Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QGFGKzA3u0mHYmKHk-pZNq_XTU8.roa
File: QGFGKzA3u0mHYmKHk-pZNq_XTU8.roa (raw, json)
Hash identifier: b2zaIGVd88Z0ni1da4t7uzWft4kSbhrpmuSfH7gVelU=
Subject key identifier: 40:61:46:2B:30:37:BB:49:87:62:62:87:93:EA:59:36:AF:D7:4D:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QGFGKzA3u0mHYmKHk-pZNq_XTU8.roa
Signing time: Sat 21 Jun 2025 18:41:53 +0000
ROA not before: Sat 21 Jun 2025 18:41:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8681 (0x21e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 18:41:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4061462B3037BB498762628793EA5936AFD74D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:8e:60:c8:40:d9:29:21:a0:47:44:6f:b4:
20:85:6c:b3:01:7b:e6:60:50:c2:46:5d:5b:13:6f:
59:b7:85:b9:9e:e2:94:00:f3:2a:5f:d0:5b:b1:20:
76:b0:94:48:9b:2a:8b:da:34:4f:7c:6b:35:09:a1:
4d:4e:2b:2e:76:b0:0b:e6:9c:af:06:61:4a:f2:8f:
97:07:63:a2:0a:56:0c:98:59:62:08:78:cc:79:b5:
1f:21:71:54:6e:f3:7f:2c:19:db:b2:6a:da:ff:2b:
7a:d8:3a:ec:69:8f:b5:63:28:d2:7d:c7:c2:85:f9:
75:75:b7:86:6b:b2:c7:67:a2:9f:fe:c1:70:93:a5:
27:28:61:71:f1:66:9c:05:2b:f9:d9:18:f1:ce:21:
71:09:2e:79:ab:75:d7:49:e3:08:f1:ed:7d:8a:4f:
c9:2d:4b:ed:f5:8d:32:a0:b0:fd:36:0f:58:2b:df:
dc:84:86:39:28:b8:cd:12:1b:f5:27:7f:c7:48:a4:
59:47:28:9d:9e:98:2a:39:3b:21:08:cf:a5:08:de:
07:4c:39:37:3b:c2:27:72:64:01:24:54:93:cb:28:
ab:28:91:70:61:3a:e6:56:f9:15:d4:6c:76:17:ea:
e6:17:b5:cc:c6:9c:f5:02:2d:12:be:99:df:5e:d5:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:61:46:2B:30:37:BB:49:87:62:62:87:93:EA:59:36:AF:D7:4D:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QGFGKzA3u0mHYmKHk-pZNq_XTU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:56:d5:21:91:f8:d4:12:c7:bd:cd:36:41:d0:69:28:30:92:
9c:0d:c1:5c:33:f3:23:77:d5:f5:ad:4d:7c:1c:26:c1:e4:15:
9f:8d:8f:00:54:af:02:07:16:3a:50:2a:66:22:ac:eb:d1:2f:
9e:12:7a:ff:06:48:e1:1b:7c:3d:b4:c5:c5:ff:41:35:12:65:
9c:c5:1c:16:46:07:89:ea:4e:d1:5f:31:78:fc:8a:35:c1:b9:
e4:4d:dd:0e:34:8e:f5:1f:d9:2c:76:9f:77:6e:1e:e0:8a:4c:
62:b8:81:10:24:b8:df:65:f1:a5:4a:dc:67:3f:0f:cf:63:65:
11:96:6d:35:df:6a:44:63:94:00:c4:1a:1b:4f:f2:95:19:6f:
72:97:43:3d:25:27:83:a8:8e:b9:71:05:b3:59:25:3a:76:65:
27:36:42:e4:e2:bc:63:5f:ad:9c:30:63:d1:82:6e:26:29:62:
b0:e2:5f:30:f5:31:6b:59:c7:e5:05:c3:2b:8c:a5:05:04:b8:
9e:0e:91:9c:d8:c7:37:cd:51:53:c7:0e:3d:bf:af:31:b1:ad:
d6:8e:1e:5a:89:c0:f7:6c:90:13:c6:81:a6:6d:9e:09:c7:14:
d7:41:45:46:d4:2e:8d:d5:0e:70:02:e4:99:14:3f:c6:fe:d3:
f0:ef:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:11:55 2025 by rpki-client