Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/i9QN4EWhiyQXDzXy9D-IkWAi08U.roa
File: i9QN4EWhiyQXDzXy9D-IkWAi08U.roa (raw, json)
Hash identifier: fN8+rCFXhmDXcCuHDhD/buBiHJQogf+xmKxrEg0DfnM=
Subject key identifier: 8B:D4:0D:E0:45:A1:8B:24:17:0F:35:F2:F4:3F:88:91:60:22:D3:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 079D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i9QN4EWhiyQXDzXy9D-IkWAi08U.roa
Signing time: Sat 17 May 2025 05:38:07 +0000
ROA not before: Sat 17 May 2025 05:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 05:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8BD40DE045A18B24170F35F2F43F88916022D3C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:52:c9:41:0a:2d:db:a1:cb:cb:37:8c:6e:
a2:b5:29:2a:80:9f:d5:f0:1d:2d:fd:15:4a:d1:29:
93:d6:5b:5c:32:46:9e:91:02:56:3d:dd:cb:6b:82:
c7:7c:49:92:eb:d8:62:be:89:bd:5b:dc:e2:5c:c6:
13:d4:df:2d:7b:09:53:f6:3b:d5:46:da:7f:1b:85:
61:25:63:40:69:7b:6a:6f:f4:ff:fc:f9:25:1d:56:
d4:41:0f:86:c9:55:4f:5f:16:20:9b:ad:ee:dc:26:
5d:3e:4a:f3:44:c8:a6:c6:f7:c1:8c:91:e5:5e:58:
47:a1:46:72:99:f6:78:66:ef:15:8a:75:b5:8f:74:
93:c2:46:7c:25:f8:81:ae:98:87:17:64:60:11:a7:
28:77:97:dd:79:c1:f4:dc:0a:c6:a9:42:19:67:a9:
75:20:41:e3:23:2c:88:f4:41:ec:ce:1a:0b:2d:15:
ec:a1:94:71:a2:e8:76:55:ae:12:dc:c9:1a:20:ad:
45:8b:80:05:6c:af:04:4b:13:e1:81:c6:02:f4:5b:
d2:a5:fa:e3:c5:f6:28:e1:54:ac:d8:31:f9:6c:b9:
46:74:ef:0e:0d:e7:90:47:f0:92:b6:05:93:94:00:
aa:07:3b:2a:2c:d9:64:f4:96:94:5f:1f:ac:3e:16:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:0D:E0:45:A1:8B:24:17:0F:35:F2:F4:3F:88:91:60:22:D3:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i9QN4EWhiyQXDzXy9D-IkWAi08U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:8c:71:f1:c4:e1:5c:a8:e2:3b:87:ed:7c:18:07:49:7c:a6:
b3:3a:24:12:cb:6f:4e:dd:8b:27:a3:58:a6:ae:62:c7:88:7b:
66:bf:b6:0b:7c:79:80:ad:4a:98:80:6b:ad:d4:c0:e8:96:1c:
13:b0:e8:00:bb:d3:9a:b2:d6:94:fc:84:b0:03:9f:e3:20:9a:
db:65:0d:61:c8:fc:c4:7a:f4:73:48:6c:29:0e:43:39:46:3c:
f3:4a:03:82:e8:e9:c8:87:5a:98:3a:b1:76:d7:dd:5b:30:53:
a5:0d:55:b8:a8:b7:89:5a:c7:d7:1d:3f:ed:65:90:ca:71:a1:
54:c4:1b:e4:b1:d9:99:a3:17:7e:2f:fe:0c:26:80:d4:0d:c8:
5b:78:e4:3b:7c:a6:96:e4:1e:ae:8e:de:0d:33:60:f3:1b:bd:
23:7d:60:a5:61:bc:a6:ee:11:f8:d4:24:3b:80:98:09:e6:4d:
3d:bb:85:aa:98:76:c7:a1:ce:9b:c9:70:2f:20:19:e2:09:69:
c9:b0:25:d0:7d:06:29:94:6b:0c:af:57:e7:0a:b5:89:a6:9c:
fd:75:e7:38:b5:af:7e:b2:d3:a1:99:c4:5c:03:3d:41:fc:cd:
58:35:dd:d1:b8:b2:0d:5c:97:c9:8f:e3:7b:3b:f1:06:29:3d:
3d:ba:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:56:06 2025 by rpki-client