Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Jv6eX5Sd_Eo4siNjJQ075yIYEgI.roa
File: Jv6eX5Sd_Eo4siNjJQ075yIYEgI.roa (raw, json)
Hash identifier: uNyoj3ilrIkHQA+mH0KhtPotYHV61fHzZg5c+uIHEMA=
Subject key identifier: 26:FE:9E:5F:94:9D:FC:4A:38:B2:23:63:25:0D:3B:E7:22:18:12:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1791
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jv6eX5Sd_Eo4siNjJQ075yIYEgI.roa
Signing time: Sat 07 Jun 2025 12:10:18 +0000
ROA not before: Sat 07 Jun 2025 12:10:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6033 (0x1791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 12:10:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=26FE9E5F949DFC4A38B22363250D3BE722181202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:c0:f1:e4:a0:7d:8a:a1:d3:9c:ca:1f:1c:
88:bc:ed:bd:f2:99:73:de:25:90:f8:f5:1d:c0:89:
7f:74:b6:4f:ac:f5:8d:89:7d:d4:3c:a5:3f:9d:45:
d6:21:7f:bf:d3:e1:0d:d2:ef:5d:3c:75:76:39:63:
f1:c7:bd:8a:85:02:34:7d:9e:70:b9:55:b2:17:52:
b9:f1:34:05:46:54:0d:e4:c2:1a:20:da:48:61:0f:
03:25:8f:ab:1c:ed:2e:1f:f5:41:f9:fe:6a:76:f6:
4e:c6:97:4f:2b:db:c9:93:d4:f6:e4:e8:c7:52:c3:
58:8a:40:5a:56:4d:2b:62:ca:c9:99:d3:3e:18:39:
85:d8:db:47:b1:00:57:1a:ec:13:38:94:ef:93:f7:
6b:9b:b0:2e:6e:b8:de:9d:68:1e:af:57:66:bf:6c:
c5:2a:41:af:d1:1b:02:20:83:ff:ca:ee:f2:e6:ab:
39:c8:cf:a4:85:e7:21:ed:86:5f:33:33:5f:93:24:
c9:93:d8:bd:25:14:de:16:cc:ea:55:e7:56:38:9c:
b1:f5:5a:eb:c7:c4:aa:26:bb:96:65:06:1e:d4:2b:
b2:7f:b9:b0:d1:a8:16:c1:b1:7b:4e:c5:72:ca:70:
3b:5b:9b:27:77:05:f9:2c:2f:00:90:a9:30:6f:93:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:9E:5F:94:9D:FC:4A:38:B2:23:63:25:0D:3B:E7:22:18:12:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jv6eX5Sd_Eo4siNjJQ075yIYEgI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:25:b6:8d:4e:71:72:64:5e:be:89:a4:2e:f9:fd:e8:77:1d:
9a:af:c2:39:75:76:42:e7:6b:95:41:3f:15:ba:bc:41:83:fd:
7f:3b:6a:ef:97:64:54:ad:28:b0:ff:a7:d0:8f:d6:0d:38:90:
4a:51:82:03:1f:fc:32:c5:42:6d:a1:f8:17:e2:24:bd:8f:66:
cf:4c:70:c9:ec:5e:27:d7:6a:f2:c1:bb:63:ad:5f:5f:41:b8:
43:6f:2a:dd:17:e7:49:81:18:ae:ac:ea:ef:53:1d:73:6d:24:
09:56:ad:e6:4e:09:96:d9:67:a4:02:74:c0:f6:27:ae:44:fe:
69:d3:9a:ca:2e:5b:f3:61:9a:32:e2:c0:05:bd:19:9a:a9:26:
fc:3e:03:63:06:47:db:6f:8a:81:22:c3:05:77:93:dc:ee:ff:
fe:0d:7a:76:29:0e:25:0e:8b:11:e3:18:cb:5d:d1:50:da:bf:
3f:68:f9:ad:95:40:5d:8e:f9:96:81:8f:f6:1e:56:3d:56:61:
0a:92:89:14:71:c5:16:c1:da:af:d2:58:74:d3:c0:98:1a:96:
f1:b5:8d:21:08:65:c4:dc:d9:ae:cc:f7:42:73:fa:44:f4:97:
ca:c4:26:24:45:a8:65:08:53:66:ef:27:16:9f:c2:69:6a:91:
df:d1:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:35:44 2025 by rpki-client