Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bLcNclszeqpmzzIgpNGSvpNC1JI.roa
File: bLcNclszeqpmzzIgpNGSvpNC1JI.roa (raw, json)
Hash identifier: 53tRzepUhaUDmVGYfLoBbOgBxVuWXs3GGPukGTZNIAw=
Subject key identifier: 6C:B7:0D:72:5B:33:7A:AA:66:CF:32:20:A4:D1:92:BE:93:42:D4:92
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E59
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bLcNclszeqpmzzIgpNGSvpNC1JI.roa
Signing time: Mon 26 May 2025 05:08:37 +0000
ROA not before: Mon 26 May 2025 05:08:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3673 (0xe59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 05:08:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6CB70D725B337AAA66CF3220A4D192BE9342D492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:e9:c7:5d:7a:1c:64:53:48:4d:c7:c4:ee:
2c:f5:54:ff:e3:53:22:9e:b4:24:46:d6:98:e7:97:
72:5f:57:d9:e0:aa:79:ae:76:d9:60:72:e4:b8:84:
a7:c7:58:8c:38:2f:e6:5b:83:bd:2d:b9:01:66:d8:
5d:85:8d:b6:e1:06:d3:b4:ff:97:9c:85:9f:45:b3:
5d:18:21:52:39:cd:54:e1:e2:fa:0a:bc:8b:b8:07:
24:f1:68:ff:6d:b4:6b:b5:97:c5:30:a4:42:3e:1d:
68:a2:dd:a3:63:3b:89:eb:e6:de:52:55:9b:ed:9d:
e2:8d:a6:3b:f7:3c:17:c8:f5:29:30:88:7a:70:fd:
c5:dc:56:52:0f:e0:5e:2e:be:20:b0:b3:89:99:93:
5d:f9:3e:a3:f1:28:ee:e5:02:75:d4:6c:41:96:b8:
ed:6b:50:62:62:75:a6:5a:af:c2:1c:61:eb:01:5b:
fe:71:97:73:a6:58:6d:54:9f:2b:5e:98:d9:69:a1:
70:49:43:fd:df:9e:cf:14:48:ca:2e:36:05:99:86:
ce:77:b7:cb:29:33:30:6a:64:a0:89:96:fc:38:41:
da:5e:a9:ae:f2:d7:9a:15:fb:ca:90:5c:05:9e:33:
63:5f:5b:13:c5:f1:07:27:26:d2:37:1c:31:f2:35:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:0D:72:5B:33:7A:AA:66:CF:32:20:A4:D1:92:BE:93:42:D4:92
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bLcNclszeqpmzzIgpNGSvpNC1JI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:9f:38:95:ac:d4:6b:a9:92:87:75:03:0e:d5:36:b2:5b:36:
44:f9:1a:e4:2e:04:86:9a:12:1b:6c:7c:0a:dd:6f:f6:d7:ee:
6d:68:27:5b:e5:ac:bf:d5:e6:04:6e:7c:d3:dd:e0:48:f5:1b:
96:0f:92:bf:8a:8b:5b:c0:2b:01:de:cf:84:52:de:ce:df:7a:
f4:b4:c2:75:b4:8a:96:68:c0:5c:5c:61:9c:90:31:91:1e:42:
8a:d9:0c:c1:4a:35:3e:e3:ba:17:49:c1:bd:1a:29:d0:ef:99:
7f:7a:02:4b:6d:72:22:90:53:88:58:96:d8:81:7d:5e:cd:53:
75:ef:79:7a:6b:da:5b:82:a2:42:fa:31:8c:50:45:79:81:45:
c2:12:38:f2:f2:ca:d9:f1:14:0e:88:71:e2:eb:78:47:e7:04:
dc:e9:bf:ca:8a:7d:5b:a1:72:99:e9:02:4f:2b:97:29:9a:32:
0f:a1:a3:0b:59:2c:53:e9:a5:2c:3c:d1:ab:35:0f:9a:c4:4c:
98:d7:02:a4:98:7a:25:66:ab:3f:89:e2:8e:c3:2e:12:c6:9c:
72:76:59:9b:66:61:c8:db:79:b5:7f:41:37:93:1c:9f:71:94:
18:6d:a9:88:c8:3a:0e:5e:41:b3:8f:c2:63:ca:f6:5a:0a:d8:
26:2a:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:25 2025 by rpki-client