Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kmyqnqCDHRD1es0mmBXijs5BKqE.roa
File: kmyqnqCDHRD1es0mmBXijs5BKqE.roa (raw, json)
Hash identifier: NtSRJeL0jyk7FjvNgehsxcA6tokCeH5fBi+98e3y1lw=
Subject key identifier: 92:6C:AA:9E:A0:83:1D:10:F5:7A:CD:26:98:15:E2:8E:CE:41:2A:A1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0465
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kmyqnqCDHRD1es0mmBXijs5BKqE.roa
Signing time: Mon 12 May 2025 22:37:59 +0000
ROA not before: Mon 12 May 2025 22:37:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 22:37:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=926CAA9EA0831D10F57ACD269815E28ECE412AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:95:2c:b1:bd:f4:9b:8f:f7:2a:cc:28:45:
79:54:af:78:e1:9f:48:6d:a2:2a:d4:65:df:cf:62:
91:33:52:db:29:18:f5:db:0f:70:54:c5:cf:ca:a9:
42:fd:3b:bc:2a:c3:2c:81:67:42:48:99:17:e9:52:
18:be:06:bf:5e:37:fe:a8:4c:12:fd:3e:b4:4b:8f:
10:b7:e0:dd:09:83:0b:8d:bd:cf:7a:4e:91:d0:91:
b1:42:5b:9d:54:a5:b0:78:44:06:0b:95:49:d4:51:
3a:23:8c:9b:5c:f9:59:ca:f2:40:53:0b:16:c7:41:
62:83:81:dc:16:f1:1d:ce:9b:a9:1f:39:ad:3a:f5:
70:74:29:f4:28:0b:60:02:07:07:1a:3b:56:0b:28:
1f:73:d6:d5:af:d0:6f:1d:75:cf:c1:50:6c:06:68:
e7:aa:cb:d1:e5:4d:0e:d5:1c:7e:f4:85:2a:19:f0:
87:c3:b8:bf:5a:c4:6e:0c:9a:4e:b2:2a:ad:c1:7d:
b5:07:63:15:6b:f6:f3:86:8c:05:fd:f0:25:ce:0d:
a9:3f:71:1f:1e:66:d3:52:5f:90:40:2c:cd:2a:92:
1d:c5:39:a3:ec:29:c3:62:e9:76:33:17:e5:80:0e:
d4:88:49:cf:af:3d:c8:b7:1c:da:18:82:9a:0b:8d:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:AA:9E:A0:83:1D:10:F5:7A:CD:26:98:15:E2:8E:CE:41:2A:A1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kmyqnqCDHRD1es0mmBXijs5BKqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:a1:5b:7b:a1:a6:aa:9c:71:09:d2:1e:b7:eb:90:9f:b8:1c:
99:8e:b0:b7:ff:62:0c:26:fa:83:dd:3e:83:ae:39:de:ca:d7:
f1:fe:16:f9:8e:3d:eb:67:3b:0d:27:69:17:42:8d:0b:8f:54:
51:23:46:72:11:42:3d:fe:fa:48:f7:63:d3:d6:f0:c5:f3:c8:
79:5d:16:73:0e:9d:f8:b2:a5:ba:12:18:55:b4:ba:91:58:ba:
85:26:e2:20:58:f0:5d:98:c5:2c:46:85:15:36:f7:07:d2:70:
a6:fd:74:52:4e:a0:31:f3:59:96:96:b6:1f:3c:6a:48:16:51:
8c:da:7c:7c:0b:98:d8:9e:47:26:02:42:d1:0a:62:c4:8d:31:
00:5c:7a:51:20:9c:98:28:82:a8:7d:e4:f6:33:4b:82:c9:c1:
ed:25:99:79:82:03:35:8e:a0:1e:4b:77:6d:3c:8f:24:76:05:
9a:be:57:97:e5:fd:44:8f:41:09:b5:73:76:7a:ef:02:de:ae:
bb:ee:07:00:e1:62:72:20:f5:53:a1:99:a5:b8:f1:2b:f5:66:
b3:f0:01:03:2d:c7:9a:03:e5:1a:a7:d7:81:04:40:4d:73:75:
f4:d0:47:66:c6:4e:2d:f7:75:82:33:86:16:6a:d5:81:0d:a5:
15:5e:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:20:20 2025 by rpki-client