Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nCWXXt7ADSgL2428GBXjkFKtwTg.roa
File: nCWXXt7ADSgL2428GBXjkFKtwTg.roa (raw, json)
Hash identifier: XbS42w4D1He1ghnjB9bHjd5JdE/oa0HvOAJyCYO7od8=
Subject key identifier: 9C:25:97:5E:DE:C0:0D:28:0B:DB:8D:BC:18:15:E3:90:52:AD:C1:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0699
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nCWXXt7ADSgL2428GBXjkFKtwTg.roa
Signing time: Thu 15 May 2025 21:08:03 +0000
ROA not before: Thu 15 May 2025 21:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 21:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9C25975EDEC00D280BDB8DBC1815E39052ADC138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:5e:9b:89:30:57:ba:d0:b9:8a:28:e3:d7:
bd:6e:a3:26:d0:6d:b2:ec:48:24:15:7f:b3:3b:0b:
85:a5:86:f7:73:7c:ea:d8:12:02:a4:00:78:33:1b:
62:16:a4:22:cb:03:50:b6:5a:88:4d:dd:91:8d:e6:
45:11:b9:ad:a1:ff:b2:83:da:76:5c:2b:14:44:81:
f5:9f:ba:ac:d6:ca:8d:a7:a0:8f:2d:ab:c7:ef:08:
b6:a1:09:04:4f:1a:83:60:50:01:74:f7:8c:79:84:
f0:94:56:8c:0b:15:2e:5b:11:e9:85:e3:a0:21:92:
8b:6e:3f:0c:1f:e6:b5:7e:f2:0b:62:32:a4:da:7d:
f4:c8:d6:3e:72:66:f3:fb:3f:92:59:ad:6a:ad:1d:
ec:d8:3f:9c:b2:2c:68:1f:c1:97:4e:3e:41:cb:06:
7e:2d:36:84:5a:12:b8:c9:9c:08:86:7a:e8:0d:52:
ce:b2:73:75:74:fe:ad:8a:ec:77:87:11:26:19:37:
e5:11:7c:f3:c5:a7:de:d9:54:ee:2b:2e:05:44:77:
95:c7:94:a3:16:bf:8b:db:a3:06:a9:1e:aa:9b:8d:
91:d5:68:14:40:02:a5:6f:89:1d:f9:14:7c:26:88:
2a:d0:38:79:08:d3:36:00:00:92:7f:16:fc:a9:12:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:97:5E:DE:C0:0D:28:0B:DB:8D:BC:18:15:E3:90:52:AD:C1:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nCWXXt7ADSgL2428GBXjkFKtwTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:ef:1f:88:b5:9a:0e:a0:a9:0e:bd:9c:58:d4:ff:a7:5b:ff:
4b:dc:aa:c2:db:3f:05:f5:e9:ee:d0:46:70:e9:e6:db:e1:5e:
29:f9:ff:c7:ff:80:f3:59:4d:a1:ec:56:b6:68:37:8d:1d:0d:
eb:cd:7a:68:a3:0b:07:18:aa:7f:cf:aa:9f:68:78:fe:ef:0e:
4e:ab:d8:f2:bd:1e:02:3a:c6:26:8a:e0:d9:63:2a:3b:58:eb:
51:dc:3d:f7:40:0f:4e:79:d0:82:08:c6:fc:03:b8:b9:65:b2:
4b:7f:cd:d0:1a:80:ba:2b:36:9f:fe:e4:d9:92:f5:f6:3e:17:
96:68:28:53:d1:11:1e:c7:28:30:40:c7:5a:96:0a:37:fc:f0:
d0:fe:ef:09:2f:94:08:ac:6a:26:10:ad:cf:fa:33:a6:44:7f:
5b:9f:ef:a3:08:c4:45:86:b7:13:b6:be:91:1d:49:42:4f:3a:
18:62:b3:c5:5e:89:74:e6:50:bd:15:d1:fe:1b:a6:b2:99:d0:
65:60:b7:63:4f:95:e3:78:65:37:be:60:c9:56:13:9d:51:a7:
51:70:87:b4:95:e6:d8:f5:5b:72:14:56:73:7f:12:a8:90:0f:
0d:f9:8b:d6:52:93:ab:aa:28:48:23:a7:78:53:0a:e1:8f:10:
86:8e:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:57:06 2025 by rpki-client