Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JXb2hku8MqmKNjaVqDRYX1blt1g.roa
File: JXb2hku8MqmKNjaVqDRYX1blt1g.roa (raw, json)
Hash identifier: qIOjCJnca/VmfPXsA+kBvoOmde9vK0Mk0iVr0z1RMMg=
Subject key identifier: 25:76:F6:86:4B:BC:32:A9:8A:36:36:95:A8:34:58:5F:56:E5:B7:58
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1279
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JXb2hku8MqmKNjaVqDRYX1blt1g.roa
Signing time: Sat 31 May 2025 17:09:06 +0000
ROA not before: Sat 31 May 2025 17:09:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4729 (0x1279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 17:09:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2576F6864BBC32A98A363695A834585F56E5B758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:fe:43:46:80:83:b0:35:e8:4f:ff:f5:b5:
67:64:e2:db:1b:99:62:31:af:9b:93:a6:b0:e9:73:
29:a9:a6:49:92:4f:aa:51:bd:98:e6:29:c4:fb:ad:
66:9c:8f:af:d7:ec:38:14:b9:f8:80:7d:a2:8a:91:
4a:d0:da:d7:39:24:c6:31:07:62:b2:af:c3:bb:10:
5d:56:43:d6:6d:ba:52:3c:7a:b3:e5:82:ce:ec:b3:
cf:cd:09:53:60:f8:70:28:0a:b7:b4:0c:91:73:b8:
ac:f9:ec:44:10:b7:f6:d9:80:aa:f6:e8:74:dc:ee:
6b:54:38:bb:0f:33:98:1c:c4:4a:52:1d:0e:2e:65:
d3:fb:cd:0b:ac:31:b9:d0:14:b1:b7:2c:dc:98:d0:
b4:dd:64:b7:78:cc:90:26:e6:b0:0d:e5:1f:c4:c9:
aa:f7:4a:14:a5:be:d6:87:19:80:c9:22:a2:42:d8:
02:21:07:99:e8:61:41:59:6f:b5:e7:05:ec:3d:47:
d2:12:a4:26:57:81:d4:47:3b:d1:ef:c4:db:da:39:
49:5a:f6:f2:fe:16:10:d0:3c:fc:f5:5c:92:e6:66:
8f:f6:81:a7:c1:15:92:be:8c:5b:92:1c:ea:91:2a:
9a:71:0c:2d:b8:e3:07:5e:ad:29:05:d7:7c:df:01:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:76:F6:86:4B:BC:32:A9:8A:36:36:95:A8:34:58:5F:56:E5:B7:58
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JXb2hku8MqmKNjaVqDRYX1blt1g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:39:13:be:54:39:70:1f:33:c3:f0:4b:c2:3f:83:bd:05:66:
8f:8f:60:7b:00:14:0c:16:6c:58:02:30:18:a2:fb:e9:c1:80:
53:c8:f2:aa:dd:5a:e3:6d:09:98:74:f1:63:f8:16:c6:ff:ab:
1b:24:b9:e4:3a:b1:a2:d0:d4:9e:68:bc:d0:2d:0c:00:8a:90:
a4:75:25:68:da:a1:38:20:a6:b0:66:38:24:19:76:71:a1:69:
4f:7a:9a:5b:3c:87:aa:34:25:47:1c:41:ac:81:db:13:84:04:
b0:7b:59:5e:d6:ed:27:ce:51:6d:3b:49:0f:62:ed:57:fb:7f:
1b:cf:71:d6:31:d5:48:0d:e4:4d:33:96:ae:aa:76:e0:08:50:
0f:f3:8e:aa:8b:35:70:f4:69:25:f9:30:54:4c:56:3b:72:fb:
8c:a9:ec:c0:94:f6:b3:bb:31:68:bc:0f:69:c5:ea:cf:1a:65:
95:6a:05:44:57:b4:24:6b:b6:ce:12:d3:be:37:4b:8d:15:85:
22:1a:58:a3:df:3e:e9:f5:aa:54:bf:68:ae:0b:40:61:44:a4:
23:9c:31:4d:88:09:c2:a2:60:2a:51:aa:ac:6a:e3:9d:6f:3b:
1e:24:45:1d:7b:a6:16:67:50:38:3f:4f:3a:99:79:86:5b:99:
07:6c:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:54:38 2025 by rpki-client