Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nYCRTMlqIFxIkTdJxcsjpV5ZUZM.roa
File: nYCRTMlqIFxIkTdJxcsjpV5ZUZM.roa (raw, json)
Hash identifier: INrjNbNtTNExx3pARBl81eqz39ItVWO56eWQejPojJc=
Subject key identifier: 9D:80:91:4C:C9:6A:20:5C:48:91:37:49:C5:CB:23:A5:5E:59:51:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nYCRTMlqIFxIkTdJxcsjpV5ZUZM.roa
Signing time: Fri 06 Jun 2025 09:39:31 +0000
ROA not before: Fri 06 Jun 2025 09:39:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5821 (0x16bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 09:39:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9D80914CC96A205C48913749C5CB23A55E595193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:13:a4:57:fc:ec:b4:25:6e:93:b4:16:87:
1d:6a:ec:f5:d7:54:88:90:06:77:4e:05:66:50:50:
6d:c9:a5:a0:cd:53:d6:ac:2f:33:96:5e:05:74:a2:
e7:26:6f:57:8c:d7:8a:b0:28:11:72:64:1f:e8:4f:
c6:80:88:f1:79:39:3e:ab:f1:d5:03:a7:53:fd:c7:
8c:da:ad:ca:e0:b1:7a:67:5a:12:32:98:ab:4c:b7:
45:0b:6d:47:be:4d:a6:f0:7a:d4:92:65:e5:b5:8c:
ba:7d:75:5e:c8:71:d2:51:28:31:b0:96:69:bc:1d:
03:20:61:1e:70:4e:95:0c:c4:b4:6c:8c:6c:34:44:
41:7b:26:7c:c1:f7:d5:b8:02:0c:06:fa:77:9d:79:
73:88:73:dc:6c:aa:26:54:ff:85:11:c1:f8:8a:b8:
ec:92:3f:a4:27:f9:e2:88:80:5b:3b:bb:82:ef:59:
f8:b4:0c:cf:25:ba:ac:b2:35:43:70:14:b7:f6:5c:
f9:eb:f4:26:87:64:1b:33:f9:ff:13:62:0a:66:10:
03:5c:5d:f1:56:ac:bb:6b:7d:4f:96:6d:ca:be:74:
14:8b:d3:d5:a3:91:23:19:53:19:a7:b9:b4:16:d7:
da:39:10:64:e3:f7:93:35:4e:d4:6e:31:d5:ef:a1:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:91:4C:C9:6A:20:5C:48:91:37:49:C5:CB:23:A5:5E:59:51:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nYCRTMlqIFxIkTdJxcsjpV5ZUZM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:f3:7e:01:43:d9:1b:45:5f:f8:d4:ed:4b:7e:93:d1:41:11:
13:b3:1f:3f:fa:8b:f7:05:22:64:1e:5c:79:db:89:96:67:ae:
75:65:a7:81:05:f5:ab:40:0b:46:71:07:81:a8:e4:17:74:46:
f3:99:cb:29:a9:b0:dd:b3:69:7d:50:c1:18:a4:ba:78:06:d9:
4b:89:59:2e:f5:9f:c3:e1:51:cb:3f:be:a4:3e:71:72:68:31:
ef:06:b5:11:24:56:37:23:01:1c:2f:53:90:9b:5c:b9:7b:8a:
b9:a9:7d:e6:7f:a3:82:2c:e2:6c:07:7b:7d:4c:d9:eb:dd:b1:
62:1b:30:f9:cd:2c:12:01:b9:f2:86:b8:20:40:db:ec:92:05:
44:31:c5:1f:06:19:67:1c:ec:89:a4:ef:36:1a:d0:7f:70:7d:
b7:66:75:69:ed:c3:95:6e:f3:a1:3d:e3:b1:90:c1:c7:c1:32:
6e:31:dc:26:d4:bb:59:82:e7:9d:60:08:35:ac:c0:f6:9f:46:
6e:69:fd:9d:3f:5b:d5:e5:03:59:6d:45:b2:ce:41:94:88:bd:
66:03:0c:fc:ff:70:b9:55:7c:5d:f5:ca:36:18:95:9c:3e:ac:
fb:b4:39:ca:5a:df:4e:f2:21:5f:2d:39:d9:4c:0f:30:1a:1a:
a6:87:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 18:11:06 2025 by rpki-client