Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LENdY3b9pQ-XCf96eunixqRv5iQ.roa
File: LENdY3b9pQ-XCf96eunixqRv5iQ.roa (raw, json)
Hash identifier: 8weccCD5XpCO7a0lJp+Ay5bGE+F5Vh/y16zXdDr1mKI=
Subject key identifier: 2C:43:5D:63:76:FD:A5:0F:97:09:FF:7A:7A:E9:E2:C6:A4:6F:E6:24
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19FD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LENdY3b9pQ-XCf96eunixqRv5iQ.roa
Signing time: Tue 10 Jun 2025 17:39:49 +0000
ROA not before: Tue 10 Jun 2025 17:39:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6653 (0x19fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 17:39:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2C435D6376FDA50F9709FF7A7AE9E2C6A46FE624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b1:02:80:f0:08:a0:46:69:c8:49:b2:86:c9:
50:ee:40:0d:45:da:94:96:b2:97:8d:1a:6e:aa:4e:
da:45:94:ed:d5:c7:e5:3f:c7:93:88:9d:c0:63:35:
ef:95:33:7c:ef:0a:e8:d7:20:d3:de:88:63:1c:9a:
ad:ee:a6:70:93:5f:2a:9d:d5:6c:05:60:2b:bd:19:
4a:7d:b7:19:03:85:cd:15:de:c4:58:e1:eb:5b:0c:
5a:0a:32:5c:a7:8a:76:b2:3f:3f:34:51:f1:07:44:
89:74:6b:3d:b7:ea:a5:b3:52:3f:16:d2:16:28:07:
8a:04:08:2b:24:63:c0:11:de:e9:8e:6d:0d:76:e6:
44:9a:e3:d2:4d:66:4d:44:83:6d:84:89:72:80:9c:
dc:9a:a3:bc:81:c5:da:b2:44:1c:c2:6d:23:1a:f4:
00:2e:d1:b7:1a:e9:fe:2c:b3:91:ad:3f:8b:cf:34:
24:86:af:ca:67:db:16:7c:cc:8c:73:e2:f2:57:2f:
ef:45:7e:5a:9d:93:55:46:07:f5:05:2b:3e:95:74:
31:1e:1f:d3:54:5a:b5:8e:22:0e:40:72:0f:0f:f7:
1f:67:e8:9c:3b:0e:26:78:ef:a0:c8:4e:d4:19:74:
72:94:3b:34:b8:a1:5f:73:52:2c:53:7f:93:7e:75:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:5D:63:76:FD:A5:0F:97:09:FF:7A:7A:E9:E2:C6:A4:6F:E6:24
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LENdY3b9pQ-XCf96eunixqRv5iQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:03:48:fe:84:55:e7:84:f5:06:57:58:c2:19:af:1e:7a:3b:
da:e4:6b:41:7c:68:be:c7:81:e9:84:e3:ec:f0:76:da:af:11:
0c:26:6e:80:61:a8:39:67:d2:54:8e:41:fd:d8:65:23:21:0d:
a9:cb:69:f3:00:06:fa:d7:8b:f6:0d:89:6d:46:ef:d6:4e:16:
32:c7:7c:3f:d9:bf:e9:49:c1:c7:20:eb:1e:0d:64:07:a4:85:
d7:01:f0:ae:87:74:b0:f3:df:d6:6a:b2:2e:7d:b4:4c:08:49:
42:84:68:fe:b0:b6:e9:4d:41:8c:ba:5f:f9:4c:66:d8:40:c3:
a7:56:c8:9d:71:9b:55:8e:c1:e8:38:88:c6:f3:08:2d:ac:0c:
a2:54:4b:fb:f1:dd:98:33:44:47:70:37:c7:99:d8:8e:1c:ad:
0d:ef:17:e2:6f:6e:2e:f8:ac:e5:70:29:a4:10:53:e2:73:96:
f0:8d:4e:2b:23:d9:81:08:6d:82:44:a5:ad:8d:26:e3:09:8d:
24:d1:e3:c2:14:35:6a:36:0d:56:f8:8a:6b:de:1e:83:74:20:
30:b5:e7:ea:9d:0e:9b:d0:a7:cf:cf:0e:33:18:fd:e6:f6:1e:
a5:91:b8:fc:5c:d6:5f:6a:1a:08:d7:4f:a0:70:cd:17:d4:03:
88:9e:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:24:16 2025 by rpki-client