Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zqapeo575HPE-_4KDVsfdEQHsjU.roa
File: zqapeo575HPE-_4KDVsfdEQHsjU.roa (raw, json)
Hash identifier: Ecl2T9pf9js5TIjP/q7WnHCKuuHKXY5o4ebdOxWzsZ4=
Subject key identifier: CE:A6:A9:7A:8E:7B:E4:73:C4:FB:FE:0A:0D:5B:1F:74:44:07:B2:35
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 168D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zqapeo575HPE-_4KDVsfdEQHsjU.roa
Signing time: Fri 06 Jun 2025 03:39:25 +0000
ROA not before: Fri 06 Jun 2025 03:39:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5773 (0x168d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 03:39:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CEA6A97A8E7BE473C4FBFE0A0D5B1F744407B235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:35:48:ae:93:f8:4f:45:24:7a:cd:45:d3:
01:4e:85:b4:47:00:c6:d7:49:e5:28:c7:16:11:a5:
bd:42:b6:dc:10:39:45:0c:8b:29:e2:de:3f:ce:8b:
9b:f3:a3:89:76:eb:21:9c:91:f6:2c:e2:d5:aa:6d:
8f:b4:f9:39:f3:63:8b:f9:40:a9:fa:b8:7d:4f:29:
f4:ea:2e:44:06:6b:69:94:15:b2:64:69:26:dd:79:
ef:36:b7:a6:cc:3c:b3:ae:68:95:6b:c2:60:0e:6f:
79:3b:b5:2e:c3:22:e7:23:b0:06:d2:4e:9a:77:b8:
a3:d5:fb:17:a6:20:ae:90:e6:1d:73:43:0a:8a:3d:
c1:52:a4:8c:4b:f2:ac:76:11:5b:55:d7:1d:16:a5:
b6:4d:f4:56:bc:f0:66:59:61:05:f1:e7:37:7a:4b:
80:65:fd:c4:58:6f:cc:57:fc:38:9f:dd:3a:78:57:
d5:f6:df:4f:f6:c7:5e:5e:9b:6f:43:b8:f0:3a:0f:
83:d6:55:26:95:ff:f1:01:75:27:f0:9d:6c:d0:14:
da:1c:c0:00:65:76:f1:60:3e:15:9d:79:2b:af:b0:
d3:ef:54:5d:fd:f1:fb:95:70:c2:49:28:4c:28:7c:
06:a8:ed:fe:b6:76:09:5b:25:fb:95:f4:47:18:ee:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:A9:7A:8E:7B:E4:73:C4:FB:FE:0A:0D:5B:1F:74:44:07:B2:35
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zqapeo575HPE-_4KDVsfdEQHsjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:e5:81:87:e9:42:9d:01:6b:31:81:6b:48:da:3a:bf:2a:38:
f6:36:82:95:d8:6b:cc:e8:2c:ff:f5:e1:90:4c:89:b4:96:f5:
db:fd:d6:47:1a:54:dc:d4:5a:a7:c0:65:93:a2:b8:f4:97:4d:
6d:0a:31:c7:b9:61:78:be:af:aa:1f:5b:91:b1:eb:60:b3:96:
da:07:d1:f8:15:8d:de:aa:a2:37:f2:f9:7f:b7:e2:aa:55:9e:
5c:35:b1:f3:e7:be:48:ea:fb:2b:d3:67:13:83:4a:ac:54:da:
19:81:f7:c9:da:8e:8a:e6:4c:30:99:83:be:d6:38:db:50:d8:
66:99:0d:d2:fa:37:d9:e9:63:77:b9:5d:db:f6:27:e5:b5:5f:
a7:0a:16:67:45:f5:04:7c:25:a6:93:5d:11:1c:d7:90:30:56:
fc:5b:a4:00:44:6a:25:33:ff:6c:ea:f0:ba:3c:73:62:35:4c:
49:1e:b6:44:cf:36:4d:d3:16:98:ab:1c:92:c0:70:67:bf:f1:
11:03:04:45:5e:b7:38:c2:43:3a:fd:9f:a3:d6:5c:00:84:7c:
64:05:b8:df:4a:e1:46:1a:5a:fd:53:f4:a7:32:75:24:05:95:
bc:0e:64:71:6e:1a:58:f6:7a:93:64:c8:43:90:d6:00:aa:b7:
84:ee:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:27 2025 by rpki-client