Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KgMM2A6zUlSOVDiquRNHg3Gj9ZQ.roa
File: KgMM2A6zUlSOVDiquRNHg3Gj9ZQ.roa (raw, json)
Hash identifier: IeQGS8QDcR/+0hO4qlpfnLd0lKvN5PvvaG0oRBxtgtY=
Subject key identifier: 2A:03:0C:D8:0E:B3:52:54:8E:54:38:AA:B9:13:47:83:71:A3:F5:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 157D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KgMM2A6zUlSOVDiquRNHg3Gj9ZQ.roa
Signing time: Wed 04 Jun 2025 17:39:22 +0000
ROA not before: Wed 04 Jun 2025 17:39:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5501 (0x157d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 17:39:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A030CD80EB352548E5438AAB913478371A3F594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:4b:e0:bd:b4:94:86:db:71:98:5f:4b:cc:
fc:4e:f7:95:2b:9d:78:a0:0d:62:30:5c:8f:8b:ad:
e8:3e:c3:47:29:13:c2:1f:0c:51:bf:53:c0:88:43:
b5:cc:e7:41:7d:78:68:44:15:24:e0:b4:5f:b3:57:
7a:82:25:78:15:8f:74:2f:bf:3f:e9:16:17:e5:f6:
bc:8d:d4:08:23:9b:94:52:c2:98:65:8f:eb:5d:d9:
27:92:87:f1:ca:f9:0e:cb:a2:1b:46:ae:31:29:11:
b3:2e:be:a4:55:35:e1:f0:10:8c:90:9c:ca:18:0a:
f2:b3:d7:1c:9d:6c:c7:1b:97:b9:66:27:3d:b1:9a:
b9:96:36:4c:37:07:2b:8d:04:93:90:f8:48:65:db:
bd:44:7b:fe:4f:a1:81:d3:06:75:c3:a3:8e:d6:4d:
b5:c2:18:78:f2:4e:bd:1f:e0:27:7f:a0:c8:93:90:
7b:25:83:32:5d:b3:18:b1:80:03:4c:ce:1b:ea:1b:
f1:9c:be:ab:e6:13:e7:a2:d8:46:fa:1e:26:82:4b:
da:fc:68:d6:77:82:70:43:26:35:13:6a:fd:dc:6b:
48:f9:c9:8a:45:7d:2b:3b:18:b5:fa:f2:73:2f:16:
ec:63:e9:91:a7:fd:71:99:15:d5:64:6d:3c:63:3c:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:0C:D8:0E:B3:52:54:8E:54:38:AA:B9:13:47:83:71:A3:F5:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KgMM2A6zUlSOVDiquRNHg3Gj9ZQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:8e:24:74:fb:cf:f8:2a:81:62:70:f8:4b:de:a1:9b:e2:8c:
a5:59:38:e5:a7:5b:08:af:80:f4:9f:39:e4:e8:17:7f:e9:b4:
7a:a0:4c:dd:d2:14:3b:48:23:df:65:2a:c6:7b:4c:93:f5:37:
33:26:f2:69:a0:f2:03:87:f8:20:e5:de:70:92:a8:3f:30:52:
c0:5c:60:c3:be:d3:f8:4d:4c:66:aa:02:e8:e6:b1:73:75:e6:
58:eb:91:b1:97:2a:1e:20:38:5d:b7:81:df:38:89:93:8f:ed:
6e:f9:95:3a:34:7c:80:32:fc:fc:cb:3c:ca:d4:e6:ad:8d:bb:
09:0e:ca:d6:aa:e0:02:4b:c9:0b:9a:49:a5:8a:53:a2:cb:cb:
2a:9f:50:47:ae:d2:b6:84:e4:7f:39:b2:74:31:65:f5:fa:b3:
c8:1e:38:36:e5:21:56:e0:11:5d:ea:8d:c3:1c:47:09:32:56:
d7:79:33:7c:c2:89:d3:65:52:7c:47:b3:cf:6c:da:d6:df:f2:
4e:a7:32:4c:99:ef:05:af:ea:8f:49:7a:7c:e2:b3:fb:a7:30:
9a:29:ce:03:92:cd:86:4d:18:c6:d3:ec:1f:db:5b:0f:d3:42:
f6:d4:a7:03:15:3b:35:d3:4e:8a:a7:3a:fe:90:88:c3:28:05:
a5:a5:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:48:03 2025 by rpki-client