Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dVolVT7tTp8uPJa5J3Xw-mKzmsI.roa
File: dVolVT7tTp8uPJa5J3Xw-mKzmsI.roa (raw, json)
Hash identifier: zX+JhQwTqTwsM4pzxxdETnshT9meJfI7DCg8+6KjNPY=
Subject key identifier: 75:5A:25:55:3E:ED:4E:9F:2E:3C:96:B9:27:75:F0:FA:62:B3:9A:C2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1425
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dVolVT7tTp8uPJa5J3Xw-mKzmsI.roa
Signing time: Mon 02 Jun 2025 22:39:15 +0000
ROA not before: Mon 02 Jun 2025 22:39:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5157 (0x1425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 22:39:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=755A25553EED4E9F2E3C96B92775F0FA62B39AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:e4:44:e4:03:7b:f0:30:47:78:02:b1:bd:
d6:c5:7e:a3:bd:14:59:23:25:96:c6:f6:39:63:93:
09:06:6e:0e:56:0c:56:c9:51:4b:b4:28:e8:3d:71:
f1:6d:1e:77:1d:5d:89:00:ad:d5:27:cb:bd:d1:d4:
c8:d1:de:37:38:59:b8:10:e4:1a:53:c1:66:ca:f7:
a0:fc:b8:0e:88:7e:af:15:b6:88:f7:15:41:7a:b0:
6b:ad:8b:73:ff:aa:0e:70:14:09:14:26:76:0a:13:
23:d1:42:71:81:1a:14:d4:13:06:2b:c2:d9:4f:dc:
28:d6:3c:18:87:db:a0:c2:65:a8:33:b0:64:98:75:
6b:cd:43:9d:c0:f7:11:d5:b8:e7:7b:ce:84:77:fe:
e6:72:11:29:7b:39:64:8f:85:e3:25:6f:15:6b:fa:
dd:2e:94:89:ab:e5:cf:d5:d5:e1:75:92:c1:05:e0:
c8:78:b5:7b:64:af:f4:b3:26:ce:70:df:28:aa:d7:
cb:b6:ef:5d:1b:4a:36:5d:d0:08:e2:e9:71:8d:23:
25:d1:f4:08:ed:f5:d3:3a:71:a5:25:09:b8:d1:c0:
f9:f0:55:0a:10:a9:28:3a:b5:3d:a7:97:c2:94:3e:
e9:2c:d1:d1:88:85:e4:6c:c2:f7:ed:a7:ea:da:80:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:25:55:3E:ED:4E:9F:2E:3C:96:B9:27:75:F0:FA:62:B3:9A:C2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dVolVT7tTp8uPJa5J3Xw-mKzmsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:07:e5:f7:15:f9:a3:89:cb:a7:ff:58:25:d1:a3:9e:15:33:
0f:4f:90:8d:04:82:70:f5:85:b6:3e:d2:11:6d:f1:d5:4a:d5:
40:35:f4:00:15:99:3b:e0:05:57:6b:15:de:97:07:a2:2d:81:
2a:01:79:b4:84:a9:09:fb:f4:d5:8b:16:29:0c:a0:a9:b0:06:
cc:25:d6:86:74:d0:a6:58:f4:75:d7:e6:71:b7:30:0a:31:2a:
60:d7:c1:aa:47:a7:af:07:98:c7:43:cc:fb:71:2f:17:4b:30:
18:ab:f6:cd:34:9d:91:62:8e:9e:1f:38:8a:72:3c:92:49:da:
a7:2f:f7:9e:72:c5:48:99:65:75:21:ba:a8:65:95:bb:bd:eb:
6e:a7:26:eb:2f:c7:65:bb:43:d4:1f:ab:1a:54:d9:00:ea:df:
65:cf:6b:4d:17:29:bb:14:b1:7c:15:ed:37:f8:f0:68:4e:ee:
4a:9c:8e:84:91:74:0c:ec:d8:44:82:9d:59:db:b6:a1:5d:b3:
bb:27:37:94:c3:3c:55:00:fe:aa:f5:2f:be:51:17:65:dc:76:
4b:56:08:97:61:06:6a:75:38:a6:1f:17:80:ca:ab:05:41:11:
67:b8:54:fb:85:83:d0:fb:52:7d:c7:4c:6e:94:da:b9:e9:06:
9d:7a:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:31:57 2025 by rpki-client