Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xXIPP33Lumhf6Jf-FBODTSfbBKs.roa
File: xXIPP33Lumhf6Jf-FBODTSfbBKs.roa (raw, json)
Hash identifier: cMM+MS/GiODLtDLz/E6GnuETAoULquU1+vtrC6hENtY=
Subject key identifier: C5:72:0F:3F:7D:CB:BA:68:5F:E8:97:FE:14:13:83:4D:27:DB:04:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19B1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xXIPP33Lumhf6Jf-FBODTSfbBKs.roa
Signing time: Tue 10 Jun 2025 08:09:44 +0000
ROA not before: Tue 10 Jun 2025 08:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6577 (0x19b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 08:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C5720F3F7DCBBA685FE897FE1413834D27DB04AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:1c:1e:b1:ff:a7:46:d5:38:b3:62:7f:f0:
4f:12:bb:bf:94:4c:1e:2a:02:c1:5f:d5:31:f4:d5:
91:cb:20:85:c8:ed:75:c4:96:84:bf:03:46:2e:46:
b7:b0:33:ba:c8:21:5f:84:4c:a7:3d:01:fa:0f:8d:
15:5f:46:6c:a8:57:fe:bb:27:aa:a8:80:ed:e1:a2:
c8:10:71:ae:35:4b:73:e6:78:41:dc:67:ce:ee:6a:
7d:96:86:a7:d6:9d:56:30:86:2f:0d:1a:8a:93:6b:
cc:23:17:a7:38:3f:91:25:bf:dd:76:4e:f6:bd:ae:
df:40:47:65:77:29:96:5d:a1:9c:fb:99:6d:7c:a4:
79:94:18:7c:fa:51:16:a2:89:e1:e3:9a:00:c0:a5:
1e:db:65:eb:50:96:70:4a:52:3d:cb:5a:12:4d:94:
19:ea:f8:d6:ec:73:82:e0:2a:1f:74:2e:d7:05:9e:
45:75:84:6a:d4:8a:28:68:96:40:92:f7:b5:5b:03:
e3:1e:24:00:3c:48:23:a5:3f:b3:47:7c:19:91:6a:
bf:1d:bd:43:51:1c:46:dc:5e:54:d4:32:4c:57:84:
e6:d2:e4:b9:38:dd:68:5a:2b:3b:b9:80:32:ce:19:
9e:d0:7d:39:dc:d9:ae:79:fd:24:8b:fd:d9:07:78:
38:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:0F:3F:7D:CB:BA:68:5F:E8:97:FE:14:13:83:4D:27:DB:04:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xXIPP33Lumhf6Jf-FBODTSfbBKs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:45:b7:5d:25:ac:55:fb:84:5f:59:85:35:2c:ee:9d:be:70:
16:7e:09:f8:07:71:a3:e8:76:fa:c2:d4:25:dc:ac:aa:67:a3:
37:dc:e3:9e:d6:3a:64:10:1b:bf:9a:8f:a1:fd:43:93:c2:91:
61:12:70:6d:f9:c8:ed:cc:c5:0d:59:82:14:73:d4:c8:85:5b:
e6:80:46:a0:74:92:e4:fc:6b:89:fe:78:10:7b:57:1f:8c:d7:
68:b9:ad:07:15:1a:53:ab:f3:c0:3f:44:0c:e5:80:be:c1:08:
29:ca:d0:e2:8b:25:57:ef:e7:0c:27:41:72:7e:af:0b:b9:fa:
e1:4f:b4:24:01:ac:ee:49:d9:ca:e3:ed:f2:ed:91:d8:81:81:
1f:1b:de:02:89:1c:1e:9e:8f:ad:97:4e:5d:5e:88:9e:79:7e:
83:d5:26:fb:b1:75:0b:b5:10:3b:01:6b:28:1c:ff:46:b6:56:
48:a7:09:e3:32:59:e2:f1:c3:c9:6f:67:0f:a5:46:09:3f:15:
3c:a7:a5:d4:67:a5:c9:2d:c7:fc:ac:b2:ff:51:94:45:5a:2b:
f0:c2:51:8e:37:2a:f1:a5:3a:a5:d4:05:aa:52:88:a0:fc:29:
c5:01:fd:bc:7f:4b:8b:cc:a2:32:82:54:a9:62:4a:f7:9e:5f:
45:0d:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:58:50 2025 by rpki-client