Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kW8aDC09n_3B0b_-Deyl_Myd12k.roa
File: kW8aDC09n_3B0b_-Deyl_Myd12k.roa (raw, json)
Hash identifier: awflRrWpaHxV+gAN662mTcuqqdJrZGS5obnM8A7KKj4=
Subject key identifier: 91:6F:1A:0C:2D:3D:9F:FD:C1:D1:BF:FE:0D:EC:A5:FC:CC:9D:D7:69
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B11
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kW8aDC09n_3B0b_-Deyl_Myd12k.roa
Signing time: Thu 12 Jun 2025 04:09:58 +0000
ROA not before: Thu 12 Jun 2025 04:09:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6929 (0x1b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 04:09:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=916F1A0C2D3D9FFDC1D1BFFE0DECA5FCCC9DD769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:36:81:e2:fa:f6:69:e2:05:9c:5b:ff:9c:
3e:6a:0c:2d:2f:a2:43:e5:dd:8d:22:f8:07:72:0c:
15:37:d6:75:a9:33:90:d4:78:09:2b:40:a8:4d:3e:
d0:8d:f6:ca:77:7b:c0:5f:9a:03:06:46:4c:e5:4e:
26:68:c3:82:44:10:58:cf:58:4a:fb:4f:0c:f7:4d:
a3:9a:23:d7:5c:88:95:19:31:e9:dc:8a:98:35:93:
fc:b7:f0:25:e9:ea:12:c4:dd:d4:e4:ba:d4:d6:6b:
37:8c:0d:81:80:af:1d:de:a4:fe:f6:36:b2:b8:ed:
d9:08:0a:06:00:90:8f:cc:a6:ed:e3:77:86:21:95:
b9:f1:4f:a8:20:6d:9e:e1:a4:65:6f:a3:5e:d9:cc:
16:40:d6:d2:28:f4:ae:96:cb:11:9f:e8:85:c5:5f:
77:0a:11:16:aa:c9:40:f6:4a:6d:08:a7:49:18:43:
8b:85:a6:34:1f:ae:c6:bc:7f:f2:84:ac:22:31:9a:
12:55:f8:4a:61:8a:6e:d7:3a:7c:82:dc:ae:4d:8f:
fa:96:41:df:f6:38:d3:eb:d9:22:e0:9b:06:fa:0a:
47:72:61:7a:db:73:6b:68:5d:11:9a:d0:78:8d:74:
7e:50:42:df:e8:9d:21:2e:6d:07:f0:0c:0b:18:90:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:1A:0C:2D:3D:9F:FD:C1:D1:BF:FE:0D:EC:A5:FC:CC:9D:D7:69
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kW8aDC09n_3B0b_-Deyl_Myd12k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:b1:80:a0:b1:bb:6a:90:d2:a9:fc:73:61:b9:6c:85:70:9f:
d5:1d:e6:79:47:2c:2a:62:21:e5:b0:c5:39:ad:7d:5f:82:4c:
43:2f:1f:0a:0a:14:ff:95:da:51:1c:54:45:c9:dc:04:44:cb:
a7:7a:4c:1f:fb:cc:ab:e1:6e:1b:23:e5:ce:1a:58:b2:86:91:
b1:f6:e2:75:e3:47:40:d8:2f:31:a3:12:19:60:44:8b:c8:d8:
42:05:92:3b:85:87:ca:ae:9c:ae:e8:78:b6:4f:86:00:85:e5:
91:a2:81:e4:45:63:d4:56:8e:c9:c1:c1:28:07:ff:16:d4:fa:
7a:66:7d:30:04:d5:6a:72:97:95:50:05:b1:90:b3:d8:46:e9:
12:10:37:89:19:66:4e:65:19:a9:19:b9:eb:60:6a:ca:50:9a:
4e:3a:30:84:1a:60:14:76:f7:8d:98:6f:72:2f:e4:5a:1f:5f:
d5:7d:ea:e3:18:d9:a8:87:e4:30:4f:f6:b3:6b:e0:d8:ea:47:
a3:c6:75:6d:9b:7e:e1:c9:37:be:cb:df:3f:3f:89:6c:fe:ec:
1c:6d:46:20:89:84:d0:83:71:b3:ea:12:7c:2b:a3:37:71:97:
10:fd:a7:14:c8:1e:93:6e:4e:92:f9:3d:be:bc:4f:9c:57:48:
42:0b:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:58:17 2025 by rpki-client