Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uXzgk5AWUn3lwSUs3NHBCioaLnk.roa
File: uXzgk5AWUn3lwSUs3NHBCioaLnk.roa (raw, json)
Hash identifier: rNuDVdEQ7WS2OcvQXP2OGGOd04kdai0H6SD1+BrDwXk=
Subject key identifier: B9:7C:E0:93:90:16:52:7D:E5:C1:25:2C:DC:D1:C1:0A:2A:1A:2E:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C0D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uXzgk5AWUn3lwSUs3NHBCioaLnk.roa
Signing time: Fri 23 May 2025 03:38:25 +0000
ROA not before: Fri 23 May 2025 03:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 03:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B97CE0939016527DE5C1252CDCD1C10A2A1A2E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:da:e3:f7:7b:4c:e6:a9:97:47:92:a3:95:
b6:af:f6:fa:fb:ee:30:20:7b:1b:e3:7e:54:f1:06:
70:99:0e:ba:77:27:ef:b9:0e:2f:80:91:21:95:99:
0f:e2:53:a5:2b:ad:52:96:8e:e5:75:6b:1b:d8:eb:
1b:e1:56:98:00:53:9c:6e:30:bb:75:f7:1f:bf:5d:
08:2b:bf:1a:57:a3:55:69:5b:5b:22:c6:46:91:38:
c8:14:1a:32:47:a9:4f:8b:03:e5:e8:2b:7a:9f:be:
45:6c:fe:72:60:3d:22:ea:93:89:6c:6b:84:31:3b:
dc:95:27:75:19:a6:d2:6b:60:e2:0e:35:3d:c0:c7:
4c:0f:f0:69:98:d6:3d:fc:27:19:13:62:ac:07:93:
66:84:77:f1:04:66:2c:46:09:fa:1a:bb:50:71:1b:
d0:d0:fc:66:eb:b2:6b:fc:92:8c:a8:15:1a:01:72:
33:f4:39:68:88:e6:f6:9b:83:47:13:14:1c:b2:15:
24:d5:76:7c:ed:78:c8:9b:99:c7:07:02:a4:ae:28:
39:20:57:39:3e:ab:3d:cb:5b:23:fc:08:bd:2a:70:
66:fe:37:3d:36:bb:b1:3c:0b:21:52:a3:f8:3b:07:
5b:33:07:ff:67:bc:6f:52:a3:d4:44:36:eb:a5:c3:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:E0:93:90:16:52:7D:E5:C1:25:2C:DC:D1:C1:0A:2A:1A:2E:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uXzgk5AWUn3lwSUs3NHBCioaLnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:3c:21:45:57:3e:fd:6b:67:6d:5b:dc:56:81:47:e0:86:82:
41:1f:66:97:a3:02:8f:80:a9:24:76:a4:87:b8:ec:79:15:c9:
71:51:d4:b6:bd:59:2c:0d:15:d4:09:d8:e3:21:7c:bb:f4:eb:
b2:44:8b:bf:b7:9c:ee:96:9e:bb:ad:4a:e2:31:77:72:1d:52:
ea:2f:5b:6e:bb:a0:29:8d:e2:be:1a:37:25:5d:97:a8:79:1d:
f9:2a:d7:a8:06:cd:43:d8:c4:3c:9d:fb:2a:80:c8:c9:93:69:
de:ad:6c:a1:1c:0b:b5:81:82:a8:fe:7b:15:1e:68:26:c7:bf:
f8:ea:77:38:4a:82:db:c7:88:2e:fa:46:d2:d8:01:e4:2e:71:
28:8b:ed:24:34:40:7c:91:c7:d1:47:44:2a:00:88:c6:9d:7d:
73:a6:d0:39:f0:5f:97:9b:ff:7f:2e:49:fa:bc:25:ae:6d:04:
c0:ae:59:c8:fc:61:60:de:e4:2b:76:7f:23:b2:4c:3e:57:d1:
bd:d2:37:ca:75:8d:4f:81:b7:dc:bd:2b:be:7f:7b:42:95:40:
71:0e:72:f0:b4:ce:ba:8b:a7:8f:57:20:10:12:bb:bc:e5:c6:
31:e8:80:60:f1:79:17:15:a2:e0:6e:11:2e:af:4a:6d:cc:f6:
5b:91:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:45 2025 by rpki-client