Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uRXAhIT9eN6PNkabK6Cr0m01hRY.roa
File: uRXAhIT9eN6PNkabK6Cr0m01hRY.roa (raw, json)
Hash identifier: iSFZ6uo0U8YEK3vh854JBupj2m+PABzEJgclHHWHFjo=
Subject key identifier: B9:15:C0:84:84:FD:78:DE:8F:36:46:9B:2B:A0:AB:D2:6D:35:85:16
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18D9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uRXAhIT9eN6PNkabK6Cr0m01hRY.roa
Signing time: Mon 09 Jun 2025 05:09:37 +0000
ROA not before: Mon 09 Jun 2025 05:09:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6361 (0x18d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 05:09:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B915C08484FD78DE8F36469B2BA0ABD26D358516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:51:23:03:66:bd:1c:c7:b6:14:86:cb:71:
1f:f5:96:d0:a2:bb:99:2d:00:9f:88:52:96:98:8e:
99:4e:45:1c:29:5c:82:d0:ce:f5:2f:f9:15:57:cc:
d9:b5:f0:a8:d9:a8:4c:89:a9:2e:02:79:d8:b3:fe:
47:28:83:11:de:7e:de:1f:d9:80:26:60:cd:fa:51:
f6:f9:58:59:f7:f1:9f:8b:1f:b8:5f:dd:a5:dd:4c:
18:df:30:02:ca:2d:b4:1f:bf:1e:33:4f:59:1f:f3:
ec:6b:f7:a0:68:a7:b8:46:ef:0e:49:57:ab:a9:98:
13:13:cf:46:30:0d:f4:46:40:2e:4a:fe:f7:26:2e:
ec:d4:8b:ed:f4:fd:11:24:13:77:10:10:c2:14:f6:
90:4d:0a:26:6e:ca:95:ae:34:da:9b:fd:6f:90:1d:
ea:f3:6f:ad:cb:6a:fa:27:d6:3b:9e:db:b6:51:66:
19:ac:0f:5a:73:fe:67:7b:b3:9c:82:f0:c2:a5:91:
11:b9:9c:ed:71:f8:01:35:c2:40:95:34:14:c3:d3:
42:bd:a2:75:91:3e:f7:6b:66:e5:30:5d:a6:b4:78:
10:d0:03:db:49:ba:d3:5a:7c:44:33:74:84:27:a1:
57:c1:0a:9a:ad:08:f1:c2:2f:88:ce:48:3e:5d:98:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:C0:84:84:FD:78:DE:8F:36:46:9B:2B:A0:AB:D2:6D:35:85:16
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uRXAhIT9eN6PNkabK6Cr0m01hRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:53:6c:c3:bc:bc:04:b7:77:47:9f:42:b6:40:7d:60:6c:d3:
67:7a:69:ac:2a:97:c9:37:f0:68:b3:92:9a:eb:f2:4f:4d:0f:
fe:52:47:0e:ff:7d:2f:06:c6:8e:00:d6:b4:3d:36:56:6e:be:
84:95:fb:bc:df:0c:40:c9:9d:1a:4c:30:db:70:68:7c:71:63:
76:f0:46:43:b7:44:1d:b7:1e:73:c1:ae:7e:15:64:9a:2e:84:
be:f0:d8:8c:b0:e5:11:8a:c5:5a:c3:12:25:09:dc:61:71:df:
b1:e5:7d:a0:0a:8c:dc:cf:1f:39:72:38:61:7f:cf:93:91:8d:
39:98:07:46:af:6b:d2:dd:13:5f:14:2a:0f:a7:6c:d5:b4:af:
57:fe:80:0c:4d:5c:6e:20:62:e4:7a:25:06:88:0d:51:09:05:
d4:80:7b:1a:ee:87:93:8e:85:d8:67:e8:06:2e:06:a7:bc:96:
4f:84:27:79:63:9d:3f:11:18:96:69:da:e2:49:83:76:8a:49:
40:79:e3:e1:b7:f2:cf:e4:b0:fc:78:3a:18:9b:14:6f:15:d9:
9f:d5:c1:cf:ef:82:4b:fc:6a:ee:2d:69:50:26:6c:73:f7:cc:
ba:8f:fc:d5:aa:b3:d0:9c:b7:fc:29:77:0d:1e:54:65:58:1b:
a2:2f:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:36:07 2025 by rpki-client