Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Z6ufV00N-Oy2oFbo5sgghnqiUTI.roa
File: Z6ufV00N-Oy2oFbo5sgghnqiUTI.roa (raw, json)
Hash identifier: 8gBRMWgZ9DhnHl80Hfe6IAxGBbHYcZIqpTjdfsAKaF4=
Subject key identifier: 67:AB:9F:57:4D:0D:F8:EC:B6:A0:56:E8:E6:C8:20:86:7A:A2:51:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1511
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Z6ufV00N-Oy2oFbo5sgghnqiUTI.roa
Signing time: Wed 04 Jun 2025 04:09:17 +0000
ROA not before: Wed 04 Jun 2025 04:09:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5393 (0x1511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 04:09:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=67AB9F574D0DF8ECB6A056E8E6C820867AA25132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:95:1a:79:12:e6:91:9f:90:7a:7a:91:66:
27:a6:36:76:41:d4:5a:f5:e6:6b:ce:fe:16:3f:3f:
0c:6c:53:9e:11:25:43:c6:93:5b:c1:8e:ef:f3:c8:
88:80:6b:ba:1f:fa:af:35:47:28:a3:33:ab:20:b3:
47:9e:cd:bd:e8:7d:37:30:60:e3:53:54:51:51:24:
fb:e0:a7:26:76:3b:16:7b:89:1d:26:c6:b8:9e:38:
a9:22:28:c9:ba:88:4f:bc:57:0d:74:f5:02:63:00:
a0:4d:5a:e6:45:51:b7:7e:f6:e2:ab:c3:9f:18:d0:
ce:f7:e3:2c:80:2b:4b:e0:1a:23:8e:c3:7c:8c:b1:
7b:8d:5b:ab:34:25:02:f8:49:17:4b:f3:c4:a5:59:
58:4b:31:b8:af:83:24:43:44:f5:d8:18:bc:cf:44:
96:8e:1d:3f:86:09:41:ef:75:38:25:3e:52:14:8a:
1e:e5:6a:1f:ad:74:df:ae:a1:86:a5:54:9b:83:f5:
95:dd:0f:21:d7:01:01:92:03:49:e7:74:ec:91:99:
6d:f9:41:cf:b6:b5:61:9a:29:0c:10:b8:d1:73:a9:
92:3f:60:08:85:d0:ac:e7:44:75:dc:99:25:19:0c:
6f:e6:12:e6:52:68:b4:c5:a8:06:cd:d5:85:5f:5b:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:9F:57:4D:0D:F8:EC:B6:A0:56:E8:E6:C8:20:86:7A:A2:51:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Z6ufV00N-Oy2oFbo5sgghnqiUTI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:31:31:54:39:33:df:8c:0d:45:2b:ec:ad:49:7f:e7:7a:bf:
e6:fc:b5:83:b6:44:89:ad:a5:ef:79:8a:d0:36:f2:a1:64:ad:
3f:a8:86:f2:74:d1:37:5e:8f:89:08:b3:b3:a2:e8:6b:ef:0b:
c4:e8:b1:c6:62:4a:0d:f7:82:8c:aa:4d:92:5f:a4:2a:a4:75:
aa:58:dd:de:ae:87:44:ce:64:dc:59:ee:c8:9f:51:d4:2c:5c:
d6:f8:f1:bf:37:45:91:37:c8:f2:16:88:f8:fb:7a:8c:5d:ed:
34:8e:92:b7:23:17:dd:ff:34:83:2c:91:25:f8:93:18:87:46:
89:5b:f2:0d:ff:73:fc:9d:a7:c2:42:e7:f1:47:50:25:95:ab:
c8:c1:cc:4e:ee:d9:51:24:d1:2a:f4:f5:cd:a6:0a:8f:95:59:
c9:9f:41:46:15:66:3b:7d:55:24:e1:7d:5e:86:52:ec:a0:e4:
0b:4f:13:ea:a8:65:2c:16:e4:be:f2:93:cc:5a:e8:98:e0:5c:
23:7d:fe:7d:3c:8c:56:b3:ae:63:93:c6:e2:18:26:47:65:35:
c9:c7:f1:14:f2:d5:85:9a:76:06:c4:47:4e:a3:56:d1:6e:99:
31:8e:3d:2b:23:36:18:4f:9d:10:ea:f8:4e:d3:3e:39:69:27:
80:f0:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:36 2025 by rpki-client