Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vRI1VR9D73l046hN5vDE8lrMwMU.roa
File: vRI1VR9D73l046hN5vDE8lrMwMU.roa (raw, json)
Hash identifier: RJH681dLid2EU6BZ9ODuVlKLS4KrRcmZB7NZxxyODec=
Subject key identifier: BD:12:35:55:1F:43:EF:79:74:E3:A8:4D:E6:F0:C4:F2:5A:CC:C0:C5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vRI1VR9D73l046hN5vDE8lrMwMU.roa
Signing time: Fri 16 May 2025 07:08:03 +0000
ROA not before: Fri 16 May 2025 07:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 07:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BD1235551F43EF7974E3A84DE6F0C4F25ACCC0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:c7:ce:d0:d0:3c:cd:e3:ee:81:91:95:a7:
63:4e:68:eb:0e:d3:e6:f5:96:81:e2:21:34:f2:a3:
10:3b:7d:b5:f5:47:c4:0a:f1:56:89:95:18:72:11:
cb:b1:bb:9a:45:9d:d5:fe:e0:0e:a0:a9:7c:1c:ea:
92:2e:3f:cb:e4:62:e2:7a:83:73:06:0b:40:9e:f9:
ab:85:79:70:16:f2:c5:81:90:33:76:8a:8b:79:cd:
80:6e:3f:96:df:5a:69:ed:b2:df:90:e3:61:1d:28:
d5:48:52:22:38:11:d9:49:22:58:31:c8:0a:dc:6a:
5b:97:0d:0c:db:be:83:8e:bc:30:50:2f:6c:07:4d:
75:81:5f:34:6e:bc:ec:0c:a6:68:0c:da:54:92:bc:
53:67:37:9e:70:15:37:0c:e4:81:4d:05:bb:76:ab:
60:be:39:41:bb:ff:39:d7:80:b0:07:d3:b7:20:98:
dd:04:2b:e3:0a:b1:7a:62:b6:4d:fa:b8:c6:b6:39:
2b:59:62:a1:9f:54:16:ae:82:ef:50:b3:7d:20:0f:
ca:ea:c7:e0:a1:c2:09:49:e5:ab:14:c3:ec:5a:a3:
43:eb:e3:21:9e:f0:29:ac:66:16:1c:97:58:5e:1d:
9e:ad:e8:59:be:78:be:5a:5f:bf:c5:78:44:49:93:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:12:35:55:1F:43:EF:79:74:E3:A8:4D:E6:F0:C4:F2:5A:CC:C0:C5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vRI1VR9D73l046hN5vDE8lrMwMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:b7:59:5f:c5:ca:c9:a2:ab:90:65:49:7d:b9:d4:cc:39:eb:
de:73:ef:5b:b7:54:e4:74:52:85:06:cb:28:fc:37:e6:36:60:
34:1c:a3:bc:61:2e:34:38:16:03:a7:42:f6:26:8f:fd:56:3f:
dc:f4:69:32:26:5b:b5:51:79:c6:db:cc:86:4d:d4:c9:1a:36:
d0:99:81:89:cf:98:c5:1f:74:e7:41:24:eb:b3:aa:0c:ed:a2:
a2:6d:94:0d:04:24:33:97:86:31:a1:43:8f:7d:c9:92:06:f0:
61:ea:ab:e8:63:e0:7a:51:fa:f8:62:81:7d:48:42:05:66:ea:
87:65:40:fa:48:37:81:d2:37:4e:40:d1:f9:ba:c5:2c:47:16:
95:79:08:d1:c2:2b:74:37:bd:16:87:14:ca:73:14:de:14:bf:
f3:de:7a:40:8f:75:0c:0f:9c:31:cf:94:ee:e2:39:be:23:b6:
50:b5:6b:4f:e2:c1:4c:17:d3:cd:32:7d:fd:5a:fa:73:d2:2d:
a6:ed:1e:de:ea:28:6c:c8:cf:82:a6:3b:e5:d7:96:f5:47:61:
8a:76:03:89:6e:65:03:cb:39:72:7b:b8:06:e3:ef:7b:98:ae:
81:64:ed:8d:f5:42:24:18:45:8b:11:4a:63:e1:c4:3c:8f:d7:
9b:99:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:21:35 2025 by rpki-client