Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LNltnUI1pzDyUTA6xPQyx5dwnPo.roa
File: LNltnUI1pzDyUTA6xPQyx5dwnPo.roa (raw, json)
Hash identifier: cwmCSu+f8egS30153h+OUNKHPD22qqde3tCGyjFWDhU=
Subject key identifier: 2C:D9:6D:9D:42:35:A7:30:F2:51:30:3A:C4:F4:32:C7:97:70:9C:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B5D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LNltnUI1pzDyUTA6xPQyx5dwnPo.roa
Signing time: Thu 12 Jun 2025 13:39:52 +0000
ROA not before: Thu 12 Jun 2025 13:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7005 (0x1b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 13:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2CD96D9D4235A730F251303AC4F432C797709CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:9a:32:b4:74:19:8d:4a:45:58:c1:e5:61:
a6:52:da:86:f6:a9:e9:cd:6d:5f:7d:6e:84:f3:72:
2f:a2:c3:99:48:03:da:73:a6:41:0b:62:83:57:95:
0b:50:a6:cb:00:ae:61:27:71:10:1d:ab:e7:ce:b7:
77:5f:4c:e4:6a:69:98:7f:12:bb:75:2f:81:9f:5e:
6d:88:4b:8f:2d:4a:b3:f2:ae:a6:84:a1:7e:e4:f4:
fe:1c:cc:75:4e:f2:d9:71:26:1e:8a:00:4f:2e:ac:
d0:a2:b5:a1:16:e9:b5:50:07:e9:85:46:71:89:fa:
2a:96:83:f3:1b:63:9f:7a:49:9d:42:76:d3:4f:82:
f6:e3:c0:4d:91:f6:07:9f:5d:ca:10:79:5e:95:c1:
ec:76:d0:56:cc:38:8e:27:30:46:ed:b6:1d:aa:51:
dc:80:48:8e:87:fb:bc:d3:3f:06:9d:73:1f:14:ff:
25:6c:d4:f4:a6:5c:6d:db:a0:09:a7:bd:d6:07:aa:
db:64:ae:e3:7a:e6:4e:27:bd:d7:f4:ca:e7:4e:cb:
59:32:b0:bc:78:66:ee:07:bb:23:d4:1a:aa:ab:0d:
8e:67:d0:87:72:c8:e6:33:2a:33:63:19:cb:6b:87:
7f:9d:33:b2:85:45:aa:65:83:51:bb:b7:93:aa:b9:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D9:6D:9D:42:35:A7:30:F2:51:30:3A:C4:F4:32:C7:97:70:9C:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LNltnUI1pzDyUTA6xPQyx5dwnPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:5b:20:ab:79:d6:b9:3f:c3:e7:8b:b0:f7:1f:c5:94:1d:c3:
a7:a2:87:08:ff:e7:d2:fb:47:b5:e3:09:60:79:35:2b:23:7c:
ab:03:71:54:b7:48:2a:90:ae:78:50:bb:10:d3:b8:71:49:c0:
10:d4:bf:e3:15:b4:d9:63:7a:2c:9f:47:82:09:d7:1a:69:87:
da:33:05:8a:4f:4c:ac:d3:18:15:dd:c2:f4:d0:f2:f3:fe:22:
5a:d9:1e:ab:ac:7f:5e:df:c5:85:04:53:1b:c1:47:16:78:0d:
0f:50:06:62:b7:39:44:7f:18:44:b3:bb:2f:d9:dc:0c:72:04:
27:8e:c3:fc:b7:c2:f8:8b:95:8b:94:a3:fe:b1:48:d0:5e:72:
ff:55:20:f6:b0:05:5a:59:33:80:f0:b3:11:6c:13:f0:60:90:
a3:0b:87:b9:a8:db:b9:56:7c:c2:8c:5b:ca:30:13:e9:92:19:
24:ec:ec:c8:f3:42:f7:aa:92:1e:62:9b:aa:da:c6:e8:91:a5:
05:a3:99:cc:c8:4b:d7:8a:68:d7:bc:a1:6c:eb:cd:e1:a1:a7:
fa:83:a6:8d:91:fb:77:86:be:26:34:2a:d1:16:2f:2d:1f:9d:
62:2b:ba:b6:f6:96:93:70:9f:d2:60:8d:76:45:03:be:1c:9b:
3d:8b:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 22:29:32 2025 by rpki-client