Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oP74khs0ul92e9B53zgzsuDPeOs.roa
File: oP74khs0ul92e9B53zgzsuDPeOs.roa (raw, json)
Hash identifier: ajlaenElxmfkEHlOp2ydqUZEgZr+PWQDswAEyPCs2CQ=
Subject key identifier: A0:FE:F8:92:1B:34:BA:5F:76:7B:D0:79:DF:38:33:B2:E0:CF:78:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15B9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oP74khs0ul92e9B53zgzsuDPeOs.roa
Signing time: Thu 05 Jun 2025 01:09:36 +0000
ROA not before: Thu 05 Jun 2025 01:09:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5561 (0x15b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 01:09:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A0FEF8921B34BA5F767BD079DF3833B2E0CF78EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:1c:0f:11:b6:c3:76:20:a2:d6:82:b8:74:
0e:eb:43:6e:cb:d9:d9:c8:f4:db:f8:b1:f1:20:71:
a4:1e:5a:a2:bf:87:ac:5d:69:75:5a:ff:36:b2:83:
ad:a2:45:a8:c4:b1:ea:6e:77:c7:2a:20:c5:b5:06:
45:c1:3b:51:70:52:90:ad:e4:68:74:dc:25:8b:bc:
ae:23:33:c6:56:f9:24:f7:55:80:32:0d:47:b1:16:
2a:5e:fb:49:8f:97:ea:50:39:14:3a:d8:1d:4f:99:
61:bf:55:ff:5d:0b:b6:c4:6a:a6:0f:58:d6:f0:12:
2f:30:56:db:41:54:db:70:6f:a8:dc:13:ff:f4:4d:
da:60:3c:c1:bf:6c:11:6a:75:9d:b5:cd:34:95:d9:
fd:b1:60:b8:8d:a2:17:8e:8d:12:58:5f:8e:ba:f4:
bf:f3:6d:69:55:99:66:ea:73:89:71:2d:9b:53:58:
48:55:45:ef:3d:57:f6:0a:f6:65:40:ba:3e:be:b2:
18:28:56:16:20:04:89:2b:92:21:ae:bb:72:8b:65:
99:85:a5:70:d4:79:00:52:58:8e:e7:9a:71:85:08:
f1:41:46:bb:22:ba:64:bb:25:99:de:ef:7a:f1:be:
ec:8d:d1:6a:09:28:67:91:c3:bf:46:a6:1a:d9:19:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:F8:92:1B:34:BA:5F:76:7B:D0:79:DF:38:33:B2:E0:CF:78:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oP74khs0ul92e9B53zgzsuDPeOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:cb:9e:43:35:36:09:4c:44:5b:c3:99:b4:47:7d:a4:fd:70:
7d:c4:29:f4:6d:f7:c9:13:79:5e:1d:9b:36:fe:2d:e2:b6:53:
81:f8:01:70:c1:69:cb:84:eb:93:13:5b:d4:84:95:da:c8:0d:
41:a5:aa:42:98:26:8f:91:fa:ce:7d:ef:75:3b:1c:a5:71:9b:
e5:fa:f6:80:78:42:8c:b1:25:8f:22:f8:74:a5:7e:aa:a8:7b:
0e:fb:e0:6c:76:71:a2:1e:3e:b8:b8:8f:29:e4:29:34:a2:28:
d1:3a:d9:0a:fc:6d:18:87:9a:5b:35:03:52:c6:2f:2c:dd:b8:
c2:3b:39:bb:9e:98:1a:fe:41:c6:9c:69:98:8e:21:ec:08:0e:
ab:a9:77:c2:48:fd:cb:65:98:08:0f:fc:7b:bb:03:1f:8b:1d:
fd:89:6e:f8:e2:a3:f4:a5:42:53:c2:22:fa:d4:5f:7e:1a:4a:
60:2d:59:a1:58:b3:77:02:26:10:cf:7c:6f:3c:82:67:c7:79:
02:e6:36:bb:66:e7:50:95:93:bd:1b:16:05:22:54:68:3b:03:
a5:01:7a:73:a4:37:4e:c0:1c:a4:01:08:58:72:29:29:ca:25:
7b:91:b3:77:f3:a3:d3:a9:d8:8e:98:f5:d1:6e:d2:07:43:07:
71:0f:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:25 2025 by rpki-client