Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bS_CBn2CU4Su6UbDUo9mNZgTRiE.roa
File: bS_CBn2CU4Su6UbDUo9mNZgTRiE.roa (raw, json)
Hash identifier: IwIlPMIgCyZoxUCIA4O7i96HovkNHsDbpOoEpq6LreE=
Subject key identifier: 6D:2F:C2:06:7D:82:53:84:AE:E9:46:C3:52:8F:66:35:98:13:46:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B29
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bS_CBn2CU4Su6UbDUo9mNZgTRiE.roa
Signing time: Wed 21 May 2025 23:09:04 +0000
ROA not before: Wed 21 May 2025 23:09:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2857 (0xb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 23:09:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6D2FC2067D825384AEE946C3528F663598134621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:c1:18:b3:a6:6c:75:6c:a6:be:ae:34:42:
87:d2:f9:ea:89:47:00:a9:99:f3:69:7b:bf:af:cb:
8c:07:97:76:25:ee:25:3e:62:45:28:7c:48:d2:2e:
b0:83:94:94:01:35:09:4c:63:a4:44:30:ce:99:07:
65:43:bd:7b:bd:d5:a0:76:b9:b3:11:09:3f:68:8d:
b4:f0:9c:f3:1a:1c:5d:81:2f:20:82:d9:7c:13:89:
93:61:eb:cb:39:b2:95:0b:e7:90:be:79:f8:c0:0b:
f6:1c:15:0b:8c:59:32:ba:f2:8b:18:0d:31:a5:9e:
46:e8:93:1d:34:e2:cd:a9:29:4a:12:0f:5b:d7:0b:
5e:ff:ce:d3:80:04:4f:59:0a:31:57:d0:6f:62:77:
ed:0c:fb:65:94:0f:eb:00:0b:df:fb:ee:fe:29:75:
48:19:24:f4:0c:09:68:41:6b:da:ad:65:41:e3:47:
bd:dc:f2:2b:a5:95:47:47:20:8a:53:56:58:f9:83:
bb:f4:ec:06:0a:35:80:2e:c5:75:4d:ca:ab:67:32:
32:a2:48:19:b9:3d:0a:7a:14:2d:57:0e:5f:b3:64:
f0:13:4e:e6:29:83:f1:b9:05:a9:58:bd:a2:0b:21:
6c:06:61:b8:ac:0b:07:ba:de:38:f9:de:ce:68:1f:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:C2:06:7D:82:53:84:AE:E9:46:C3:52:8F:66:35:98:13:46:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bS_CBn2CU4Su6UbDUo9mNZgTRiE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:ae:ba:fd:97:a0:93:32:c9:8b:d5:bb:d7:ac:37:4f:b3:68:
41:23:61:e8:29:21:8c:6e:a6:5b:29:83:f7:a0:68:6f:44:d4:
83:4c:ec:9d:39:e9:b6:5c:5c:3e:94:6a:af:35:49:ca:a4:6e:
18:a9:f5:ff:b4:af:19:e5:9e:22:f2:77:d7:ed:c8:79:85:f2:
9f:68:a8:df:c0:de:3a:25:10:57:f0:a9:4f:d1:b9:02:f9:41:
d1:c8:b3:84:2d:51:09:c0:0e:ae:82:b0:77:05:79:f0:7e:5b:
a5:6d:fa:fd:fe:d4:47:9f:31:99:96:67:f1:3a:c1:bf:bf:3b:
4a:f7:7a:c3:0d:5b:58:8d:42:ef:2d:dc:52:6c:c7:50:34:75:
8a:51:3e:cd:70:20:f8:d1:34:32:80:e8:6d:cc:2a:b2:bf:41:
23:15:b2:ec:29:6a:4d:0a:54:36:0f:9d:f3:f8:17:ed:8b:09:
50:11:59:06:a1:f4:08:f3:0d:57:d9:9e:8f:85:fc:1d:6c:35:
a6:d9:14:20:4d:f3:61:70:77:ec:77:ab:a8:78:43:98:28:c6:
c1:dd:ee:bf:59:c2:5a:75:b0:66:d2:7e:4b:35:48:c7:b7:d9:
a5:3d:38:ac:8c:d9:c3:6e:d3:06:c4:3b:91:ed:3b:41:3a:41:
bb:6b:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:58:52 2025 by rpki-client