Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mt2DJ45rJTV0BBrMgGVQP1pI2Yo.roa
File: mt2DJ45rJTV0BBrMgGVQP1pI2Yo.roa (raw, json)
Hash identifier: KJknyRAwDOkkxwxBkpXwtyYufO6QHI0hj4hG0XHx6os=
Subject key identifier: 9A:DD:83:27:8E:6B:25:35:74:04:1A:CC:80:65:50:3F:5A:48:D9:8A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C1D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mt2DJ45rJTV0BBrMgGVQP1pI2Yo.roa
Signing time: Fri 13 Jun 2025 13:39:53 +0000
ROA not before: Fri 13 Jun 2025 13:39:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7197 (0x1c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 13:39:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9ADD83278E6B253574041ACC8065503F5A48D98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:a5:10:63:79:94:ac:b7:e2:8d:c9:64:06:
52:c2:8f:bb:e8:44:0b:69:c3:ed:7e:9c:36:56:89:
5a:6b:c8:8d:d5:1e:cc:cf:4d:92:32:b9:4b:ae:db:
b0:4a:ae:ec:9d:0c:fa:86:f4:c1:60:13:a5:93:3c:
56:7e:e5:bc:1b:79:f5:0a:bd:72:ae:9c:f3:86:f6:
51:02:1a:7c:57:90:90:ca:10:de:3e:1a:11:d6:1b:
67:16:cc:62:20:81:79:c2:bf:3d:72:0e:95:0a:95:
67:7a:2c:7f:71:b1:5b:8f:24:20:f0:13:96:d6:d2:
e0:8f:ef:3f:b4:13:ca:c6:76:04:f4:bd:c5:8b:7b:
a8:e4:ae:e9:d7:be:46:89:85:f5:96:67:20:b8:c0:
2f:f9:98:fc:c1:39:5d:ee:49:f2:7d:6a:81:99:fa:
f2:d1:0d:5b:53:c3:b7:07:8a:9d:5f:6c:1d:b8:5a:
ad:ff:61:a0:5d:09:0d:f8:af:7a:d0:73:95:f1:ca:
3b:77:46:8a:b4:7b:a4:99:8f:8d:03:b5:db:7e:07:
9a:e0:f9:77:95:56:c1:57:06:d1:4c:cc:e6:d5:56:
0b:50:ba:13:03:34:33:84:9b:d1:34:43:b6:b3:59:
25:c3:4b:b3:64:93:43:88:b8:51:48:d5:19:b8:96:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:83:27:8E:6B:25:35:74:04:1A:CC:80:65:50:3F:5A:48:D9:8A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mt2DJ45rJTV0BBrMgGVQP1pI2Yo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:5d:cd:28:30:fa:fa:b2:f9:1e:82:83:a1:f5:73:c9:e3:f0:
bc:70:12:55:87:1c:4c:c0:1d:2d:c6:5b:d6:cd:12:c7:08:48:
1e:e2:14:0a:4b:2f:49:0d:19:7d:f6:1d:8c:f0:f8:ef:f6:63:
3f:f4:dc:d4:b6:29:93:4c:82:fd:ec:f6:87:9d:3c:e7:4a:41:
1b:f9:75:1f:93:18:d7:bc:5f:bc:82:a1:a5:1a:b1:37:4f:24:
e3:24:89:12:0f:40:c6:f1:d3:5b:44:d6:66:a9:df:f7:10:53:
7b:93:01:9e:4a:ae:7a:e2:f2:ba:13:8c:ab:2a:a0:35:ce:2d:
af:04:5a:d2:f4:f4:32:ca:45:01:66:b1:43:89:03:2d:ca:ed:
e8:c7:83:df:de:4f:e7:3f:b5:fd:d6:dc:45:bf:0e:0a:a1:8b:
f4:ef:e7:bd:4a:5c:f0:5a:4e:c7:42:ab:04:fd:dd:af:18:88:
0e:6e:f5:67:64:2a:c7:2c:1f:3e:08:ff:e4:5d:8c:71:6b:c9:
82:57:f1:62:61:3e:1c:e7:07:af:25:66:1d:35:c6:b5:b5:8b:
1a:2b:74:59:9e:c0:9c:bf:20:7e:66:d9:fe:fb:05:62:40:d2:
2d:76:d0:c5:76:ce:c7:3c:4d:40:da:1c:f2:2c:40:a4:bc:61:
5e:8a:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:59:03 2025 by rpki-client