Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/O3Wv_loUPM_HHpM1E35_eYCGZmE.roa
File: O3Wv_loUPM_HHpM1E35_eYCGZmE.roa (raw, json)
Hash identifier: FXaI7OOEHHwdy/u/Jadt0JCWJ3BcHHmS+GP5YtFKAz8=
Subject key identifier: 3B:75:AF:FE:5A:14:3C:CF:C7:1E:93:35:13:7E:7F:79:80:86:66:61
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15CD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O3Wv_loUPM_HHpM1E35_eYCGZmE.roa
Signing time: Thu 05 Jun 2025 03:39:30 +0000
ROA not before: Thu 05 Jun 2025 03:39:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5581 (0x15cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 03:39:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3B75AFFE5A143CCFC71E9335137E7F7980866661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:8e:fd:e2:3d:60:49:48:1d:bf:c4:00:7c:
02:05:1e:df:c6:78:39:a6:35:eb:b6:68:2a:e6:88:
f3:dd:56:0a:27:4f:27:5a:08:4a:42:56:d9:17:23:
a6:da:9f:38:17:ab:f9:7d:76:33:17:e5:b6:37:85:
fc:71:e6:65:32:5e:9f:7f:9d:ab:dc:b7:bf:ae:22:
c1:67:33:94:71:c2:6a:4a:56:32:77:2a:85:9c:71:
72:24:6f:38:c2:05:9e:ca:e1:69:1a:65:10:67:2c:
e8:23:d3:70:a5:f4:c1:39:09:60:0b:2a:08:ac:bb:
17:dc:a7:61:99:83:81:73:ae:c6:70:ac:b8:1e:94:
38:c6:ed:bb:5d:90:94:40:63:c0:6a:28:11:46:59:
63:b8:a3:49:82:6c:29:75:5c:43:04:e2:41:e8:2a:
0c:45:0f:c8:42:54:3b:66:10:e2:2d:77:70:63:20:
c3:ff:b1:d2:1b:24:71:1b:9e:c4:33:1b:64:dd:47:
d8:1e:44:c9:a3:3c:25:c5:0c:e6:6e:3e:74:80:84:
c4:e9:6f:1a:97:ab:a5:5a:c4:dd:7b:8d:8c:b9:b9:
6e:db:2d:03:c2:60:66:fa:68:db:47:c8:fd:35:79:
08:c8:e6:db:9c:ad:c0:2f:0f:7a:a0:7f:cc:5c:98:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:AF:FE:5A:14:3C:CF:C7:1E:93:35:13:7E:7F:79:80:86:66:61
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/O3Wv_loUPM_HHpM1E35_eYCGZmE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:b6:8d:24:d6:f1:ac:54:ad:52:24:46:53:a8:a7:c9:95:4d:
28:19:69:56:01:5e:90:d9:ff:c3:a6:cb:ec:5f:a2:5e:7a:d9:
6d:7f:ca:f2:80:c0:b6:46:18:55:8a:b9:bb:01:db:96:5b:7d:
68:a2:c8:58:d1:d5:ec:07:d5:7f:77:a0:5b:a4:d6:8d:f8:0b:
fd:56:35:83:50:52:f0:e4:70:99:0d:b8:8e:00:9a:0a:f2:83:
46:6e:f3:b1:46:b2:c1:49:2c:24:ae:b4:d7:52:34:ea:f2:56:
c5:42:43:8d:1a:00:ea:9a:9a:6a:d7:81:91:6a:49:b5:5e:1a:
d4:be:07:de:dc:f4:d2:12:3e:d9:dc:1c:a9:16:21:23:34:27:
85:2c:bb:30:b3:3e:83:48:41:88:a6:a3:02:26:fb:92:eb:f2:
75:60:ee:28:c1:79:ba:16:3b:0b:97:99:66:f9:cf:b1:5c:e6:
a2:0e:46:32:f8:e0:a7:84:41:24:c1:be:d3:e4:b6:3d:66:9d:
a7:48:7a:16:dc:19:25:d7:76:19:ec:fc:dc:2d:b1:c4:7b:38:
b6:8c:d8:df:b6:8b:f1:4f:d2:65:26:eb:c4:c1:ba:d3:af:4c:
db:0f:09:1f:87:a6:ad:71:df:77:3c:c3:5e:1b:f8:0c:e8:3a:
74:42:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 17:30:16 2025 by rpki-client