Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OqmeWKQ_YmN9eqHyUz8pskcrFE4.roa
File: OqmeWKQ_YmN9eqHyUz8pskcrFE4.roa (raw, json)
Hash identifier: SfvLKzQxwjxpEcCemFf01uVPdm+IQbuIWT/ahZ1oM8E=
Subject key identifier: 3A:A9:9E:58:A4:3F:62:63:7D:7A:A1:F2:53:3F:29:B2:47:2B:14:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0A09
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OqmeWKQ_YmN9eqHyUz8pskcrFE4.roa
Signing time: Tue 20 May 2025 11:08:19 +0000
ROA not before: Tue 20 May 2025 11:08:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 11:08:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3AA99E58A43F62637D7AA1F2533F29B2472B144E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:d0:a1:ea:9e:fb:af:97:53:33:fa:e2:06:
c8:ff:66:5e:04:8c:98:1b:7c:d6:c9:2c:f5:cb:57:
18:2a:38:3c:33:95:f8:04:72:78:dc:e4:d8:c2:7a:
05:54:8f:6a:01:da:f6:a2:8e:e6:c0:e2:8d:d0:71:
aa:65:49:f3:7e:c6:fd:e8:de:dc:98:2b:28:b7:25:
44:16:d5:be:49:ae:46:1d:f6:77:92:be:3c:a8:49:
11:e5:61:e6:d8:62:ab:2b:15:46:d0:9d:14:cb:74:
65:20:40:13:cc:ce:94:c4:2f:80:28:51:d5:35:73:
58:5e:b4:f1:44:ae:75:10:ca:7e:f9:24:f8:37:3c:
0d:cb:fa:b3:72:cd:2f:ad:a4:99:2d:36:5d:8a:86:
ca:7e:32:cb:b1:36:bd:34:5e:46:7d:28:3e:8d:c5:
18:39:ce:27:98:e7:a3:6c:88:84:4b:3a:e8:ad:23:
63:29:a0:d9:35:15:49:93:c9:fe:5d:9b:3f:c5:f6:
c9:c7:ef:f3:10:f8:93:df:25:15:1a:dc:c7:1d:e7:
fd:4c:d1:3b:b1:23:60:0b:ec:cd:f7:71:8b:28:10:
0a:6e:5b:3d:31:2a:ee:73:65:ef:b9:43:f5:1f:56:
ea:5b:63:fe:46:c7:0a:99:00:ac:25:bf:43:54:ed:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:9E:58:A4:3F:62:63:7D:7A:A1:F2:53:3F:29:B2:47:2B:14:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OqmeWKQ_YmN9eqHyUz8pskcrFE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:22:0b:f3:53:4c:89:f7:6b:15:1d:f7:73:ab:f8:8c:c8:df:
99:5b:07:49:98:12:39:30:9c:a3:6e:26:56:43:4d:bb:71:a4:
3a:d8:fb:f2:c7:55:c0:c0:bc:20:63:e9:f2:bd:09:bc:48:2d:
fb:af:82:ed:b6:71:7c:ba:17:2e:ca:d8:ee:4d:6a:ee:eb:81:
46:72:8d:f1:39:5a:16:cd:7f:ce:be:9b:ff:23:36:54:88:6a:
93:96:20:d6:d8:9c:c2:96:49:ac:e5:1f:12:33:34:1b:4c:aa:
80:90:fb:24:c0:96:80:fb:0a:97:1f:82:53:72:fa:96:86:75:
fd:83:d5:2a:6b:75:6a:b6:f1:de:f5:0c:d6:ea:11:76:36:53:
2b:bc:3d:a4:1c:31:74:e4:4a:02:6f:66:51:1f:7f:c3:17:42:
81:da:77:f2:09:5e:33:2b:c0:09:2c:e5:1b:8e:6f:76:45:ac:
d4:ec:4a:9d:e9:7c:fd:d4:b5:68:0b:b2:d0:06:73:f3:53:d0:
67:21:73:87:38:4c:4e:6f:b7:c1:68:be:9c:02:9f:e3:6b:a0:
a1:55:d7:7a:08:f6:9b:1c:b9:f4:9e:c6:be:54:82:43:d8:b7:
77:55:c8:d8:bb:d6:25:53:eb:39:93:20:99:5e:c0:a9:da:37:
cb:c7:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:56:11 2025 by rpki-client