Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sY9rRcUKXZUKFjI1uVka3s4DE5U.roa
File: sY9rRcUKXZUKFjI1uVka3s4DE5U.roa (raw, json)
Hash identifier: dNqWcP00NOixkhLKYTaDpeP9SZ89CPOOcS7X8se70Ss=
Subject key identifier: B1:8F:6B:45:C5:0A:5D:95:0A:16:32:35:B9:59:1A:DE:CE:03:13:95
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CFD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sY9rRcUKXZUKFjI1uVka3s4DE5U.roa
Signing time: Sat 14 Jun 2025 17:39:55 +0000
ROA not before: Sat 14 Jun 2025 17:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7421 (0x1cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 17:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B18F6B45C50A5D950A163235B9591ADECE031395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:fe:a3:74:d0:49:b0:7a:b2:7a:46:70:2d:
34:2c:d9:ec:05:8a:6c:4f:cf:2b:1e:6d:62:e3:04:
a3:e1:da:23:d9:73:50:29:87:f6:f7:b4:c1:00:4a:
c0:4d:ea:31:91:0b:74:91:2a:57:bd:7a:cb:9f:25:
61:f9:08:84:66:92:32:67:57:f5:2d:03:31:2b:24:
16:7b:e0:36:d9:7d:77:aa:50:0a:18:17:2c:0c:b7:
a7:d0:6f:d4:4f:ea:a1:83:de:10:73:2a:5b:38:9e:
4f:04:b9:52:64:94:5e:ba:58:af:c7:02:89:1f:15:
ae:7d:c8:a9:08:c6:29:88:4b:2f:ea:f6:2a:a6:53:
ad:57:5e:67:b3:79:53:7e:84:77:8c:c7:c5:9a:03:
af:72:d4:2d:38:14:f2:f2:12:a9:7a:20:33:08:bb:
b4:0a:4e:08:6c:07:8d:99:b7:ae:22:93:49:b7:4c:
89:a9:36:ce:58:e2:ca:3c:74:57:41:30:d2:b0:e6:
40:e9:71:a7:c4:99:3b:ac:43:c8:17:65:b5:48:1a:
2a:55:36:01:65:62:a2:26:d3:c0:78:07:a7:7c:ac:
bc:a1:2c:1e:2c:9f:b4:cb:c5:bd:ab:34:eb:0f:89:
28:0a:6d:af:6e:57:1d:f2:4f:51:74:89:4c:c8:90:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8F:6B:45:C5:0A:5D:95:0A:16:32:35:B9:59:1A:DE:CE:03:13:95
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sY9rRcUKXZUKFjI1uVka3s4DE5U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:6a:12:94:05:c1:49:1a:54:9a:f4:4c:f3:c5:81:af:63:99:
af:d7:87:0d:7f:2d:54:3e:b7:45:69:b6:c9:2d:f5:73:ce:cc:
28:bf:a4:24:0c:06:e8:ac:41:71:54:c5:3a:91:e5:25:91:57:
f8:f0:41:f6:01:60:a6:5c:6d:26:f7:a3:7e:9e:48:db:64:67:
e3:9f:e3:0c:15:4f:e5:df:7e:9e:8b:77:34:c6:25:b8:d8:38:
34:9e:fb:c7:a9:59:3f:17:d4:f0:4f:18:89:fe:ab:38:cf:41:
ea:a5:0f:17:89:ab:0d:40:ce:e0:dc:59:60:29:40:d9:66:13:
df:5d:71:f3:5d:4b:b8:bf:52:a5:c0:f7:03:a4:79:fc:ce:64:
af:40:05:91:ea:97:f9:fb:ad:7e:d4:3d:ef:db:89:a6:7f:07:
1d:8d:09:5c:19:41:fd:9b:19:b1:37:af:97:c2:66:b2:d7:59:
f0:48:4a:08:73:fc:61:2b:b5:ba:d2:1d:7b:ef:18:e5:4c:07:
aa:7f:94:b1:4e:80:3d:24:5e:41:86:97:73:54:ae:f3:81:60:
e3:fe:b9:a5:1b:56:71:2c:0b:dc:6c:12:4e:0c:4f:bc:bc:85:
09:bf:13:d4:f7:92:9c:aa:da:23:da:8e:13:1b:67:8f:55:22:
3b:7e:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:03:58 2025 by rpki-client