:9e:81:5c:b4:26:63:85:d1:ab:f9:
bd:70:d2:e6:c2:22:63:8b:ff:66:82:25:e4:d0:fe:7f:0f:a3:
62:fe:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:39:43 2025 by rpki-client