Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zqkDssJzLBHJe2K2FDsRyiyhTy4.roa
File: zqkDssJzLBHJe2K2FDsRyiyhTy4.roa (raw, json)
Hash identifier: bj2Fs3YgeCii550xj8R4ckTThwfOEFelwnDaRnqBm24=
Subject key identifier: CE:A9:03:B2:C2:73:2C:11:C9:7B:62:B6:14:3B:11:CA:2C:A1:4F:2E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0951
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zqkDssJzLBHJe2K2FDsRyiyhTy4.roa
Signing time: Mon 19 May 2025 12:08:12 +0000
ROA not before: Mon 19 May 2025 12:08:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 12:08:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CEA903B2C2732C11C97B62B6143B11CA2CA14F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:fb:b7:a3:60:42:81:f2:5b:76:b2:48:0f:
70:8c:d5:30:a0:ef:c8:4c:51:ef:b8:2a:00:35:df:
3d:11:63:1f:f4:70:ed:10:b6:57:f6:95:b8:5e:f6:
fd:d4:4f:60:42:4c:a5:b3:7b:48:10:80:69:cd:72:
7d:3b:39:6f:17:23:dc:83:dd:1b:7a:8b:f5:90:a4:
78:d5:ca:0e:00:d0:fc:7d:e0:23:34:a8:24:4c:c0:
5d:41:60:82:38:23:10:75:c7:18:5a:c9:90:4e:d7:
f1:72:19:5c:dc:f5:d5:ae:cf:8f:c2:90:a5:09:50:
f8:fc:c8:fa:f9:52:97:76:f8:16:5a:e9:3e:de:29:
b0:d3:13:ad:24:ef:81:9a:ff:f0:5d:6a:2d:20:04:
80:6b:f7:b4:c8:35:37:86:c9:b7:26:91:94:b7:f6:
95:8b:ac:ec:11:7d:19:a1:78:ee:02:60:9c:96:81:
69:f0:71:2b:23:c2:20:86:1d:c7:66:4a:ea:ec:e5:
63:86:f3:62:cf:9e:a5:f0:8c:57:57:cc:3b:c7:26:
5d:ff:ea:c9:40:6f:fd:5f:e1:c8:f5:d4:4d:06:07:
6d:18:4e:cc:24:f9:66:82:d4:06:f7:b8:90:de:6e:
b2:fa:0d:b5:e1:ac:15:77:88:57:fc:f3:d7:0c:40:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:03:B2:C2:73:2C:11:C9:7B:62:B6:14:3B:11:CA:2C:A1:4F:2E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zqkDssJzLBHJe2K2FDsRyiyhTy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:ec:9d:e1:ec:87:5d:bc:f9:23:d6:80:73:a5:30:20:12:c4:
63:7f:21:17:04:e4:da:98:e0:06:20:35:05:2f:ff:c8:d6:2d:
ac:d5:75:da:41:b0:3c:41:ba:8b:23:01:3c:59:cc:13:a5:e7:
cf:a6:37:a0:a9:48:81:1f:77:08:60:ed:59:c9:2e:dc:cf:fd:
d9:51:a8:9d:f1:02:a9:25:65:c1:dc:1c:e7:e9:76:a2:be:61:
f9:85:95:ed:ac:82:0d:a6:5f:4a:9a:d4:8f:98:29:ef:18:d7:
15:0d:71:6a:0a:64:d1:f5:28:eb:42:f0:da:f6:8c:18:30:14:
ee:07:6d:dc:35:a9:bd:60:8d:3b:c7:0e:6b:a5:e6:67:37:81:
ef:ec:53:19:b5:7c:1f:76:11:b8:e0:d1:da:f7:a3:af:fa:9e:
1f:1c:46:bf:07:a0:a9:d5:1a:c3:04:53:94:62:2f:a9:73:84:
e4:9b:61:9f:41:25:fb:ee:39:52:05:de:f2:76:1a:e2:82:e9:
77:dc:87:3c:6f:92:57:0d:45:5c:91:ab:54:31:f8:2a:d2:10:
71:a1:06:6e:c7:03:41:5d:be:cc:1e:a3:ee:86:94:9d:45:98:
b6:20:6e:d9:0c:69:62:64:24:05:25:da:12:8e:0a:4b:ec:19:
d9:42:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:48:15 2025 by rpki-client