Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oRmdFVxpq87U8yTDOcHvH64QXmM.roa
File: oRmdFVxpq87U8yTDOcHvH64QXmM.roa (raw, json)
Hash identifier: +at7rAZA2T7BbLDlIAvfz7G2JjN0CLl8C+jxw0luZCY=
Subject key identifier: A1:19:9D:15:5C:69:AB:CE:D4:F3:24:C3:39:C1:EF:1F:AE:10:5E:63
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BC9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oRmdFVxpq87U8yTDOcHvH64QXmM.roa
Signing time: Fri 13 Jun 2025 03:32:25 +0000
ROA not before: Fri 13 Jun 2025 03:32:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7113 (0x1bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 03:32:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A1199D155C69ABCED4F324C339C1EF1FAE105E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:49:4a:37:00:87:a9:da:d8:5d:ed:6c:56:
0a:2f:f2:7d:95:84:7f:3a:19:34:32:2d:69:09:0d:
a7:09:c8:fe:c1:fd:9e:b5:82:dd:c2:50:dc:93:56:
1d:92:83:db:33:b9:d0:0d:d1:f0:ba:6e:51:0e:b3:
9a:b7:97:5e:dc:35:56:c2:a9:b4:b5:19:c3:80:17:
7e:95:ae:62:ed:d6:1b:98:37:e2:2e:1f:03:04:73:
47:02:ec:09:a7:23:d2:a0:c9:22:49:aa:74:8f:22:
df:1d:b3:dd:ad:9a:2e:16:b9:7a:b7:2b:71:f3:80:
46:7d:09:0b:9d:0e:5c:17:87:94:79:03:1c:75:47:
d2:96:34:33:6f:74:f2:0b:4b:01:c5:2b:ba:46:97:
7d:1c:fe:2a:d8:71:29:58:49:3d:b8:40:d1:ad:d1:
7e:58:82:47:ab:34:3f:5d:fe:55:a9:fe:38:d1:5a:
98:a6:8e:ca:49:17:34:34:44:29:4a:e2:34:93:29:
d8:1e:48:cb:6f:46:b4:79:14:8f:94:d0:f4:22:8b:
c9:2f:bf:b8:57:34:b1:32:95:7b:10:71:76:82:61:
54:28:79:d7:7b:9c:f8:f7:20:8c:da:fb:32:23:db:
9e:47:a2:a0:b8:fa:50:22:92:ac:7e:a2:81:d0:23:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:19:9D:15:5C:69:AB:CE:D4:F3:24:C3:39:C1:EF:1F:AE:10:5E:63
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oRmdFVxpq87U8yTDOcHvH64QXmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:fc:b6:9b:f7:f8:07:3d:d8:3e:9e:90:bc:58:9c:aa:4a:d7:
8a:a6:26:ed:6a:68:63:ce:88:22:e4:4e:37:4e:f8:da:87:98:
88:d4:b6:35:0e:08:a7:5b:88:2a:bd:52:5a:a1:fd:b6:62:d9:
03:88:91:c7:2c:b4:e3:38:e3:2d:a1:0f:65:53:8f:54:1e:b6:
9b:52:a2:ee:e7:0b:cc:cd:94:81:4f:e4:4c:cf:c4:5c:6b:ac:
b6:eb:15:d6:a8:46:fe:ba:21:b1:02:df:b0:c1:bc:c7:cb:b5:
0a:24:de:19:db:03:03:21:b2:c0:a8:f2:0c:63:7f:82:af:7b:
48:21:8e:19:02:76:75:14:98:e1:6e:4d:92:31:ea:62:d2:d0:
c4:df:3c:3d:3a:e9:8b:50:a0:9b:12:49:e8:a9:8f:af:cc:2e:
42:ca:91:51:79:6c:7c:1a:37:61:61:78:5f:0d:cf:6d:63:28:
d0:8a:8d:8a:9a:60:4c:e6:de:85:51:ae:95:2e:ba:24:b0:9c:
7c:f9:cc:e8:bb:f2:19:ff:7f:bd:12:ce:6d:1e:f3:0e:94:30:
b9:be:f7:a3:db:1f:9a:db:5e:f5:f6:47:68:10:95:0a:97:3e:
27:a1:3e:8a:6e:a0:a9:49:d3:0a:5c:ae:aa:09:c3:cc:e8:f6:
25:63:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:30:40 2025 by rpki-client