Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PnqUzcl2TjckorF1GL8hwZ1GqYk.roa
File: PnqUzcl2TjckorF1GL8hwZ1GqYk.roa (raw, json)
Hash identifier: oFerabJi/eOCiftIHmGOsbPncFD0Y1h7Y3ut1TlI8D0=
Subject key identifier: 3E:7A:94:CD:C9:76:4E:37:24:A2:B1:75:18:BF:21:C1:9D:46:A9:89
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D79
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PnqUzcl2TjckorF1GL8hwZ1GqYk.roa
Signing time: Sun 25 May 2025 01:08:33 +0000
ROA not before: Sun 25 May 2025 01:08:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3449 (0xd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 01:08:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3E7A94CDC9764E3724A2B17518BF21C19D46A989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:2e:c9:a7:d4:eb:2d:f0:85:81:06:62:95:
5e:fb:61:f9:46:5a:38:a1:51:31:91:d7:b5:fd:b7:
37:c1:7d:89:1d:02:0c:0f:a0:99:ca:ea:56:66:02:
cc:6d:b4:ba:78:1b:30:89:44:e2:e1:b7:75:99:60:
a6:49:5e:b4:6a:b0:dd:53:b1:6c:12:30:ad:5d:ae:
1c:7c:5e:2a:79:0d:20:e1:d2:68:57:c5:6f:1e:1e:
4c:a4:cc:b0:52:8c:08:fa:ca:d4:3c:19:23:82:bd:
6f:47:81:68:d2:76:02:64:0b:eb:6b:cf:07:82:31:
27:c3:04:59:b5:36:84:83:7a:4b:68:24:11:0e:72:
b0:8d:2d:28:e0:fa:7d:09:33:de:d1:1f:7c:6d:99:
0f:b4:76:5f:6f:0a:e3:82:8d:fe:3d:7c:bf:db:3d:
01:0f:e7:94:76:21:ec:c0:bd:ae:63:f4:df:c9:85:
10:5a:13:7f:5a:fa:db:62:fc:78:0f:e0:2b:de:ed:
e0:53:a2:e9:a0:76:71:e5:b4:5b:1b:62:ce:16:03:
ff:0f:f7:b3:45:bb:49:a2:46:39:9f:13:28:1a:fa:
9b:7b:28:e8:6e:cd:9d:e0:a6:99:c4:d0:14:b4:d3:
ec:80:f9:ac:2f:fa:d6:8a:04:2f:73:d9:d9:c9:41:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:94:CD:C9:76:4E:37:24:A2:B1:75:18:BF:21:C1:9D:46:A9:89
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PnqUzcl2TjckorF1GL8hwZ1GqYk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:65:fe:07:fb:5b:e2:1c:b6:f8:e2:5c:14:89:ac:2f:a1:2b:
22:a2:fa:a6:9b:cf:7d:8c:be:bb:ce:fc:9f:8c:ea:63:04:aa:
e7:6e:cb:0f:6b:40:7d:6f:ec:d8:18:c7:e7:99:3f:d7:a8:b4:
44:20:b3:d0:4b:5b:98:d8:e8:2d:13:0e:a2:5d:5d:58:0b:74:
b0:e8:bf:31:8e:dd:8b:0e:b0:0c:56:e4:a1:f4:d0:9b:ec:03:
53:61:e4:ae:0d:f3:3c:91:a2:20:ff:89:d4:66:c8:2f:16:45:
c2:93:af:89:8a:32:f4:3c:c3:73:e5:9a:64:1b:56:92:1d:d1:
72:df:25:cf:66:fc:26:5a:1a:fd:55:b6:ee:d9:7c:ba:ef:39:
b8:0a:97:f2:ab:48:1d:4c:26:3d:9f:60:da:49:6f:be:f7:95:
30:1a:2d:97:8b:fb:53:85:c5:c7:44:25:74:58:ec:e4:f4:ba:
c2:92:26:f0:3f:f7:a1:b2:d8:eb:bd:86:9f:cd:54:dc:eb:58:
11:21:bf:81:ea:cb:76:bc:8c:02:02:bd:10:2b:55:ed:87:87:
22:41:52:44:46:2a:80:ee:dd:44:c9:ec:f2:63:3e:ce:13:27:
cc:69:c5:3f:8c:d2:6d:7d:14:8a:1c:64:87:7b:df:44:68:39:
53:81:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 17:39:14 2025 by rpki-client